Technology Risk Manager Sr

PNC Bank•Pittsburgh, PA

7d•$146,300 - $326,040•Onsite

About The Position

PNC is hiring a Technology Risk Senior Manager in its Technology Risk organization. The role leads the Third-Party Technology Risk function and a team of technology risk professionals, setting strategy, priorities, standards, and the operating model for identifying, measuring, challenging, and reducing third-party technology risk across the enterprise. The position oversees risk program design and improvement, including evaluation of critical and high-risk technology vendors, cloud service providers, and material fourth parties, in alignment with business needs, risk appetite, and regulatory expectations. The role owns third-party technology risk indicators, vendor ratings, scorecards, and executive reporting. It directs credible challenge of assessments, due diligence, residual risk conclusions, exceptions, and risk acceptance decisions; identifies weaknesses in coverage, methodology, and evidence; and drives remediation through accountable owners and governance forums. The Senior Manager also serves as the senior Technology Risk contact for regulatory examinations, Internal Audit, and Independent Risk Management reviews, and translates supervisory developments and findings into program and control requirements. The position builds executive-level partnerships across Enterprise Third-Party Management, Technology, Information Security, Resilience, Supply Chain, Legal, Independent Risk Management, and Internal Audit. It uses documented risk exposure to influence contract, renewal, investment, contingency, and exit decisions, and manages, develops, and retains a team by setting oversight plans, analysis standards, performance expectations, and team capacity. More broadly, the role leads large-scale technology risk programs and drives ongoing enhancement of the technology risk management framework across multiple domains. It establishes governance, directs complex and forward-looking risk assessments, drives mitigation and control improvements, advises senior technology leaders, oversees risk reporting and analytics, and promotes a risk-aware culture. The role is based in-office in Pittsburgh, Pennsylvania; Dallas, Texas; Strongsville, Ohio; Phoenix, Arizona; or Birmingham, Alabama. PNC does not provide employment visa sponsorship or participate in STEM OPT for this position.

Requirements

Bachelor’s degree; a comparable combination of education, job-specific certifications, and experience may be considered in lieu of a degree.
Typically 8 or more years of industry-relevant experience.
Typically at least 5 years of prior management experience.
Proven leadership experience with a moderate to large scope of responsibility.
Knowledge and skills in Third-Party Risk Management, Strategic Planning, Risk Management Programs, Regulatory Compliance, People Leadership, Key Risk Indicators, Information Security, Influencing Change, Emerging Risks, Credible Challenge, Conflict Management, and Cloud Governance.
Competencies in Decision Making and Critical Thinking, Effective Communications, Industry Knowledge, Information Security Management, Internal Controls, IT Environment, Managing Multiple Priorities, Operational Risk, Organizational Governance, Organizational Savvy and Politics, the Financial Services Regulatory Environment, and Talent Management.
PNC does not provide sponsorship for employment visas or participate in STEM OPT for this position.

Nice To Haves

A master’s degree, PhD, or certifications are desirable.
Preferred skills include Change Management, Conflict Management, Crisis Management Planning, Emerging Risks, Operations Management, Program Risk Management, Risk Management Programs, and Strategic Planning.
Preferred competencies include Decision Making and Critical Thinking, Industry Knowledge, Information Security Management, Internal Controls, IT Environment, Organizational Savvy and Politics, and Planning and Organizing.

Responsibilities

Lead the Third-Party Technology Risk function and a team of technology risk professionals focused on sustained reduction of vendor risk exposure.
Set strategy, priorities, standards, methodology, thresholds, and operating model for enterprise third-party technology risk management.
Design and continuously improve the third-party technology risk program to meet business, risk appetite, and regulatory expectations.
Direct oversight and credible challenge of third-party risk assessments, inherent risk tiering, due diligence, residual risk conclusions, exceptions, and risk acceptance decisions.
Identify insufficient risk coverage, methodology, or evidence quality and drive remediation through program owners and governance forums.
Own third-party technology key risk indicators, vendor risk ratings, scorecards, and executive reporting.
Interpret threshold breaches for senior leadership and risk committees, direct root cause analysis, and hold accountable owners to time-bound remediation and demonstrated risk reduction.
Serve as the senior Technology Risk contact for regulatory examinations, Internal Audit, and Independent Risk Management reviews of third-party technology risk.
Own follow-through on findings assigned to Technology and translate supervisory developments into program and control requirements.
Build and maintain executive partnerships across Enterprise Third-Party Management, Technology, Information Security, Resilience, Supply Chain, Legal, Independent Risk Management, and Internal Audit.
Influence contract, renewal, investment, contingency, and exit decisions using documented risk exposure.
Manage, develop, and retain technology risk professionals; set risk-based oversight plans and standards for analysis and credible challenge; manage performance and capacity; and build team expertise and influence.
Lead large-scale technology risk functions or programs and continuously enhance the technology risk management framework across multiple domains.
Establish governance processes that ensure accountability, effective oversight, and consistent adoption of risk frameworks, policies, and standards.
Direct complex risk identification and assessment, considering emerging technologies, strategic initiatives, and cross-functional exposures.
Drive risk mitigation strategies and control improvements; advise senior technology leadership on risk posture and escalate critical risks for timely resolution.
Oversee risk reporting, metrics, and analytics and foster a strong risk-aware culture and organizational capability.

Benefits

Medical and prescription drug coverage, including a Health Savings Account feature
Dental insurance
Vision insurance
Employee and spouse/child life insurance
Short- and long-term disability protection
401(k) with PNC match
Pension plan
Stock purchase plans
Dependent care reimbursement account
Back-up child and elder care
Adoption, surrogacy, and doula reimbursement
Educational assistance, including select fully paid programs
Wellness program with financial incentives
Maternity and/or parental leave
Up to 11 paid holidays each year
9 occasional absence days each year, unless otherwise required by law
15 to 25 vacation days each year, depending on career level and years of service
Incentive compensation based on company, business, and/or individual performance