Technology Risk Manager Sr

We need to output HTML fragment with sections: About the role? The posting includes "Position Overview" then "Job Responsibilites:" then "Qualifications:" then later "Job Description" then more "Qualifications". Also "Benefits" and "Pay Transparency". Also location info: "based in either Pittsburgh PA, Dallas TX, Washington, DC". Also "PNC is an in-office company". Also "PNC will not provide sponsorship for employment visas". Also "Application Window". Also "Disability Accommodations Statement". Also "Equal Employment Opportunity". Also "California Residents". We need to remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So we should drop EEO, Disability Accommodations, Application Window? The instruction: remove application instructions. Application Window is basically instruction about posting duration; likely considered application instructions, so drop. Also remove "Disability Accommodations Statement", "EEO", "California Residents". Also remove "PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position." That's maybe not boilerplate? It's a specific condition; but might be considered legal? It's about visa sponsorship; could be considered relevant? The instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. Visa sponsorship might be legal but it's a condition; not sure. Probably keep? It's not EEO. Might be considered relevant info. But we can keep as a short paragraph. We need to include sections only when posting has real specific content. So we need sections: About the role (position overview), Responsibilities, Qualifications, Benefits, Pay, Schedule? Schedule not mentioned. So no Schedule. Benefits present. Pay present (base salary range). Also maybe Location? Not a defined heading but could be part of About the role. We'll include location in About the role paragraph. We must not repeat job title as heading. Use

for section headings. We need to use

• for any list of duties/requirements/benefits. For responsibilities list, we have many bullet-like sentences. We'll convert each sentence into
• . For qualifications list, we have Preferred Skills, Competencies, etc. Might be better to group under Qualifications with subheadings? But we only allowed headings for sections; we could still have

  for Qualifications and inside we can have

  • for each bullet. However the qualifications include multiple categories: Preferred Skills, Competencies, Work Experience, Education, Certifications. We could keep them as separate
    groups with headings? But we cannot add extra headings besides the allowed ones? The instruction only says use

    for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but says use

    for section headings (list). It might be okay to use other headings like

    but not required. Safer to stick to only those headings. So we can have Qualifications section and inside we can have paragraphs describing each category, maybe using

    • for each bullet within each category but we need to differentiate categories. Could use inside
    • to label. We must preserve ALL substantive information; do not invent or summarize away detail. So we need to keep all specifics: list of preferred skills, competencies, work experience details, education, certifications, etc. We also have a second "Qualifications" block later with different content (Preferred Skills Change Management etc). We need to merge? The posting repeats qualifications with slightly different content. We need to preserve all substantive information; we should combine both qualification sections, avoiding duplication but keep unique info. Let's extract. First Qualifications block after "Job Responsibilites:": "Qualifications: Successful candidates must demonstrate appropriate knowledge, skills, and abilities for the role. Listed below are the skills, competencies, work experience, education, and preferred certifications needed to be successful in this position. Preferred Skills Third-Party Risk Management, Strategic Planning, Risk Management Programs, Regulatory Compliance, People Leadership, Key Risk Indicators, Information Security, Influencing Change, Emerging Risks, Credible Challenge, Conflict Management, Cloud Governance Competencies: Decision Making and Critical Thinking, Effective Communications, Industry Knowledge, Information Security Management, Internal Controls, IT Environment, Managing Multiple Priorities, Operational Risk, Organizational Governance, Organizational Savvy and Politics, Regulatory Environment - Financial Services, Talent Management PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals. PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position." Then later after Job Description etc, there is another "Qualifications Successful candidates must demonstrate appropriate knowledge, skills, and abilities for a role. Listed below are skills, competencies, work experience, education, and required certifications/licensures needed to be successful in this position. Preferred Skills Change Management, Conflict Management, Crisis Management Planning, Emerging Risks, Operations Management, Program Risk Management, Risk Management Programs, Strategic Planning Competencies Decision Making and Critical Thinking, Industry Knowledge, Information Security Management, Internal Controls, IT Environment, Organizational Savvy and Politics, Planning and Organizing Work Experience Roles at this level typically require a university / college degree. Higher level education such as a Masters degree, PhD, or certifications is desirable. Industry-relevant experience is typically 8+ years. At least 5 years of prior management experience is typically required. Proven leadership experience with a moderate to large scope of responsibility is required. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered. Education Bachelors Certifications No Required Certification(s) Licenses No Required License(s) Language Assessments No Required Or Preferred Language Assessments" We need to keep all that. Also there is a "Job Description" section with paragraphs. Also "Benefits" section with details. Also "Pay Transparency Base Salary: $146,300.00 – $326,040.00" plus note about incentive eligible. Also location: "based in either Pittsburgh PA, Dallas TX, Washington, DC". Also maybe "PNC is an in-office company". We need to remove boilerplate: Disability Accommodations Statement, EEO, California Residents, Application Window. Also remove duplicated lines: there may be duplicate sentences like "Successful candidates must demonstrate appropriate knowledge, skills, and abilities for the role." appears twice; we can keep one. Now construct HTML. We'll have:

