Technology Risk Advisor

About the role

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers and fostering an inclusive workplace culture where employees feel respected, valued, and have an opportunity to contribute to the company’s success.

As a Technology Risk Advisor within PNC’s Technology organization, you will be based in Pittsburgh, PA; Dallas, TX; Strongsville, OH; Phoenix, AZ; or Birmingham, AL. In this role you will serve as the senior risk leader responsible for establishing and overseeing quantitative technology risk management practices within the Line of Business. You will provide strategic leadership for the identification, measurement, monitoring, and reporting of technology risk exposures and support executive decision-making through data-driven risk insights. The position partners closely with Technology, Information Security, Operational Risk, Audit, Compliance, Finance, and Enterprise Risk Management teams to develop and mature technology risk quantification capabilities that align with PNC’s Enterprise Risk Management Framework and regulatory expectations.

Responsibilities

• Establish and maintain a comprehensive Technology Risk Quantification program that enables business and technology leaders to understand cyber, operational, infrastructure, and emerging technology risks in financial terms.
• Develop methodologies, models, and frameworks to quantify technology risk exposures, including:
  • Cybersecurity events
  • System failures and outages
  • Data loss and disclosure events
  • Privilege misuse
  • Fraud and technology-enabled scams
  • Third-party technology dependencies
  • AI and emerging technology risks
• Oversee development of risk scenarios, loss-event libraries, threat intelligence inputs, and control effectiveness analyses to support risk measurement activities.
• Partner with Technology and Information Security teams to identify key risk indicators, control performance metrics, risk concentration measures, and leading indicators that improve risk visibility and decision-making.
• Provide credible challenge and independent assessment of technology risk exposures, risk acceptance decisions, and remediation priorities.
• Ensure Technology Risk Quantification practices align with:
  • Enterprise Risk Management Framework
  • Operational Risk Management Standards
  • OCC Heightened Standards
  • Regulatory expectations for model governance and risk measurement
  • Industry frameworks (NIST, FAIR, CIS, COBIT)
• Support executive management, risk committees, and Board reporting through development of meaningful quantitative risk insights and scenario-based analyses.
• Lead cross-functional teams in the execution of technology risk assessments, stress testing, operational resilience analyses, and emerging risk evaluations.
• Monitor internal and external risk trends, threat landscape developments, technology modernization initiatives, and regulatory changes to identify emerging risks.
• Oversee the development of risk dashboards and risk appetite metrics that enable leaders to monitor technology risk exposure against established thresholds.
• Develop and mentor technology risk professionals while building organizational capabilities in quantitative risk analysis and risk-informed decision making.

Risk Quantification Responsibilities

• Technology Loss Modeling: Develop and enhance technology loss estimation methodologies; evaluate loss frequency and severity drivers; perform Monte Carlo, scenario-based, and probabilistic analyses where applicable; support capital planning and enterprise risk aggregation activities.
• Risk Scenario Development: Lead development of enterprise technology risk scenarios across cybersecurity, infrastructure availability, cloud services, identity and access management, data protection, artificial intelligence, and third-party technology risk.
• Executive Risk Reporting: Produce executive-level insights that translate technical risk into business impacts; communicate risk exposure using financial, operational, customer, regulatory, and reputational impact perspectives; present findings to senior leadership and governance forums.

Qualifications

• University/college degree typically required; 5+ years of industry-relevant experience.
• Preferred skills and competencies:
  • Cybersecurity
  • Risk quantification
  • Accuracy and attention to detail
  • Industry knowledge
  • Information security management
  • Internal controls
  • IT environment
  • Planning and organizing
  • Problem solving
• In lieu of a degree, a comparable combination of education, job-specific certification(s), and experience (including military service) may be considered.
• Education: Bachelor’s degree
• Certifications: None required
• Licenses: None required

Pay

Base Salary: $91,000 – $202,800. Salaries may vary based on geographic location, market data, and individual skills, experience, and education. This role is incentive eligible with payments based upon company, business, and/or individual performance.