Senior Tech Risk Leader, Third-Party & Vendor Risk

PNC; United States; Remote; USD 146,000 - 326,000; Full time

Benefits offered by this job

Medical insurance

401(k) match

Paid time off

Job summary

PNC is seeking a Technology Risk Senior Manager to lead the third-party technology risk function across multiple sites including Pittsburgh, Phoenix, Denver, Strongsville, and Birmingham. The role drives the risk program, governance processes, and credible challenge across technology vendors and cloud providers.

You will partner with Enterprise Third-Party Management, Technology, Information Security, Resilience, Legal, and Internal Audit to implement risk-based controls, monitor indicators, and

Qualifications

• Experience leading large-scale technology risk programs.
• Ability to set strategy, priorities, and standards for third-party risk.
• Strong collaboration with executives across risk, legal, IT and audit.

Responsibilities

• Leads the Third-Party Technology Risk function and team.
• Sets strategy, priorities, and standards for risk identification and reduction.
• Oversees governance, risk assessments, and remediation across the enterprise.
• Owns risk indicators, scorecards, and executive reporting.
• Serves as principal risk contact for regulatory reviews and internal audits.
• Builds partnerships across Enterprise Third-Party Management, Technology and Legal.

Skills

Third-Party Risk Management

Strategic Planning

Risk Management Programs

Regulatory Compliance

People Leadership

Key Risk Indicators

Information Security

Influencing Change

Emerging Risks

Credible Challenge

Conflict Management

Cloud Governance

Education

Bachelor's

Job description

PNC is seeking a Technology Risk Senior Manager to lead the third-party technology risk function across multiple sites including Pittsburgh, Phoenix, Denver, Strongsville, and Birmingham. The role drives the risk program, governance processes, and credible challenge across technology vendors and cloud providers.

You will partner with Enterprise Third-Party Management, Technology, Information Security, Resilience, Legal, and Internal Audit to implement risk-based controls, monitor indicators, and