Principal Technology Risk and Control Specialist - AI & Cloud Risk

Northern Trust; Pune District; On-site; INR 3,000,000 - 6,500,000; Full time

Job summary

Northern Trust is recruiting for a Principal – Technology Risk and Control focusing on AI & Cloud Risk in Pune. The role requires shaping enterprise risk governance, embedding risk-aware design, and partnering across AI Architecture, Model Risk, Cyber, and Data teams to ensure regulatory defensibility.

Leaders with 15+ years of risk experience, strong controls, and certifications like CISSP/CRISC are ideal. Collaboration across technology and risk functions is essential.

Qualifications

• 15+ years in Technology Risk, Cyber Risk or Cloud Risk.
• Experience designing enterprise risk and control frameworks.
• Experience with AI systems and cloud platforms in regulated environments.

Responsibilities

• Evolve AI/Cloud risk framework and governance.
• Assess risks across AI lifecycle and cloud onboarding.
• Define controls, oversight, and evidence for audit readiness.

Skills

AI risk

Cloud risk

Regulatory compliance

Education

CISSP

CRISC

Job description

Principal – Technology Risk and Control – Artificial Intelligence & Cloud Risk

About Northern Trust As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world's most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.

Enterprise Framework & Governance

Evolve the enterprise AI and Cloud Risk & Control Framework, partnering with AI Architecture, Model Risk, Cyber, Data, Privacy, Resilience, and Third-Party Risk teams to ensure consistency and regulatory defensibility. Define enterprise-wide risk taxonomy and tiering, aligned to use-case criticality, autonomy, data sensitivity, customer impact, and systemic exposure. Establish clear risk-to-control linkages to support consistent decisions and audit-ready governance. Define minimum control expectations for AI and Cloud services and act as the authoritative interpreter of AI and Cloud risk standards.

AI & Cloud Risk Assessment

Collaborate on the enterprise AI and Cloud risk assessment methodology, ensuring it is risk-based, proportionate, repeatable, and auditable. Partner with AI Architecture and Model Risk to assess inherent and residual risks, including model behavior, bias, explainability, data risk, security, resilience, and autonomy. Embed risk assessment across the AI lifecycle and cloud onboarding and architecture decisions, ensuring outcomes inform risk acceptance and executive reporting.

Control Design & Effectiveness

Set expectations for AI and Cloud control design, ensuring controls are embedded by design and aligned to preventive, detective, and corrective principles. Define standards for human oversight, monitoring, logging, explainability, and evidence. Partner with Risk and Assurance teams to assess control effectiveness and drive remediation of systemic gaps.

Regulatory Alignment & Advisory

Ensure alignment with internal standards, model risk governance, and emerging AI regulatory expectations. Translate regulatory requirements into practical, implementable controls for first-line teams. Act as a trusted risk advisor and challenger to senior Technology, Cloud, Architecture, and AI leaders, owning final risk recommendations for high-impact initiatives.

Enablement & Maturity

Develop playbooks and guidance to scale consistent AI and Cloud risk practices. Coach risk and technology partners to improve enterprise risk fluency. Advance AI governance maturity, including automation and integration with modern engineering practices.

Experience & Background

15+ years of experience in Technology Risk, Cyber Risk, Model Risk, Cloud Risk, or related disciplines, with demonstrable enterprise-level accountability. Proven track record of designing and owning enterprise-wide risk and control frameworks. Deep exposure to AI systems, cloud platforms, and complex digital architectures within regulated environments. Professional certifications such as CISSP, CCSK, CRISC, or equivalent (preferred, not mandatory).

Working with Us

As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve. Philanthropy is deeply rooted in Northern Trust's history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.

Reasonable Accommodation

Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [e-mail] , or alternatively you can discuss your individual requirements with the recruiter you are working with.

About Our Pune Office

The Northern Trust Pune office, established in 2016, is now home to over 3,000 employees. The office handles various functions, including Operations for Asset Servicing and Wealth Management, as well as delivering critical technology solutions that support business operations across the globe. Our Pune team takes our commitment to service to heart. In 2024, they volunteered more than 10,000+ hours into the communities where they live and work. Learn more.

Experience Level Senior Level