Technology Risk Specialist Sr

About this role

Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a(n) Technology Risk Specialist Sr. within PNC's Technology organization, you will be based in Pittsburg PA, Dallas TX, Strongsville OH, Birmingham AL, Phoenix AZ and Denver CO.

As a LOB Risk Specialist Senior, you will serve as a key member of the Technology Risk Management organization, responsible for executing and enhancing risk management programs across technology domains. This role partners closely with business leaders, engineering teams, governance functions, Compliance, Audit, and Enterprise Risk Management to identify, assess, monitor, and report on technology risks that may impact the business. The successful candidate will leverage strong analytical, risk management, and communication skills to drive risk transparency, support control effectiveness, and promote a proactive risk culture across the organization.

Job Description • Executes and enhances Line of Business risk management programs to support business and regulatory objectives. • Identifies, assesses, monitors, and reports on operational, technology, cyber, compliance, and emerging risks. • Performs risk assessments, control evaluations, issue management activities, and quality reviews across business processes and technology platforms. • Provides effective challenge and risk consultation to business and technology partners regarding risk exposures, control effectiveness, remediation plans, and governance requirements. • Supports the development, implementation, and continuous improvement of risk management frameworks, methodologies, standards, and reporting. • Analyzes risk trends, key risk indicators, issues, incidents, policy exceptions, and control weaknesses to identify emerging concerns and escalation needs. • Develops executive-level reporting materials and risk insights for leadership, governance committees, regulators, and internal audit activities. • Partners with first, second, and third line stakeholders to ensure effective risk identification, mitigation, and monitoring. • Participates in enterprise initiatives, strategic programs, technology modernization efforts, and regulatory remediation activities to ensure risks are appropriately managed. • Maintains current knowledge of industry trends, regulatory expectations, emerging technologies, cybersecurity threats, artificial intelligence risks, and operational resilience requirements. • Serves as a trusted advisor to business and technology leaders while promoting adherence to the Enterprise Risk Management Framework. • Execute and enhance the Technology Risk Quantification program that enables business and technology leaders to understand cyber, operational, infrastructure, and emerging technology risks in financial terms.

Key Responsibilities:

Risk Governance & Oversight • Execute risk programs, including risk assessments, self-assessments, issue management, and control evaluations. • Review technology processes, risks, and controls to identify gaps and recommend improvements. • Support governance forums and risk committees through reporting, analysis, and risk recommendations. Risk Monitoring & Reporting • Monitor metrics, key risk indicators, policy exceptions, control effectiveness results, vulnerabilities, incidents, and operational risk events. • Analyze data and develop meaningful risk insights to support leadership decision-making. • Prepare executive dashboards, committee materials, and regulatory reporting.

Risk Advisory: • Consult with technology and business teams regarding risk-based decision-making. • Facilitate discussions on risk appetite, control requirements, remediation strategies, and risk acceptance. • Provide effective challenge to ensure risks are understood and appropriately managed.

Regulatory & Audit Support • Support regulatory examinations, internal audits, and external reviews. • Track remediation plans and verify sustainable resolution of identified findings. • Ensure adherence to applicable regulatory, policy, and governance obligations.

Risk Quantification Responsibilities Technology Loss Modeling • Develops and enhances technology loss estimation methodologies. • Evaluates loss frequency and severity drivers. • Performs Monte Carlo, scenario-based, and probabilistic analyses where applicable. • Supports capital planning and enterprise risk aggregation activities.

Risk Scenario Development • Leads development of enterprise technology risk scenarios across: • Cybersecurity • Infrastructure availability • Cloud services • Identity and Access Management • Data protection • Artificial Intelligence • Third-Party Technology Risk

Develops methodologies, models, and frameworks to quantify technology risk exposures, including: • Cybersecurity events • System failures and outages • Data loss and disclosure events • Privilege misuse • Fraud and technology-enabled scams • Third-party technology dependencies • AI and emerging technology risks

PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals.  

PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

Job Description • Supports the planning and execution of the technology risk management program and associated communication strategies. Applies working knowledge of technology environments (including infrastructure, data, information security, MIS, and governance) and technology risk frameworks to identify, assess, and mitigate technology and associated

Similar jobs

• Technology Risk Advisor — PNC · PA - Pittsburgh (15222)
• Technology Risk Advisor — PNC · PA - Pittsburgh (15222) | Strongsville (OH090) | AZ - Phoenix
• Senior Risk Specialist — Parsons · Remote
• Technology Risk & Compliance Analyst — Bb Insurance · Remote
• Security Risk Management Specialist II — Affirm · Remote
• Risk Technology Consultant — Crowe · Chicago IL USA | San Francisco CA USA | Los Angeles CA USA
• Information Security Risk Specialist — Booz Allen Hamilton · Remote
• Technology Risk and Controls Senior Consultant — Crowe · Chicago IL USA | Dallas TX USA | New York NY USA