Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As an Independent Technology Risk Advisor within PNC's Independent Technology Risk organization, you will be based in Pittsburgh, PA or Cleveland, OH.

This position is primarily based in a PNC location. Responsibilities require time in the office or in the field on a regular basis. Some responsibilities may be performed remotely, at manager’s discretion.

Ideal candidates bring a combination of the following characteristics/skillsets:

• Subject matter expertise in identifying, assessing, and remediating technology risk concerns
• Ability to effectively challenge internal partners on risk assessment outcomes, testing scenarios, and controls limitations
• Exposure to data analytics, software/application engineering, or data management functions and the project management lifecycle
• Understanding of how to apply data to monitor risk program effectiveness – Using data to identify changes in risk occurrences and emerging threats
• Involvement in projects to increase efficiency and effectiveness of departmental standard operating procedures
• Understanding of preparing documentation and drafting responses to regulatory agency bodies, such as the OCC

Prior experience supporting technology risk assessment and remediation within physical and/or digital technology infrastructure for data storage highly preferred.

PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

Job Description

• Supports Independent Technology Risk Management (ITRM) in planning and executing the ITRM program and corresponding communication strategies. Leverages subject matter expertise in technology environments (infrastructure, network, MIS, & cyber) and technology governance and control frameworks to oversee and challenge first line ability to identify, assess, and mitigate technology and cybersecurity risk. Translates cybersecurity and threat intelligence to the current technology and control environments. Responsible for development of qualitative and quantitative risk analytics approaches to independently evaluate technology and cybersecurity risks. Manages relationships with Technology & Operations and the Lines of Business to ensure that technology risk issues are monitored and communicated to the appropriate level of management.
• Coordinates and implements ITRM program to meet regulatory expectations and manage risks within PNCs risk appetite.
• Coordinates the timely and proper execution of the ITRM program within and across the lines of business. Includes consultation to execute the ITRM program components.
• Leverages subject matter expertise in technology environments (infrastructure, network, MIS, & cyber) and risk expertise while working with the businesses and other risk partners (e.g., Compliance, Cyber Security, Technology and Operations Risk, etc.) to proactively identify risk exposures across PNC.
• Leverages subject matter expertise in and technology governance and control frameworks to challenges business self-assessment results (including new initiatives, business as usual activities, and risk management program) and reviews and reports applicable independent analyses.
• Translates cybersecurity and threat intelligence to the current technology and control environments and develops qualitative and quantitative risk analytics approaches to independently evaluate technology and cybersecurity risks.

PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be:

• Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions.
• Managing Risk - Assessing and effectively managi