Technology Risk Specialist Sr

PNC Bank•Pittsburgh, PA

3d•Onsite

About The Position

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a(n) Technology Risk Specialist Sr. within PNC's Technology organization, you will be based in Pittsburg PA, Dallas TX, Strongsville OH, Birmingham AL, Phoenix AZ and Denver CO. As a LOB Risk Specialist Senior, you will serve as a key member of the Technology Risk Management organization, responsible for executing and enhancing risk management programs across technology domains. This role partners closely with business leaders, engineering teams, governance functions, Compliance, Audit, and Enterprise Risk Management to identify, assess, monitor, and report on technology risks that may impact the business. The successful candidate will leverage strong analytical, risk management, and communication skills to drive risk transparency, support control effectiveness, and promote a proactive risk culture across the organization. PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals. PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

Requirements

Successful candidates must demonstrate appropriate knowledge, skills, and abilities for a role.
Roles at this level typically require a university / college degree, with 3+ years of relevant / direct industry experience.
In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.
Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions.
Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework.

Nice To Haves

Risk Quantification Competencies
Accuracy and Attention to Detail
Industry Knowledge
Information Security Management
Internal Controls
IT Environment
Planning and Organizing
Problem Solving
Certifications are often desired.

Responsibilities

Executes and enhances Line of Business risk management programs to support business and regulatory objectives.
Identifies, assesses, monitors, and reports on operational, technology, cyber, compliance, and emerging risks.
Performs risk assessments, control evaluations, issue management activities, and quality reviews across business processes and technology platforms.
Provides effective challenge and risk consultation to business and technology partners regarding risk exposures, control effectiveness, remediation plans, and governance requirements.
Supports the development, implementation, and continuous improvement of risk management frameworks, methodologies, standards, and reporting.
Analyzes risk trends, key risk indicators, issues, incidents, policy exceptions, and control weaknesses to identify emerging concerns and escalation needs.
Develops executive-level reporting materials and risk insights for leadership, governance committees, regulators, and internal audit activities.
Partners with first, second, and third line stakeholders to ensure effective risk identification, mitigation, and monitoring.
Participates in enterprise initiatives, strategic programs, technology modernization efforts, and regulatory remediation activities to ensure risks are appropriately managed.
Maintains current knowledge of industry trends, regulatory expectations, emerging technologies, cybersecurity threats, artificial intelligence risks, and operational resilience requirements.
Serves as a trusted advisor to business and technology leaders while promoting adherence to the Enterprise Risk Management Framework.
Execute and enhance the Technology Risk Quantification program that enables business and technology leaders to understand cyber, operational, infrastructure, and emerging technology risks in financial terms.
Execute risk programs, including risk assessments, self-assessments, issue management, and control evaluations.
Review technology processes, risks, and controls to identify gaps and recommend improvements.
Support governance forums and risk committees through reporting, analysis, and risk recommendations.
Monitor metrics, key risk indicators, policy exceptions, control effectiveness results, vulnerabilities, incidents, and operational risk events.
Analyze data and develop meaningful risk insights to support leadership decision-making.
Prepare executive dashboards, committee materials, and regulatory reporting.
Consult with technology and business teams regarding risk-based decision-making.
Facilitate discussions on risk appetite, control requirements, remediation strategies, and risk acceptance.
Provide effective challenge to ensure risks are understood and appropriately managed.
Support regulatory examinations, internal audits, and external reviews.
Track remediation plans and verify sustainable resolution of identified findings.
Ensure adherence to applicable regulatory, policy, and governance obligations.
Develops and enhances technology loss estimation methodologies.
Evaluates loss frequency and severity drivers.
Performs Monte Carlo, scenario-based, and probabilistic analyses where applicable.
Supports capital planning and enterprise risk aggregation activities.
Leads development of enterprise technology risk scenarios across: Cybersecurity, Infrastructure availability, Cloud services, Identity and Access Management, Data protection, Artificial Intelligence, Third-Party Technology Risk.
Develops methodologies, models, and frameworks to quantify technology risk exposures, including: Cybersecurity events, System failures and outages, Data loss and disclosure events, Privilege misuse, Fraud and technology-enabled scams, Third-party technology dependencies, AI and emerging technology risks.
Supports the planning and execution of the technology risk management program and associated communication strategies.
Applies working knowledge of technology environments (including infrastructure, data, information security, MIS, and governance) and technology risk frameworks to identify, assess, and mitigate technology and associated risks.
Engages with technology teams to ensure that technology and other associated risk issues are monitored and communicated through the appropriate levels of management.
Assists in the coordination, implementation, an execution of technology risk management activities across the technology organization to meet regulatory expectations and align with organizational risk appetite.
May participate in consultation efforts to support implementation of risk program components.
Serves as a subject matter expert in technology environments (infrastructure, data, information security, MIS and governance), risk, and governance and control frameworks to proactively identify and address risk exposures.
Evaluates business self-assessments and provides insight on alignment with technology risk frameworks, standards, and control requirements.
Interprets security and threat intelligence within the context of current technology and control environments to assess impact and inform mitigation strategies.
Performs risk analysis to assess technology risks, identify trends, and support risk-informed decision-making.

Benefits

medical/prescription drug coverage (with a Health Savings Account feature)
dental and vision options
employee and spouse/child life insurance
short and long-term disability protection
401(k) with PNC match
pension and stock purchase plans
dependent care reimbursement account
back-up child/elder care
adoption, surrogacy, and doula reimbursement
educational assistance, including select programs fully paid
a robust wellness program with financial incentives
maternity and/or parental leave
up to 11 paid holidays each year
9 occasional absence days each year, unless otherwise required by law
between 15 to 25 vacation days each year, depending on career level; and years of service.