Senior Tech Risk Leader: Third-Party & Vendor Risk

PNC; Pittsburgh (Allegheny County); On-site; USD 146,000 - 326,000; Full time

Benefits offered by this job

Medical coverage

401(k) match

Pension plan

Paid time off

Parental leave

Job summary

PNC is seeking a Technology Risk Senior Manager to lead third-party technology risk across enterprise, coordinating with Enterprise Third-Party Management, IT, and Legal. Based in Pittsburgh, Dallas, or Washington, this role drives risk reduction and executive reporting to risk committees.

The candidate will own risk indicators, scorecards, and remediation tracking, while guiding a team of risk professionals and aligning with regulatory expectations and contract decisions.

Qualifications

• University/college degree required.
• 8+ years in risk management experience.
• Minimum 5 years of management experience.

Responsibilities

• Leads one or more large-scale technology risk functions or programs, driving execution and enhancement of the risk management framework.
• Establishes governance processes for clear accountability and policy adoption.
• Directs risk identification, assessment, and mitigation across domains and emerging tech.
• Acts as a trusted advisor to senior technology leadership on risk posture and decisions.
• Oversees risk reporting, metrics, and analytics to foster a risk-aware culture.

Skills

Third-Party Risk Management

Strategic Planning

Regulatory Compliance

People Leadership

Information Security

Cloud Governance

Influencing Change

Emerging Risks

Credible Challenge

Conflict Management

Education

Bachelors

Job description

PNC is seeking a Technology Risk Senior Manager to lead third-party technology risk across enterprise, coordinating with Enterprise Third-Party Management, IT, and Legal. Based in Pittsburgh, Dallas, or Washington, this role drives risk reduction and executive reporting to risk committees.

The candidate will own risk indicators, scorecards, and remediation tracking, while guiding a team of risk professionals and aligning with regulatory expectations and contract decisions.