Lead, Technology and Cyber Risk Management

About Northern Trust

Northern Trust is a prestigious Fortune 500 financial institution, in operation since 1889, delivering innovative financial services globally. With over 130 years of expertise and a workforce exceeding 22,000 partners, it serves sophisticated clients worldwide with advanced technology and dedicated service.

Role Overview

This individual contributor role focuses on executing tasks related to IT and Cybersecurity Risk Management, which includes regulatory interactions, IT risk assessments, security initiatives, and management reporting. The position is pivotal in identifying, evaluating, managing, and communicating technology and information security risks and involves collaboration on strategic IT risk initiatives.

Responsibilities

• Create and sustain technology and cybersecurity risk metrics and evaluations that inform the organization's risk stance.
• Prepare and present materials for critical engagements such as regulatory meetings, audits, and senior management discussions.
• Identify and evaluate risks linked to both internal technologies and external hosting systems.
• Establish requirements and action plans for information security and technology risk management programs.
• Ensure adherence of risk programs to relevant regulations, industry standards, and compliance mandates.
• Communicate security policies effectively to promote organizational understanding and compliance.
• Generate measurable and insightful metrics for risk management initiatives under your ownership.
• Review and analyze technology and security controls based on established frameworks.
• Lead risk mitigation through defined treatment and remediation strategies.
• Document, track, and report risk findings and remediation actions to management.
• Collaborate with Information Security, Privacy, and Enterprise Risk teams to improve policies, standards, and frameworks.
• Provide risk guidance on business and technology strategies.
• Engage in cybersecurity incident response efforts as needed.
• Stay updated on industry trends, emerging threats, technologies, and regulatory changes to inform management about potential impacts.

Qualifications and Experience

• Extensive background in IT Risk Management, Technology Risk, or IT Audit.
• Proficient in generating metrics and reports using Power BI and PowerPoint.
• Certification required: CISA, CISM, CRISC, CISSP, or an equivalent credential.
• Bachelor’s degree in fields such as Accounting, Finance, IT, MIS, Computer Science, or related disciplines.
• Advanced degrees in IT-related areas are a plus.
• Strong skills in developing impactful technology and cybersecurity risk metrics and executive presentations.
• Experience in evaluating IT processes including information security, system development/change management, operations, and data protection.
• Familiarity with Financial Services regulations like FFIEC handbooks and country-specific regulatory frameworks.
• Hands-on experience with frameworks such as COBIT 5, ISO 27001/27002, and NIST 800-53.
• Exposure to security disciplines such as forensics, secure software development, threat intelligence, or penetration testing.
• Sharp analytical abilities to assess complex data and make well-founded risk decisions.
• Demonstrated ability to manage multiple priorities efficiently and with attention to detail.
• Excellent communication skills in writing and speaking, capable of creating clear and structured documentation and reports.
• Ability to work effectively solo and as part of global, multinational teams.
• Professional demeanor with aptitude for building strong relationships across organizational levels and third-party partners.

Working Environment

Joining Northern Trust means becoming part of a flexible, collaborative culture with financial stability that encourages innovation and career growth. The company values internal mobility, accessibility of senior leaders, and social responsibility, offering an inclusive workplace with flexible arrangements tailored to individual needs.

Additional Information

Northern Trust is committed to reasonable accommodation for individuals with disabilities throughout the employment process. Interested candidates can discuss flexible work requirements to achieve mutual success.