P

PNC Financial Services

Runs a national bank for people and businesses

Technology Risk Advisor - Risk Quantification

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-time

About the Job

Requirements

  • Roles at this level typically require a university or college degree, with 5 or more years of industry-relevant experience; comparable education, job-specific certifications, and experience, including military service, may be considered in lieu of a degree.
  • Knowledge and abilities in cybersecurity and risk quantification are preferred.
  • Relevant competencies include accuracy and attention to detail, industry knowledge, information security management, internal controls, IT environment, planning and organizing, and problem solving.

Responsibilities

  • Establish and maintain a comprehensive Technology Risk Quantification program so business and technology leaders can understand cyber, operational, infrastructure, and emerging technology risks in financial terms.
  • Develop methodologies, models, and frameworks to quantify technology risk exposures, including cybersecurity events, system failures and outages, data loss and disclosure events, privilege misuse, fraud and technology-enabled scams, third-party technology dependencies, and artificial intelligence and emerging technology risks.
  • Oversee development of risk scenarios, loss-event libraries, threat intelligence inputs, and control effectiveness analyses to support risk measurement.
  • Partner with Technology and Information Security teams to identify key risk indicators, control performance metrics, risk concentration measures, and leading indicators that improve risk visibility and decision-making.
  • Provide credible challenge and independent assessment of technology risk exposures, risk acceptance decisions, and remediation priorities.
  • Align technology risk quantification practices with the Enterprise Risk Management Framework, Operational Risk Management Standards, OCC Heightened Standards, regulatory expectations for model governance and risk measurement, and industry frameworks including NIST, FAIR, CIS, and COBIT.
  • Support executive management, risk committees, and Board reporting by developing quantitative risk insights and scenario-based analyses.
  • Lead cross-functional teams in technology risk assessments, stress testing, operational resilience analyses, and emerging risk evaluations.
  • Monitor internal and external risk trends, threat landscape developments, technology modernization initiatives, and regulatory changes to identify emerging risks.
  • Oversee development of risk dashboards and risk appetite metrics that enable leaders to monitor technology risk exposure against established thresholds.
  • Develop and mentor technology risk professionals and build organizational capabilities in quantitative risk analysis and risk-informed decision-making.
  • Develop and enhance technology loss estimation methodologies; evaluate loss frequency and severity drivers; perform Monte Carlo, scenario-based, and probabilistic analyses where applicable; and support capital planning and enterprise risk aggregation activities.
  • Lead development of enterprise technology risk scenarios across cybersecurity, infrastructure availability, cloud services, identity and access management, data protection, artificial intelligence, and third-party technology risk.
  • Produce executive-level insights that translate technical risk into business impacts; communicate risk exposure through financial, operational, customer, regulatory, and reputational impact perspectives; and present findings to senior leadership and governance forums.
  • Influence the planning and execution of the technology risk management program and associated communication strategies, using expertise in technology environments and technology risk frameworks to identify, assess, and mitigate technology and associated risks.
  • Build and manage relationships with technology leadership so technology and associated risk issues are monitored and communicated through appropriate management levels.
  • Lead coordination, implementation, and execution of technology risk management activities across technology segments to meet regulatory expectations and align with organizational risk appetite; provide consultation supporting implementation of risk program components.
  • Serve as an escalation point and senior subject matter expert in technology environments, risk, governance, and control frameworks to proactively identify and address risk exposures; evaluate business self-assessments and assess alignment with technology risk frameworks, standards, and control requirements.
  • Interpret security and threat intelligence in the context of current technology and control environments to assess impact and inform mitigation strategies; develop risk analysis approaches to assess technology risks, identify trends, and support risk-informed decision-making.
  • Assess and effectively manage risks associated with business objectives and activities to support adherence to PNC's Enterprise Risk Management Framework.

Desired Qualifications

  • Specific certifications are often required at this role level, but no particular certification is specified as required or preferred.
  • The role is incentive eligible, with payment based on company, business, and/or individual performance.

About the Company

PNC Financial Services

Runs a national bank for people and businesses

PNC Financial Services runs one of the largest banks in America, serving households and businesses of every size through branches, apps, and corporate bankers. Acquisitions turned it from a regional lender into a coast-to-coast bank, notably its purchases of National City during the 2008 financial crisis and BBVA USA in 2021. Consumers keep checking and savings accounts, such as Virtual Wallet with its built-in budgeting tools, and take out mortgages and credit cards, while companies borrow and manage cash through PNC. It earns most of its money on the gap between loan interest and deposit costs, and the rest from fees. PNC traces its roots to a savings bank founded in 1845 and is based in Pittsburgh, Pennsylvania.

Company size
10,001+
Company stage
IPO
Headquarters
Pittsburgh, PA
Founded
1845

Recently Posted Jobs

Explore more opportunities at PNC Financial Services

See more jobs