Technology Risk Specialist Sr

1 week ago

Phoenix, AZ, United States PNC Full-time

Position Overview At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Technology Senior Specialist within PNC's Technology Risk organization, you will be based in either, Pittsburgh PA, Dallas TX, Strongsville OH, Phoenix AZ or Birmingham AL.

As a Technology Risk Specialist Senior, you will serve as a key member of the Technology Risk Management organization, responsible for executing and enhancing risk management programs across technology domains. This role partners closely with business leaders, engineering teams, governance functions, Compliance, Audit, and Enterprise Risk Management to identify, assess, monitor, and report on technology risks that may impact the business.
The successful candidate will leverage strong analytical, risk management, and communication skills to drive risk transparency, support control effectiveness, and promote a proactive risk culture across the organization.

Job Responsibilities:

• Monitor changes to laws, rules, and regulations to anticipate potential impacts to Technology.
• Perform Regulatory Change assessments on new laws, rules, and guidance to identify if existing policies and controls address the new requirement.
• Lead complex engagements with all levels of management to clearly articulate impacts of regulatory expectations.
• Coordinate the development and execution of action plans for identified gaps to ensure compliance with new requirements.
• Provide guidance on the remediation needed to ensure compliance with expectations.
• Maintain in-depth knowledge of laws and regulations impacting Technology.
• Monitor trends and themes to identify changes to inherent risk.
• Develop and maintain executive level reporting on the status of regulatory change initiatives
• Conduct ongoing monitoring with subject matter experts to ensure ongoing compliance with laws and regulations.
• Responsible for maintaining effective controls associated with regulatory processes.

Risk Advisory:

• Consult with technology and business teams regarding risk-based decision-making.
• Facilitate discussions on risk appetite, control requirements, remediation strategies, and risk acceptance.
• Provide effective challenge to ensure risks are understood and appropriately managed.

Regulatory & Audit Support:

• Support regulatory examinations, internal audits, and external reviews.
• Track remediation plans and verify sustainable resolution of identified findings.
• Ensure adherence to applicable regulatory, policy, and governance obligations.PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals.PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

Job Description

  • Supports the planning and execution of the technology risk management program and associated communication strategies. Applies working knowledge of technology environments (including infrastructure, data, information security, MIS, and governance) and technology risk frameworks to identify, assess, and mitigate technology and associated risks.
  • Engages with technology teams to ensure that technology and other associated risk issues are monitored and communicated through the appropriate levels of management.
  • Assists in the coordination, implementation, an execution of technology risk management activities across the technology organization to meet regulatory expectations and align with organizational risk appetite. May participate in consultation efforts to support implementation of risk program components.
  • Serves as a subject matter expert in technology environments (infrastructure, data, information security, MIS and governance), risk, and governance and control frameworks to proactively identify and address risk exposures. Evaluates business self-assessments and provides insight on alignment with technology risk frameworks, standards, and control requirements.
  • Interprets security and threat intelligence within the context of current technology and control environments to assess impact and inform mitigation strategies. Performs r