Audit Manager Senior Specialist - Cyber Security

Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As an Audit Manager Senior Specialist, you will be within PNC’s Internal Audit organization, supporting Cyber Security within the Information Technology Audit team.

As an Audit Manager Senior Specialist within PNC’s Information Technology Audit team, you will have the opportunity to use your knowledge and expertise of information security and technology risks and control principles while leading a wide variety of technology auditing assignments, with an emphasis on audits of Information Security Programs. The Audit Manager Senior Specialist is responsible for leading a high-performing team of individuals and providing strategic oversight throughout the audit execution process of both standalone cyber security audits and business-oriented integrated audits in support of the annual audit plan.

A successful candidate should be a self-starter with the ability to manage multiple audits concurrently and independently, should exhibit strong leadership skills, and the ability to identify risks and gaps in processes, as well as the additional skillsets listed below:

• 8+ years of internal or external IT auditing experience, or relevant business experience
• Proficient and proven ability to independently manage all phases of the audit lifecycle, including planning, fieldwork, and reporting, while driving results and maintaining accountability
• Specializes in and has a deep understanding of current and evolving cyber security threats, tactics, and techniques
• Knowledge of the tools, and techniques for detecting, addressing, and preventing cyber security incidents
• Experience identifying cybersecurity risks impacting a global organization
• Solid understanding of internal control concepts, with the ability to evaluate and determine the adequacy of controls by considering business and technology risks
• Understanding of laws, regulations and industry standards related to Technology and Security (such as GLBA, HIPAA, PCI, NIST, etc.).
• Excellent written, verbal, and presentation skills; adept at presenting complex and sensitive issues to senior management
• Strong interpersonal and influencing skills, with the ability to establish credibility and build partnerships with senior business and control partners
• Security or audit-related professional certification preferred, such as CISA, CISSP, CIA, Cloud Azure/AWS, etc.
• Invests in employee continuous learning and development through training, mentorship, and coaching
• Demonstrates data literacy and guides teams in applying data analytic techniques for auditing

PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be:

• Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions.
• Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework.

PNC also has fundamental expectations of our people managers. As a manager of talent in PNC, you will be expected to:

• Include Intentionally - Cultivates diverse teams and inclusive workplaces to expand thinking.
• Live the Values - Role models our values with transparency and courage.
• Enable Change - Takes action to drive change and innovation that will transform our business.
• Achieve Results - Takes personal ownership to deliver results. Empowers and trusts others in decision making.
• Develop the Best - Raises the bar with every talent decision and guides the achievement of all employees and customers.

• Oversees the execution of complex components of the audit plan in alignment with audit standards to ensure consistency…