Security Business Partner Sr Security Business Partner Sr - Risk Management & Governance

Job description

Position Overview At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Security Business Partner Sr Security Business Partner Sr within PNC's Enterprise Information Security organization, you can be based in Phoenix, AZ; Lakewood, CO; Pittsburgh, PA; Dallas, TX The Security Business Partner Sr. serves as a strategic partner and relationship manager between Enterprise Information Security and Line of Business. This role ensures that information security requirements, risk considerations, and governance expectations are identified early and incorporated into business initiatives, technology solutions, and risk management activities for the Line of Business. PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals. PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position. Job Description Core Responsibilities Business & Security Partnership • Serve as the security point of contact for Line of Business, Risk, and Technology teams to ensure integrated delivery of cybersecurity services. • Lead the relationship with a Line of Business to ensure successful outcomes and is responsible for the overall client experience within the Security organization, including cybersecurity risk, business demand management, client feedback & relationship management. • Coordinate security input for risk discussions, executive updates, and committee presentations. Initiative Support • Engage across the lifecycle of business and technology initiatives, including RFP activities, technology due diligence, and security approvals. • Promote adoption, accountability, and sustainability of security requirements and controls for Line of Business initiatives. • Ensure that security requirements and standards are identified and incorporated into Line of Business technology solutions and platforms. • Participate in key initiative and program meetings to provide ongoing security and risk input. Risk Management & Governance • Provide guidance to Line of Business on risk assessments, security reviews, and governance activities for initiatives with material technology, data, or business impact. • Partner with Line of Business Risk organization to improve Security posture through the reduction of Policy Exceptions, open vulnerabilities, and implementation of automated identity access controls. • Translate information security requirements and risk considerations into relevant guidance to support informed decision‑making by Line of Business stakeholders. • Provide support for ad‑hoc or high‑priority security situations, including coordination of communications and remediation planning. Organizational Alignment • Senior contributor that engages with Enterprise Information Security teams responsible for Identity and Access Management, Data Protection, Application Security, Cloud Security, Vulnerability Management, and Policy and Governance. Preferred Skills & Experience • CISSP, CRISC, or CISA certification • 5 years’ experience in information security, risk or audit. • 3 years’ experience in information security, technology risk, or related technology roles within large, complex enterprise environments • Expertise in one or more enterprise security domains such as Identity Access Management, Data Protection, Cloud Security, and Risk Management • Demonstrated ability to work effectively with business, technology, and risk stakeholders. • Experience supporting regulated financial services or large institutional lines of business. • Expertise in multiple enterprise security domains such as Identity Access Management, Data Protection, Cloud Security, and Risk Management. PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be: • Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions. • Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework. Qualifications Successful candidates must demonstrate appropriate knowledge, skills, and abilities for a role. Listed below are skills, competencies, work experience, education, and required certifications/licensures needed to be successful in this position. Preferred Skills Access Control (AC), Building Architecture, Customer Solutions, Cyber Security Governance, Disaster Recovery Planning, Information Security, Network Security, Physical Security, Risk Assessments, Risk Management, Security Technologies Competencies Business Acumen, Effective Communications, Influencing, Problem Solving, Relationship Management, Strategic Thinking Work Experience Roles at this level typically require a university / college degree. Higher level education such as a Masters degree, PhD, or certifications is desirable. Industry relevant experience is typically 8+ years. Specific certifications are often required. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered. Education Certifications No Required Certification(s) Licenses No Required License(s) Language Assessments No Required or Preferred Language Assessments Pay Transparency Base Salary: $112,000.00 – $249,600.00 Salaries may vary based on