      About the role

      Position overview text: At PNC, our people are our greatest differentiator... As a Technology Risk Senior Manager within PNC's Technology Risk organization, you will be based in either Pittsburgh PA, Dallas TX, Washington, DC. PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals. PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

      Then responsibilities:

      Responsibilities

      • Leads the Third-Party Technology Risk function and a team of technology risk professionals accountable for driving sustained reduction in vendor risk exposure.
      • Sets strategy, priorities, and standards for how third-party technology risk is identified, measured, challenged, and reduced across the enterprise.
      • Leads the design, development, and continuous improvement of the third-party technology risk program to meet business, risk appetite, and regulatory expectations.
      • Establishes the methodology, thresholds, and operating model used to evaluate critical and high-risk technology vendors, cloud service providers, and material fourth parties.
      • Directs oversight and credible challenge of technology-relevant third-party risk assessments, inherent risk tiering, due diligence depth, residual risk conclusions, exceptions, and risk acceptance decisions performed across the enterprise.
      • Determines where coverage, methodology, or evidence quality is insufficient and drives remediation through program owners and governance forums.
      • Owns third-party technology key risk indicators, vendor risk ratings, scorecards, and executive reporting on behalf of Technology Risk.
      • Interprets threshold breaches for senior leadership and risk committees, directs root cause analysis, and holds accountable owners to time-bound remediation and demonstrated risk reduction.
      • Serves as the senior Technology Risk point of contact for regulatory examinations, Internal Audit, and Independent Risk Management reviews of third-party technology risk.
      • Owns follow-through on findings assigned to Technology and translates supervisory developments into program and control requirements.
      • Builds and maintains executive-level partnerships across Enterprise Third-Party Management, Technology, Information Security, Resilience, Supply Chain, Legal, Independent Risk Management, and Internal Audit.
      • Influences contract, renewal, investment, contingency, and exit decisions using documented risk exposure.
      • Manages, develops, and retains a team of technology risk professionals.
      • Sets the risk-based oversight plan, establishes standards for analysis and credible challenge, manages performance and capacity, and builds the team's technical depth and influence with control owners and program teams.
      Then Job Description maybe could be part of Responsibilities? But we have a separate "Job Description" section with paragraphs. Could treat as additional responsibilities or overview. We could add another section maybe "Job Description" but not in allowed headings list? The list includes About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. No Job Description. Could incorporate into Responsibilities or About the role. Better to add as a paragraph under About the role? But we already have About the role. Could add a separate section "Job Description" but not in list; maybe we should avoid creating extra headings. Could merge its content into Responsibilities as additional bullets? The Job Description paragraphs are: "Leads one or more large-scale technology risk functions or programs, driving execution and continuous enhancement of the technology risk management framework across multiple domains. Ensures comprehensive identification, assessment, mitigation, and monitoring of technology risks in alignment with business priorities and regulatory expectations. Establishes and drives governance processes across assigned areas, ensuring clear accountability, effective oversight, and consistent adoption of risk frameworks, policies, and standards. Directs complex risk identification and assessment efforts, with a forward-looking focus on emerging technologies, strategic initiatives, and cross-functional risk exposures. Drives execution of mitigation strategies and control improvements. Acts as a trusted advisor to senior technology leadership, providing insights on risk posture, influencing decision-making, and ensuring timely escalation and resolution of critical risks. Oversees risk reporting, metrics, and analytics, delivering clear, actionable insights while fostering a strong risk-aware culture and strengthening organizational capability in managing technology risk. PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be: Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions. Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework. PNC Also Has Fundamental Expectations Of Our People Managers. As a Manager Of Talent In PNC, You Will Be Expected To: Include Intentionally - Cultivates diverse teams and inclusive workplaces to expand thinking. Live the Values - Role models our values with transparency and courage. Enable Change - Takes action to drive change and innovation that will transform our business. Achieve Results - Takes personal ownership to deliver results. Empowers and trusts others in decision making. Develop the Best - Raises the bar with every talent decision and guides the achievement of all employees and customers." We could incorporate these as additional