LOB Risk Spec Sr

Job description

Position Overview At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a(n) LOB Risk Specialist Senior] within PNC's Technical Risk organization, you will be based in Pittsburgh, PA, Dallas, TX, Denver, CO, Strongsville, OH, Phoenix, AZ and Birmingham, AL. As a LOB Risk Specialist Senior, you will serve as a key member of the Technology Risk Management organization, responsible for executing and enhancing risk management programs across technology domains. This role partners closely with business leaders, engineering teams, governance functions, Compliance, Audit, and Enterprise Risk Management to identify, assess, monitor, and report on technology risks that may impact the business. The successful candidate will leverage strong analytical, risk management, and communication skills to drive risk transparency, support control effectiveness, and promote a proactive risk culture across the organization. Job Description • Executes and enhances Line of Business risk management programs to support business and regulatory objectives. • Identifies, assesses, monitors, and reports on operational, technology, cyber, compliance, and emerging risks. • Performs risk assessments, control evaluations, issue management activities, and quality reviews across business processes and technology platforms. • Provides effective challenge and risk consultation to business and technology partners regarding risk exposures, control effectiveness, remediation plans, and governance requirements. • Supports the development, implementation, and continuous improvement of risk management frameworks, methodologies, standards, and reporting. • Analyzes risk trends, key risk indicators, issues, incidents, policy exceptions, and control weaknesses to identify emerging concerns and escalation needs. • Develops executive-level reporting materials and risk insights for leadership, governance committees, regulators, and internal audit activities. • Partners with first, second, and third line stakeholders to ensure effective risk identification, mitigation, and monitoring. • Participates in enterprise initiatives, strategic programs, technology modernization efforts, and regulatory remediation activities to ensure risks are appropriately managed. • Maintains current knowledge of industry trends, regulatory expectations, emerging technologies, cybersecurity threats, artificial intelligence risks, and operational resilience requirements. • Serves as a trusted advisor to business and technology leaders while promoting adherence to the Enterprise Risk Management Framework. • Execute and enhance the Technology Risk Quantification program that enables business and technology leaders to understand cyber, operational, infrastructure, and emerging technology risks in financial terms. Key Responsibilities: Risk Governance & Oversight • Execute risk programs, including risk assessments, self-assessments, issue management, and control evaluations. • Review technology processes, risks, and controls to identify gaps and recommend improvements. • Support governance forums and risk committees through reporting, analysis, and risk recommendations. Risk Monitoring & Reporting • Monitor metrics, key risk indicators, policy exceptions, control effectiveness results, vulnerabilities, incidents, and operational risk events. • Analyze data and develop meaningful risk insights to support leadership decision-making. • Prepare executive dashboards, committee materials, and regulatory reporting. Risk Advisory: • Consult with technology and business teams regarding risk-based decision-making. • Facilitate discussions on risk appetite, control requirements, remediation strategies, and risk acceptance. • Provide effective challenge to ensure risks are understood and appropriately managed. Regulatory & Audit Support • Support regulatory examinations, internal audits, and external reviews. • Track remediation plans and verify sustainable resolution of identified findings. • Ensure adherence to applicable regulatory, policy, and governance obligations. Risk Quantification Responsibilities Technology Loss Modeling • Develops and enhances technology loss estimation methodologies. • Evaluates loss frequency and severity drivers. • Performs Monte Carlo, scenario-based, and probabilistic analyses where applicable. • Supports capital planning and enterprise risk aggregation activities. Risk Scenario Development • Leads development of enterprise technology risk scenarios across: • Cybersecurity • Infrastructure availability • Cloud services • Identity and Access Management • Data protection • Artificial Intelligence • Third-Party Technology Risk Develops methodologies, models, and frameworks to quantify technology risk exposures, including: • Cybersecurity events • System failures and outages • Data loss and disclosure events • Privilege misuse • Fraud and technology-enabled scams • Third-party technology dependencies • AI and emerging technology risks PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals. PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position. Job Description • Executes the Line of Business Risk Management program, identifying opportunities for enhancement where applicable. Enables line of business adherence with risk management programs. • Participates in the design and development of the risk management program to meet business and regulatory expectations. Leads in the design and development of spe