Technology Risk & Compliance Manager

Northwest-Bank; Pittsburgh (Allegheny County); On-site; USD 120,000 - 180,000; Full time

Job summary

Northwest Bancshares seeks an Information Technology Enterprise Risk Manager to support its risk framework across IT, information security and data risks. The role includes RCSA oversight, control testing, and regulatory assessments, with collaboration across IT, IS and Data teams.

The ideal candidate has extensive IT risk experience, familiarity with GLBA, PCI DSS and HIPAA, and strong analytical and reporting skills to drive remediation and governance actions.

Qualifications

• Bachelor's degree in MIS, Cybersecurity or Business Administration.
• 8–12 years cybersecurity/IT experience.
• 6–8 years prior financial institution experience.
• Deep understanding of IT, info security and data principles.

Responsibilities

• Oversee RCSA activities for technology processes and challenge conclusions.
• Independently assess risks and drive remediation actions.
• Validate IT/IS/Data controls and test effectiveness.
• Support GLBA, PCI DSS, HIPAA assessments and regulatory compliance.
• Provide credible challenge and reporting to senior management.

Skills

IT & InfoSec principles

Risk management

Regulatory standards

Vulnerability scanning

Penetration testing tools

Analytical skills

Communication & reporting

Education

Bachelor's degree in MIS / Cybersecurity / Business Admin

Tools

ITIL

CISSP

CISM

CISA

Job description

Northwest Bancshares seeks an Information Technology Enterprise Risk Manager to support its risk framework across IT, information security and data risks. The role includes RCSA oversight, control testing, and regulatory assessments, with collaboration across IT, IS and Data teams.

The ideal candidate has extensive IT risk experience, familiarity with GLBA, PCI DSS and HIPAA, and strong analytical and reporting skills to drive remediation and governance actions.