Sr Associate, Cyb Sec IT RiskM

Northern Trust Corp; Pune District; On-site; INR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Flexible work culture

Reasonable accommodation available

Job summary

Northern Trust seeks a Sr Associate, Cyb Sec IT Risk in Pune to provide specialized technology risk advisory across ITSM processes. The role focuses on assessing control design, operating effectiveness, and evidence-based remediation in collaboration with IT teams, risk partners, and auditors.

The ideal candidate has 5–7 years in tech risk or security and holds or is pursuing relevant certifications, with a strong ability to communicate risk to diverse stakeholders.

Qualifications

• 5–7 years of experience in technology risk, controls, ITSM, or security-related roles.
• Strong knowledge of ITSM control environments and risk assessment.
• ITIL Foundation, CISA, CISSP, or CRISC certifications preferred.

Responsibilities

• Plan and execute ITSM control assessments across Incident, Change, and Problem Management.
• Evaluate design and operating effectiveness of ITSM controls and document gaps.
• Provide risk-based advisory guidance to control owners and escalate issues.
• Maintain assessment artifacts in ServiceNow/IRM tools with clear evidence.
• Engage stakeholders to explain findings and drive remediation actions.
• Identify recurring issues and contribute to continuous improvement of ITSM controls.

Skills

IT risk assessment

ITSM processes

Stakeholder communication

Risk advisory

Documentation & evidence gathering

Education

Bachelor’s degree in computer science/Information Technology

Tools

ServiceNow

IRM tools

Job description

## Sr Associate, Cyb Sec IT RiskMApplylocations: Pune, Indiatime type: Full timeposted on: Posted Todaytime left to apply: End Date: August 31, 2026 (30+ days left to apply)job requisition id: R157309**About Northern Trust** As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service. This role provides specialized technology risk advisory support across key IT Service Management (ITSM) processes, including Incident, Change, and Problem Management. The individual acts as a trusted risk partner to ITSM process owners by assessing control design and operating effectiveness, identifying control gaps, and advising on risk treatment strategies aligned to Technology Risk standards. The role combines control assessment execution, risk analysis, and stakeholder advisory, with a strong focus on practical risk mitigation, consistency in documentation, and readiness for internal audits, RCSA exercises, and regulatory reviews.**Role and Responsibilities**ITSM Control Assessment Execution Plan and execute ITSM control assessments within an assigned scope of Incident, Change, and Problem Management processes. Perform assessments in alignment with established policies, standards, and control testing methodologies, under the guidance of senior leadership. Control Design and Operating Effectiveness Evaluation Evaluate the design and operational effectiveness of ITSM controls to identify gaps, execution weaknesses, and process deviations. Clearly articulate root causes, control impacts, and associated technology risk implications. Validate that controls are: Appropriately defined and documented Consistently executed by process owners Supported by complete, accurate, and reliable evidence. Risk Advisory and Issue Support Provide risk-based advisory guidance to control and process owners on identified control weaknesses. Support the documentation, classification, and escalation of issues arising from assessments. Advise on appropriate risk treatment options—including remediation, risk acceptance, or escalation—in accordance with Technology Risk and IT Risk Management standards. Assessment Documentation and Tooling Ensure assessment results, evidence, and supporting artifacts are accurately documented and maintained in ServiceNow / Integrated Risk Management (IRM) tools. Adhere to documentation standards to support transparency, auditability, and reuse for future assessments. Stakeholder Engagement and Communication Engage with ITSM process owners, technology teams, and risk stakeholders to explain assessment results, control gaps, and risk impacts in a clear and practical manner. Contribute to working sessions, governance forums, and RCSA readiness discussions by providing timely updates and insights relevant to ITSM risk posture. Trend Analysis and Continuous Improvement Identify recurring issues, themes, and systemic control weaknesses across assessments. Provide recommendations to enhance control design, process execution, and testing approaches. Contribute to continuous improvement of ITSM control frameworks and readiness for audits and regulatory reviews. Standards and Industry Awareness Maintaining working knowledge of ITSM, control, and technology risk best practices, including relevant industry standards. Apply this knowledge to assessments and advisory discussions to ensure alignment with evolving expectations.**Knowledge and Experience**Bachelor’s degree in computer science, Information Technology, or a related discipline, with typically 5–7 years of experience in technology risk, controls, ITSM, or security-related roles Strong practical knowledge of ITSM processes and control environments, with the ability to assess risk and control effectiveness. Demonstrated analytical skills, sound judgment, and the ability to communicate complex risk concepts clearly to technical and non-technical stakeholders. Experience working collaboratively with IT teams, risk partners, auditors, and vendors. Preferred certifications: ITIL Foundation, CISA, CISSP, or CRISC. **Working with Us** As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve. Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities. **Reasonable Accommodation** Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [e-mail], or alternatively you can discuss your individual requirements with the recruiter you are working with. **About Our Pune Office** The Northern Trust Pune office, established in 2016, is now home to over 3,000 employees. The office handles various functions, including Operations for Asset Servicing and Wealth Management, as well as delivering critical technology solutions that support business operations across the globe. Our Pune team takes our commitment to service to heart. In 2024, they volunteered more than 10,000+ hours into the communities where they live and work. Learn more.