Position Overview

As a(n) Technology Risk Specialist Sr. within PNC's Technology organization, you will be based in Pittsburg PA, Dallas TX, Strongsville OH, Birmingham AL, Phoenix AZ and Denver CO.

As a LOB Risk Specialist Senior, you will serve as a key member of the Technology Risk Management organization, responsible for executing and enhancing risk management programs across technology domains. This role partners closely with business leaders, engineering teams, governance functions, Compliance, Audit, and Enterprise Risk Management to identify, assess, monitor, and report on technology risks that may impact the business.
The successful candidate will leverage strong analytical, risk management, and communication skills to drive risk transparency, support control effectiveness, and promote a proactive risk culture across the organization.

Job Description
• Executes and enhances Line of Business risk management programs to support business and regulatory objectives.
• Identifies, assesses, monitors, and reports on operational, technology, cyber, compliance, and emerging risks.
• Performs risk assessments, control evaluations, issue management activities, and quality reviews across business processes and technology platforms.
• Provides effective challenge and risk consultation to business and technology partners regarding risk exposures, control effectiveness, remediation plans, and governance requirements.
• Supports the development, implementation, and continuous improvement of risk management frameworks, methodologies, standards, and reporting.
• Analyzes risk trends, key risk indicators, issues, incidents, policy exceptions, and control weaknesses to identify emerging concerns and escalation needs.
• Develops executive-level reporting materials and risk insights for leadership, governance committees, regulators, and internal audit activities.
• Partners with first, second, and third line stakeholders to ensure effective risk identification, mitigation, and monitoring.
• Participates in enterprise initiatives, strategic programs, technology modernization efforts, and regulatory remediation activities to ensure risks are appropriately managed.
• Maintains current knowledge of industry trends, regulatory expectations, emerging technologies, cybersecurity threats, artificial intelligence risks, and operational resilience requirements.
• Serves as a trusted advisor to business and technology leaders while promoting adherence to the Enterprise Risk Management Framework.
• Execute and enhance the Technology Risk Quantification program that enables business and technology leaders to understand cyber, operational, infrastructure, and emerging technology risks in financial terms.

Key Responsibilities:

Risk Governance & Oversight
• Execute risk programs, including risk assessments, self-assessments, issue management, and control evaluations.
• Review technology processes, risks, and controls to identify gaps and recommend improvements.
• Support governance forums and risk committees through reporting, analysis, and risk recommendations.
Risk Monitoring & Reporting
• Monitor metrics, key risk indicators, policy exceptions, control effectiveness results, vulnerabilities, incidents, and operational risk events.
• Analyze data and develop meaningful risk insights to support leadership decision-making.
• Prepare executive dashboards, committee materials, and regulatory reporting.

Risk Advisory:
• Consult with technology and business teams regarding risk-based decision-making.
• Facilitate discussions on risk appetite, control requirements, remediation strategies, and risk acceptance.
• Provide effective challenge to ensure risks are understood and appropriately managed.

Regulatory & Audit Support
• Support regulatory examinations, internal audits, and external reviews.
• Track remediation plans and verify sustainable resolution of identified findings.
• Ensure adherence to applicable regulatory, policy, and governance obligations.

Risk Quantification Responsibilities
Technology Loss Modeling
• Develops and enhances technology loss estimation methodologies.
• Evaluates loss frequency and severity drivers.
• Performs Monte Carlo, scenario-based, and probabilistic analyses where applicable.
• Supports capital planning and enterprise risk aggregation activities.

Risk Scenario Development
• Leads development of enterprise technology risk scenarios across:
• Cybersecurity
• Infrastructure availability
• Cloud services
• Identity and Access Management
• Data protection
• Artificial Intelligence
• Third-Party Technology Risk

Develops methodologies, models, and frameworks to quantify technology risk exposures, including:
• Cybersecurity events
• System failures and outages
• Data loss and disclosure events
• Privilege misuse
• Fraud and technology-enabled scams
• Third-party technology dependencies
• AI and emerging technology risks

PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals.

PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

Job Description

• Supports the planning and execution of the technology risk management program and associated communication strategies. Applies working knowledge of technology environments (including infrastructure, data, information security, MIS, and governance) and technology risk frameworks to identify, assess, and mitigate technology and associated risks.
• Engages with technology teams to ensure that technology and other associated risk issues are monitored and communicated through the appropriate levels of management.
• Assists in the coordination, implementation, an execution of technology risk management activities across the technology organization to meet regulatory expectations and align with organizational risk appetite. May participate in consultation efforts to support implementation of risk program components.
• Serves as a subject matter expert in technology environments (infrastructure, data, information security, MIS and governance), risk, and governance and control frameworks to proactively identify and address risk exposures. Evaluates business self-assessments and provides insight on alignment with technology risk frameworks, standards, and control requirements.
• Interprets security and threat intelligence within the context of current technology and control environments to assess impact and inform mitigation strategies. Performs risk analysis to assess technology risks, identify trends, and support risk-informed decision-making.

PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be:

• Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions.
• Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework.

Qualifications

Successful candidates must demonstrate appropriate knowledge, skills, and abilities for a role. Listed below are skills, competencies, work experience, education, and required certifications/licensures needed to be successful in this position.

Preferred Skills
Risk Quantification

Competencies
Accuracy and Attention to Detail, Industry Knowledge, Information Security Management, Internal Controls, IT Environment, Planning and Organizing, Problem Solving

Work Experience
Roles at this level typically require a university / college degree, with 3+ years of relevant / direct industry experience. Certifications are often desired. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.

Education
Bachelors

Certifications
No Required Certification(s)

Licenses
No Required License(s)

Language Assessments

No Required or Preferred Language Assessments

Pay Transparency

Base Salary: $86,250.00 - $172,500.00

Salaries may vary based on geographic location, market data and on individual skills, experience, and education. This role is incentive eligible with the payment based upon company, business and/or individual performance.

Application Window

Generally, this opening is expected to be posted for two business days from 09/01/2026, although it may be longer with business discretion.

Benefits

PNC offers a comprehensive range of benefits to help meet your needs now and in the future. Depending on your eligibility, options for full-time employees include: medical/prescription drug coverage (with a Health Savings Account feature), dental and vision options; employee and spouse/child life insurance; short and long-term disability protection; 401(k) with PNC match, pension and stock purchase plans; dependent care reimbursement account; back-up child/elder care; adoption, surrogacy, and doula reimbursement; educational assistance, including select programs fully paid; a robust wellness program with financial incentives.

In addition, PNC generally provides the following paid time off, depending on your eligibility: maternity and/or parental leave; up to 11 paid holidays each year; 9 occasional absence days each year, unless otherwise required by law; between 15 to 25 vacation days each year, depending on career level; and years of service.

To learn more about these and other programs, including benefits for full time and part-time employees, visit pncthrive.com.