Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Cloud Security Manager within PNC’s Technology organization, you may be based in Pittsburgh, PA; Cleveland, OH; Birmingham, AL; or Dallas, TX. This position may not be available in all geographic locations.

Why Join Us

PNC places cyber security as a foundational business enabler that is used to empower our business partners to build products securely that our customers and regulators trust. We build security into every aspect of what we do and Cloud is no different. As we continue our journey in utilizing public cloud services, we are seeking to expand our team to ensure cloud workloads adhere to regulatory security requirements.
Our culture is very important to PNC and within the Cloud Security team we have five cultural key pillars that include; Respect, Communications, Accountability, Support, and Growth. We live by the principles we set forth as part of this team.

Cloud Security Manager at PNC

The Cloud Security team consists of Security Engineers that are responsible for deploying security controls as code that optimally prevent security violations from ever occurring in our cloud infrastructure. The team has Responsibility and Accountability for posture assessing cloud workloads and testing security controls through a Software Development Lifecycle (SDLC) process. The controls are analyzed and tested to ensure their effectiveness. Partnering with other members of EIS to ensure they have visibility into security violations with the ability to respond.

What You’ll Do

You will lead a team of Security Engineers and work with the Scrum Master and Product Owner utilizing Agile to plan, track, and deliver business value. Your technical expertise in securing cloud workloads will enable you to define Security Features that are needed to appropriately secure cloud workloads. You will be empowered to make decisions to determine appropriate native and third party products enable Security Engineers to most effectively achieve the team’s mission.

Responsibilities:
• Build, lead, and grow successful engineering team that deliver results.
• Set and execute on team strategy, and share context by elaborating the “why”, empower everyone to achieve their best work, and drive execution of projects while setting clear expectations.
• Ensure the delivery of highly effective security controls at scale against timelines while encouraging creativity.
• Collaborate with other Security teams and business partners to bring consistency to the security controls and processes
• Work with a diverse set of team members to achieve team, organizational, and career goals.
• Work with Product Manager and Product Owner to create Features that deliver business value with appropriate timelines.
• Actively participates in Agile Product Increment (PI) and Sprint Planning as well as daily standup.
• Results are achieved - Ensures challenges/blockers to completing Epic is addressed and resolved.
Requirements:
• Demonstrated experience in leadership role, typically 5 years in management.
• Strong and effective communication ability to convey complex ideas in a simple manner, apply active learning when working with others, and drive teams to resolution during discussions
• A strong understanding of cloud security fundamentals such as Cloud Native Application Platform Protection (CNAPP), IAM, SIEM, Firewalls, Endpoint Protection, and, Encryption
• A solid knowledge of Continuous Integration/Continuous Delivery (CI/CD) pipelines in order to deliver security controls at scale.
• A proven track record of building cultures that encourage ambition and foster empathy. You will create and contribute to a healthy and collaborative culture that showcases PNC’s values
• Past experience deploying cloud security controls that align with CIS Benchmarks, CRI Profile, or other regulatory standards.
• Experience and strong fundamental understanding of CNAPP’s such as Palo Alto’s Prisma Cloud, M