Principal, Technology Risk & Cybersecurity Strategy

ntrs; Tempe (AZ); On-site; USD 109,000 - 185,000; Full time

Benefits offered by this job

401k and pension

Health and welfare benefits

Discretionary bonus program

Job summary

Northern Trust is seeking an Information Security Risk professional to drive the risk program with deep technical expertise. You will identify emerging cybersecurity risks, assess and reduce risk, and influence strategic program outcomes.

You will conduct assessments, design testing tools, and partner with stakeholders to create practical remediation plans while reporting progress to management and executives. This role emphasizes mentorship and cross-functional collaboration.

Qualifications

• Several years of experience in a highly regulated technical or security-related field.
• Current professional certification required (CISA, CISM, CRISC, CISSP, or equivalent).
• Bachelor's degree in Accounting, Finance, Information Technology, MIS, Computer Science, or related discipline (or equivalent practical experience).
• Advanced degree in IT or related field is a plus.

Responsibilities

• Identify emerging technology and cybersecurity risks and lead risk reduction through expert assessment.
• Review and challenge significant technology strategies, initiatives, and architectures.
• Conduct technology and cybersecurity risk assessments, deep dives, testing activities, and exercises.
• Research, design, and develop risk assessment frameworks for enterprise use.
• Partner with stakeholders to define remediation action plans for identified risks.
• Document assessment results and remediation plans; report to management.
• Plan and monitor deliverables across initiatives; produce risk metrics and dashboards.
• Provide cross-training and mentorship to junior team members.
• Support training and education activities related to technology risk management.
• Stay current on industry trends and threats; advise executives on business impact.
• Participate in strategically important initiatives across information security and technology risk.

Skills

Risk assessments

Stakeholder management

Project management

Communication

Independent work

Education

CISA

CISM

CRISC

CISSP

Bachelor's degree in IT/CS/Finance

Advanced IT degree (preferred)

Tools

Security frameworks

Job description

Northern Trust is seeking an Information Security Risk professional to drive the risk program with deep technical expertise. You will identify emerging cybersecurity risks, assess and reduce risk, and influence strategic program outcomes.

You will conduct assessments, design testing tools, and partner with stakeholders to create practical remediation plans while reporting progress to management and executives. This role emphasizes mentorship and cross-functional collaboration.