CIAM Risk & Audit Lead - Identity, Security & Compliance

Northern Trust; Chicago (IL); On-site; USD 99,600 - 169,200; Full time

Benefits offered by this job

401(k) plan

Health insurance

Paid time off

Discretionary bonus program

Job summary

Northern Trust seeks a Lead for Client Identity & Access Management (CIAM) Risk & Audit in Chicago. You will drive risk, audit, governance, and control activities across our CIAM program, partnering with cyber security, risk, compliance, and technology teams to ensure regulatory and security expectations are met.

The role requires delivering audit readiness, risk assessments, remediation programs, and governance initiatives while strengthening CIAM maturity across the organization.

Qualifications

• Bachelor's degree in Cyber Security, IT, CS, or related field.
• 5–8 years of experience in cyber security, identity & access management, risk, or audit.
• Experience supporting or leading audit, compliance, and risk activities.
• Understanding CIAM principles and controls.
• Experience with client authentication, authorization, onboarding, identity proofing, or access management controls.
• Strong analytical, organizational, and communication skills.

Responsibilities

• Lead CIAM risk and control activities with stakeholders.
• Evaluate identity-related risks and mitigation strategies.
• Coordinate audit readiness, regulatory examinations, and reviews.
• Track findings and drive remediation through closure.
• Develop CIAM governance programs and policy documentation.
• Create dashboards and KPIs for risk, compliance, and audit reporting.

Skills

Cyber security

Identity & Access Management

Risk management

Audit

Compliance

Stakeholder communication

Education

Bachelor's degree in Cyber Security / IT / CS

Tools

CIAM platforms

Authentication & Authorization

Job description

Northern Trust seeks a Lead for Client Identity & Access Management (CIAM) Risk & Audit in Chicago. You will drive risk, audit, governance, and control activities across our CIAM program, partnering with cyber security, risk, compliance, and technology teams to ensure regulatory and security expectations are met.

The role requires delivering audit readiness, risk assessments, remediation programs, and governance initiatives while strengthening CIAM maturity across the organization.