IAM Risk & Audit Analyst — Governance & Compliance

Northern Trust; Chicago (IL); On-site; USD 88,900 - 151,100; Full time

Benefits offered by this job

401k and pension

Health and welfare benefits

Paid time off

Parental leave

Caregiver leave

Job summary

Northern Trust is seeking a Business Analyst, Identity & Access Management (IAM) Risk & Audit, to strengthen IAM governance and compliance programs across the organization. You will partner with IAM engineering, risk management, internal audit, compliance, and business stakeholders to support regulatory, audit, and risk activities.

The role focuses on control monitoring, audit readiness, reporting, issue remediation, and process improvement across IAM capabilities including IGA, PAM, access

Qualifications

• Bachelor's degree in Cyber Security, IT, Business, CS or related field required.
• 3–7 years in Cyber Security, IAM, Risk, Audit, or Compliance roles.
• Understanding of IAM concepts and control frameworks.
• Strong analytical skills and reporting ability.
• Excellent written and verbal communication.

Responsibilities

• Support IAM audit activities and collect evidence for reviews.
• Monitor IAM controls and identify gaps or weaknesses.
• Develop IAM risk, audit, and compliance reports and dashboards.
• Collaborate with IAM engineers, risk teams, and auditors.
• Assist process improvements to enhance control effectiveness.

Skills

Cybersecurity foundations

Identity & Access Management concepts

Analytical reporting skills

Strong communication skills

Excel proficiency

Education

Bachelor's degree in Cyber Security, Information Technology, Business, Computer Science, or related field

Tools

Excel

PowerPoint

Word

Microsoft Office Suite

Job description

Northern Trust is seeking a Business Analyst, Identity & Access Management (IAM) Risk & Audit, to strengthen IAM governance and compliance programs across the organization. You will partner with IAM engineering, risk management, internal audit, compliance, and business stakeholders to support regulatory, audit, and risk activities.

The role focuses on control monitoring, audit readiness, reporting, issue remediation, and process improvement across IAM capabilities including IGA, PAM, access