Lead Technology Risk & RCSA – Governance & Controls

Northern Trust Corp; Chicago, Northern (IL, KY); Hybrid; USD 83,000 - 141,000; Full time

Benefits offered by this job

401k & Pension

Health & Welfare Benefits

Discretionary Bonus

Paid Time Off

Life & Disability Insurance

Job summary

Northern Trust in Chicago is seeking a Lead, Technology Risk & Control Self-Assessment to drive the execution and maturation of the RCSA program across Global Technology. You will partner with Technology leaders, Risk, Compliance, and Audit to identify and assess risks, and to promote effective risk management practices.

The role requires strong knowledge of risk governance, regulatory expectations, and data-driven reporting.

Qualifications

• Bachelor's degree in information technology, Cybersecurity, Information Security, Risk Management, or a related discipline.
• Prior experience in Technology Risk or related field.
• Experience in the financial services industry is preferred.
• Professional certifications such as CISSP, CISA, CRISC, CGEIT, or equivalent are preferred.

Responsibilities

• Lead the execution and ongoing maturity of the Technology Risk & Control Self-Assessment (RCSA) Program across Global Technology.
• Drive consistent identification, assessment, monitoring, and reporting of technology risks and controls, ensuring alignment with Enterprise Risk Management standards and regulatory expectations.
• Partner with Technology leaders, Control Officers, Risk, Compliance, and Audit teams to strengthen risk visibility, control effectiveness, and remediation outcomes.
• Provide effective challenge and risk advisory support to stakeholders on risk assessments, control design, control effectiveness, and risk treatment strategies.
• Facilitate governance forums and risk reviews to evaluate technology risk exposures, emerging risks, and alignment with established risk appetite and tolerance thresholds.
• Develop and enhance risk reporting, metrics, dashboards, and management information that support informed decision-making by senior leadership.
• Drive continuous improvement initiatives focused on enhancing assessment methodologies, strengthening data quality, improving reporting capabilities, and increasing overall risk management maturity.
• Promote risk awareness and accountability through stakeholder engagement, training, and consistent application of RCSA standards and practices.
• Support executive and governance committee reporting by providing insights into key risk themes, trends, control effectiveness, and emerging areas of concern.
• Serve as a trusted partner and subject matter expert on technology risk management practices across Global Technology.

Skills

Tech risk management

Governance & controls

RCSA methodologies

Cybersecurity

Regulatory frameworks

Data analytics

Stakeholder engagement

Communication

Education

Bachelor's degree in IT/Cybersecurity/Risk Mgmt

Job description

Northern Trust in Chicago is seeking a Lead, Technology Risk & Control Self-Assessment to drive the execution and maturation of the RCSA program across Global Technology. You will partner with Technology leaders, Risk, Compliance, and Audit to identify and assess risks, and to promote effective risk management practices.

The role requires strong knowledge of risk governance, regulatory expectations, and data-driven reporting.