Technology Risk Manager Sr

PNC•Strongsville, OH

8d•$146,300 - $326,040•Onsite

About The Position

The Technology Risk Senior Manager leads PNC's Third-Party Technology Risk function and a team of technology risk professionals, with accountability for reducing vendor risk exposure across the enterprise. The role sets the strategy, priorities, standards, and operating model for identifying, assessing, challenging, monitoring, and reducing technology risks associated with vendors, cloud service providers, and material fourth parties. The position leads ongoing development of the third-party technology risk program in line with business needs, risk appetite, and regulatory expectations. It oversees assessment quality, risk tiering, due diligence, residual-risk conclusions, exceptions, risk acceptance, risk indicators, ratings, scorecards, and executive reporting. The role directs analysis of threshold breaches and remediation, and serves as Technology Risk's senior contact for regulatory examinations, Internal Audit, and Independent Risk Management reviews. The Senior Manager partners with Enterprise Third-Party Management and teams across Technology, Information Security, Resilience, Supply Chain, Legal, Independent Risk Management, and Internal Audit. The role advises senior technology leaders, uses documented risk exposure to influence business decisions, and manages, develops, and retains a team. It also drives governance, risk-framework adoption, mitigation strategies, control improvements, and continuous enhancement of technology risk management across multiple domains. This is an in-office position based in Pittsburgh, Pennsylvania; Dallas, Texas; Strongsville, Ohio; Phoenix, Arizona; or Birmingham, Alabama. The role is incentive eligible. PNC does not provide employment visa sponsorship or participate in STEM OPT for this position.

Requirements

Bachelor's degree; a comparable combination of education, job-specific certifications, and experience, including military service, may be considered in lieu of a degree.
Typically 8 or more years of industry-relevant experience.
Typically at least 5 years of prior management experience.
Proven leadership experience with a moderate to large scope of responsibility.
Knowledge and skills in Third-Party Risk Management, Strategic Planning, Risk Management Programs, Regulatory Compliance, People Leadership, Key Risk Indicators, Information Security, Influencing Change, Emerging Risks, Credible Challenge, Conflict Management, and Cloud Governance.
Competencies in decision making and critical thinking, effective communications, industry knowledge, information security management, internal controls, IT environment, managing multiple priorities, operational risk, organizational governance, organizational savvy and politics, and the financial-services regulatory environment.
Ability to lead technology risk functions or programs and drive comprehensive identification, assessment, mitigation, and monitoring of technology risks in alignment with business priorities and regulatory expectations.

Nice To Haves

Higher-level education such as a master's degree or PhD, or certifications, is desirable.
Preferred skills include Change Management, Conflict Management, Crisis Management Planning, Emerging Risks, Operations Management, Program Risk Management, Risk Management Programs, and Strategic Planning.
Experience and competency in Planning and Organizing.

Responsibilities

Lead the Third-Party Technology Risk function and a team of technology risk professionals, driving sustained reduction in vendor risk exposure.
Set strategy, priorities, standards, and the operating model for identifying, measuring, challenging, and reducing third-party technology risk across the enterprise.
Design, develop, and continuously improve the third-party technology risk program to meet business, risk appetite, and regulatory expectations.
Establish the methodology, thresholds, and operating model for evaluating critical and high-risk technology vendors, cloud service providers, and material fourth parties.
Oversee and provide credible challenge of third-party technology risk assessments, inherent risk tiering, due diligence depth, residual-risk conclusions, exceptions, and risk-acceptance decisions.
Identify insufficient coverage, methodology, or evidence quality and drive remediation through program owners and governance forums.
Own third-party technology key risk indicators, vendor risk ratings, scorecards, and executive reporting for Technology Risk.
Interpret threshold breaches for senior leadership and risk committees, direct root-cause analysis, and hold accountable owners to time-bound remediation and demonstrated risk reduction.
Serve as the senior Technology Risk contact for regulatory examinations, Internal Audit, and Independent Risk Management reviews of third-party technology risk.
Own follow-through on findings assigned to Technology and translate supervisory developments into program and control requirements.
Build and maintain executive-level partnerships across Enterprise Third-Party Management, Technology, Information Security, Resilience, Supply Chain, Legal, Independent Risk Management, and Internal Audit.
Influence contract, renewal, investment, contingency, and exit decisions using documented risk exposure.
Manage, develop, and retain technology risk professionals; set the risk-based oversight plan and standards for analysis and credible challenge; manage performance and capacity; and build the team's technical depth and influence.
Establish governance processes and accountability, and drive consistent adoption of risk frameworks, policies, and standards.
Direct complex risk identification and assessment, including forward-looking consideration of emerging technologies, strategic initiatives, and cross-functional exposures; drive mitigation strategies and control improvements.
Advise senior technology leadership on risk posture, influence decisions, and ensure timely escalation and resolution of critical risks.
Oversee risk reporting, metrics, and analytics to deliver actionable insights and strengthen risk awareness and organizational capability.
Meet PNC people-manager expectations by cultivating inclusive teams, role-modeling company values, enabling change, taking ownership of results, and developing talent.

Benefits

Medical and prescription drug coverage, with a Health Savings Account feature, depending on eligibility.
Dental and vision options, depending on eligibility.
Employee and spouse/child life insurance.
Short- and long-term disability protection.
401(k) with PNC match.
Pension and stock purchase plans.
Dependent care reimbursement account.
Back-up child and elder care.
Adoption, surrogacy, and doula reimbursement.
Educational assistance, including select fully paid programs.
Wellness program with financial incentives.
Maternity and/or parental leave, depending on eligibility.
Up to 11 paid holidays each year, depending on eligibility.
9 occasional absence days each year, unless otherwise required by law, depending on eligibility.
15 to 25 vacation days each year, depending on career level and eligibility.
Incentive-eligible compensation based on company, business, and/or individual performance.