Skip to main content

About the role

Overview: In this role you lead the Third-Party Technology Risk function to reduce vendor risk exposure across the enterprise. You will shape the risk program and governance, partner with cross-functional teams, and provide executive-level risk insights. You’ll manage a team, drive risk reduction in relation to critical vendors and cloud providers, and serve as the main technology risk liaison for regulatory and internal reviews. This is a high-impact role at a leading financial services company focused on risk-aware operational excellence. Compensation / Benefits medical/prescription drug coverage dental and vision options 401(k) with PNC match paid holidays vacation days educational assistance
Responsibilities: Lead the Third-Party Technology Risk function and team to reduce vendor risk exposure. Set strategy, priorities, and standards for identifying, measuring, and reducing third-party technology risk across the enterprise. Design and improve the third-party technology risk program to meet business, risk appetite, and regulatory expectations. Define methodology and operating model for evaluating high-risk vendors and material fourth parties. Oversee risk assessments, due diligence depth, residual risk conclusions, exceptions, and risk acceptance decisions. Own and report on KRIs, vendor risk ratings, scorecards, and executive risk reporting for Technology Risk. Lead root cause analysis and drive remediation through governance forums and program owners. Build executive partnerships across Enterprise Third-Party Management, Information Security, and Internal Audit. Manage and develop a team, set oversight plans, and foster technical depth and influence. Act as the primary Technology Risk contact for regulatory examinations and independent reviews.
Key requirements: Third-Party Risk Management Strategic Planning Risk Management Programs Regulatory Compliance People Leadership Key Risk Indicators Information Security Credible Challenge Cloud Governance Influencing Change Conflict Management Effective Communications Information Security Management Internal Controls IT Environment

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this