About the Role
Job Responsibilites:
Leads the Third-Party Technology Risk function and a team of technology risk professionals accountable for driving sustained reduction in vendor risk exposure. Sets strategy, priorities, and standards for how third-party technology risk is identified, measured, challenged, and reduced across the enterprise.
Leads the design, development, and continuous improvement of the third-party technology risk program to meet business, risk appetite, and regulatory expectations. Establishes the methodology, thresholds, and operating model used to evaluate critical and high-risk technology vendors, cloud service providers, and material fourth parties.
Directs oversight and credible challenge of technology-relevant third-party risk assessments, inherent risk tiering, due diligence depth, residual risk conclusions, exceptions, and risk acceptance decisions performed across the enterprise. Determines where coverage, methodology, or evidence quality is insufficient and drives remediation through program owners and governance forums.
Owns third-party technology key risk indicators, vendor risk ratings, scorecards, and executive reporting on behalf of Technology Risk. Interprets threshold breaches for senior leadership and risk committees, directs root cause analysis, and holds accountable owners to time-bound remediation and demonstrated risk reduction.
Serves as the senior Technology Risk point of contact for regulatory examinations, Internal Audit, and Independent Risk Management reviews of third-party technology risk. Owns follow-through on findings assigned to Technology and translates supervisory developments into program and control requirements.
Builds and maintains executive-level partnerships across Enterprise Third-Party Management, Technology, Information Security, Resilience, Supply Chain, Legal, Independent Risk Management, and Internal Audit. Influences contract, renewal, investment, contingency, and exit decisions using documented risk exposure.
Manages, develops, and retains a team of technology risk professionals. Sets the risk-based oversight plan, establishes standards for analysis and credible challenge, manages performance and capacity, and builds the team's technical depth and influence with control owners and program teams.
Requirements
Qualifications:
Successful candidates must demonstrate appropriate knowledge, skills, and abilities for the role. Listed below are the skills, competencies, work experience, education, and preferred certifications needed to be successful in this position.
Preferred Skills
Third-Party Risk Management, Strategic Planning, Risk Management Programs, Regulatory Compliance, People Leadership, Key Risk Indicators, Information Security, Influencing Change, Emerging Risks, Credible Challenge, Conflict Management, Cloud Governance
About the Company
About PNC
For more than 160 years, PNC has helped clients achieve their financial goals through trusted advice, innovative solutions, and exceptional service. As one of the nation's largest financial services institutions, PNC serves millions of customers while remaining committed to supporting the communities where its employees live and work.