CIAM Risk & Audit Lead: Identity Security & Compliance

Cyber Security Jobs; Chicago (IL); On-site; USD 100,000 - 169,000; Full time

Job summary

Northern Trust is seeking a Lead, CIAM Risk & Audit to drive risk, audit, governance, and control activities across the client identity ecosystem. You will lead risk assessments, remediation programs, and governance initiatives to mature CIAM processes.

The role collaborates with cyber security, risk, audit, compliance, and technology teams to ensure regulatory, security, and privacy requirements are met. Strong analytics required.

Qualifications

• Bachelor's degree or higher in a related field.
• 5–8 years of experience in cyber security, IAM, risk, audit, or compliance.
• Experience supporting or leading audit, compliance, and risk activities.
• Understanding of CIAM principles and controls.
• Experience with client authentication, onboarding, and access management controls.
• Ability to analyze control effectiveness and support remediation efforts.
• Experience developing reports, dashboards, and management presentations.
• Strong analytical, organizational, and communication skills.

Responsibilities

• Lead CIAM risk and control activities across the client identity ecosystem.
• Coordinate internal and external audit engagements and regulatory examinations.
• Develop and govern CIAM programs, policies, standards, and procedures.
• Create risk, compliance, and audit dashboards and KPIs.
• Present findings and remediation plans to technology, risk, and business stakeholders.

Skills

Cyber Security

Identity & Access Management

Risk Management

Audit & Compliance

Data Analytics

Stakeholder Communication

Education

Bachelor's degree in Cyber Security, IT, CS, or related

Tools

CIAM platforms

Job description

Northern Trust is seeking a Lead, CIAM Risk & Audit to drive risk, audit, governance, and control activities across the client identity ecosystem. You will lead risk assessments, remediation programs, and governance initiatives to mature CIAM processes.

The role collaborates with cyber security, risk, audit, compliance, and technology teams to ensure regulatory, security, and privacy requirements are met. Strong analytics required.