Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. Preferred locations are listed, other locations may be considered based on experience.

PNC Legal is seeking an experienced lawyer to provide legal support on issues related to technology, data, privacy, and security. The candidate should have a strong background in driving secure technology initiatives in highly regulated or sensitive environments.

This attorney will be responsible for providing legal advice and support throughout the organization on a wide variety of matters of varying complexity with a particular focus on domestic and international privacy, data management, artificial intelligence, operational resiliency, data protection, incident management, the various pillars of security, and the practical implementation of laws for all such topics. The role involves integration and collaboration cross-functionally with business units as well as shared services in the bank to protect customer data and fulfil regulatory obligations.

The position requires the following areas of experience:

• Extensive experience analyzing and applying corporate policies, laws and regulations relating to information use, privacy, and data protection such as GLBA, Reg P, FCRA, RFPA, HIPAA, CCPA, GDPR, PIPEDA, TCPA, CAN-SPAM, and other federal, state, and international privacy and data protection laws.
• Proficient with online and mobile privacy laws, and privacy notice and disclosure requirements.
• Understanding and support for incident response processes consistent with FFIEC guidance and state data breach laws.
• Familiarity with privacy issues intersecting with employment and security, both in the US and internationally.
• Advising on emerging technologies and how to proactively build towards compliant solutions, such as in generative artificial intelligence.
• Experience analyzing, drafting, and consulting on contractual terms dealing with privacy, data use, and security standards related to third parties such as vendors and clients.
• Knowledge of privacy and security control frameworks such as NIST and ISO.
• Work with a global team of privacy, data, security, and technology professionals.
• Knowledge of digital marketing technologies and implementation requirements.
• Advise the company’s privacy, security, business, and product teams on appropriate controls to comply with global regulatory requirements, including international data transfers, standard contractual clauses, and other lawful transfer mechanisms.
• Conduct and review privacy and data governance assessments for new and emerging products and services.
• Ability to assess risk in a dynamic environment and provide constructive mitigation options.
• Provide subject matter advice and support in connection with regulatory inquiries, data subject access requests, and the underlying policies and procedures to support privacy and security.
• Stay current and provide feedback on relevant U.S. and international laws and regulations, especially those related to technology, security, and data privacy.
• Review and analyze new/updated/proposed laws to determine applicability, potential impact to the business, and suggested revisions.
• Proven ability to prioritize and manage a dynamic workload independently.
• Ability to translate legal advice into practical objectives to assist in innovation while maintaining compliance with applicable laws and regulations.

Job Description

• Performs significant and complex legal work while regularly interacting with management. Oversees legal research, analysis, consultation, and documentation within a framework of legal compliance and risk management.
• Responsible for managing the expense for outside counsel relationships, provides strategic direction on when to leverage outside counsel.
• Works with outside counsel combining their advice with analysis and feedback from internal stakeholders to provide practical guidance.
• Networks with outside