AI-Driven Cyber Risk & GRC Leader

Koitecc Solutions; Tempe, Northern (AZ, KY); Hybrid; USD 109,000 - 185,000; Full time

Job summary

Northern Trust is expanding its cyber risk governance team in the U.S. to strengthen risk identification and reporting. This role partners with security, architecture, and operations to drive maturity and informed decisions across the enterprise.

The ideal candidate brings deep risk management expertise, experience with AI-driven insights, and the ability to translate technical risk into strategic business impacts for leadership and regulators.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or related field; Master's degree preferred.
• Extensive experience in cybersecurity risk management with major frameworks and methodologies.
• Experience leveraging AI, analytics, automation, or data engineering for risk processes.
• Understanding of threat intelligence concepts and external intelligence sources.
• Certifications such as CISSP, CISM, CRISC or similar.

Responsibilities

• Lead the identification, assessment, prioritization, and reporting of cyber risks enterprise-wide.
• Advance data-driven cyber risk reporting, integrating threat intel and analytics.
• Conduct cyber risk assessments and maturity reviews against industry frameworks.
• Develop actionable cyber risk insights for executives, risk committees, and regulators.
• Collaborate with security, architecture, and operations to improve risk outcomes.
• Enhance cyber risk intelligence via analytics, automation, and AI-enabled processes.
• Drive continuous improvement in risk methodologies and governance.

Skills

Cyber risk management

NIST CSF

FAIR

MITRE ATT&CK

ISO 27001

Data analytics

Automation

AI capabilities

Threat intelligence

Executive risk reporting

Education

Bachelor's degree in Information Security or related field

Master's degree preferred

CISSP

CISM

CRISC

Job description

Northern Trust is expanding its cyber risk governance team in the U.S. to strengthen risk identification and reporting. This role partners with security, architecture, and operations to drive maturity and informed decisions across the enterprise.

The ideal candidate brings deep risk management expertise, experience with AI-driven insights, and the ability to translate technical risk into strategic business impacts for leadership and regulators.