Security Analyst- Tokenization

PNC is a financial services organization focused on delivering customer value through an inclusive workplace and strong risk management. The Security Analyst - Tokenization role drives enterprise adoption of tokenization and data protection services by developing adoption strategies, guiding application teams, coordinating stakeholders, and providing governance across implementations. The role also evaluates security controls, analyzes risks and vulnerabilities, and supports security assessments and corrective actions.

Responsibilities:

• Lead and influence a multi-year enterprise tokenization transformation initiative focused on reducing sensitive data exposure, improving regulatory compliance, and expanding adoption of enterprise data protection capabilities
• Serve as a trusted advisor to application teams by communicating the security, compliance, and business value of tokenization services and guiding teams through requirements, planning, and readiness assessments
• Partner with business, application, and security stakeholders to identify, prioritize, and advocate for tokenization opportunities based on sensitive data exposure, regulatory requirements, and risk reduction objectives
• Partner with Data Protection leadership to define and execute adoption strategies, success metrics, and long-term roadmaps that expand utilization of enterprise tokenization capabilities and advance data protection objectives
• Provide governance and oversight for tokenization implementations by aligning delivery teams with enterprise strategy, assessing readiness, managing onboarding priorities, and mitigating implementation risks
• Drive stakeholder engagement, executive communications, and enterprise awareness activities that support tokenization adoption objectives and strengthen understanding of data protection capabilities
• Identify and implement process improvements that enhance onboarding efficiency, implementation consistency, and overall program effectiveness while contributing to the advancement of enterprise data protection and cryptographic strategies
• Define, track, and analyze KPIs, KRIs, tokenization coverage, and sensitive data reduction metrics to measure program effectiveness, adoption success, and risk reduction outcomes
• Contribute to the development and execution of enterprise tokenization roadmaps aligned with business priorities, regulatory requirements, and security objectives
• Provides technical evaluation and analysis. Supports activities, process, and tools needed to improve overall security posture of the organization
• Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation. Performs investigation and data loss prevention, data manipulation, and coordination of activities. Performs actions to address or mitigate risks and vulnerabilities. Reviews and defines controls
• Advises on more complex security procedures and products for clients, security administrators and network operations. Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion. Shares knowledge with staff
• Conducts security assessments and other information security routines consistently. Investigates and recommends corrective actions for data security related to established guidelines

Requirements:

• Track record of leading enterprise-scale cybersecurity, data protection, or technology transformation initiatives involving multiple stakeholders, competing priorities, and complex implementation dependencies
• Strong understanding of application security, data protection technologies, tokenization, encryption, or related security domains
• Demonstrated success leading cross-functional initiatives and influencing application, engineering, security, and business stakeholders within complex enterprise environments
• Excellent communication and presentation skills with the ability to translate technical concepts into business value
• Strong analytical, risk management, and problem-solving skills with the ability to identify dependencies and implementation challenges
• Successful candidates must demonstrate appropriate knowledge, skills, and abilities for a role. Listed below are skills, competencies, work experience, education, and required certifications/licensures needed to be successful in this position
• Roles at this level typically require a university / college degree, with 3+ years of relevant / direct industry experience
• In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered
• Bachelors
• Background supporting enterprise security programs or security transformation initiatives
• Knowledge of cryptographic technologies, tokenization platforms, PCI DSS, data privacy regulations, and secure data handling practices
• Familiarity with application onboarding, system integration, and enterprise architecture processes
• Proven success operating within large-scale technology or financial services environments
• Experience supporting product adoption, technology enablement, customer success, program management, or service delivery functions within cybersecurity organizations
• Certifications are often desired