Senior 2LOD Control Testing Analyst (ERM)

Northern Trust Corp; Tempe (AZ); Hybrid; USD 70,000 - 120,000; Full time

Benefits offered by this job

401k and pension

Health benefits

Paid time off

Discretionary bonus program

Job summary

Northern Trust Corp in Tempe, AZ is seeking a Senior Associate for 2LOD Control Testing within ERM. You will perform independent review and challenge of risk controls, evaluate ELCs, and report findings to risk committees, collaborating with stakeholders across the enterprise.

The role emphasizes governance, risk assessment, and remediation strategies, requiring 5-7 years in internal IT risk/audit disciplines, with certifications preferred. Office-based, with strong cross-functional engagement.

Qualifications

• 5-7 years of experience in Internal Audit, IT Audit, Risk Management, Enterprise Risk Management, or related disciplines.
• Experience assessing ERM programs, governance processes, risk management activities, and control environments.
• Familiarity with Entity Level Controls (ELCs), Risk and Control Self-Assessments (RCSAs), issue management, and risk reporting.
• Strong understanding of the Three Lines of Defense model and ERM concepts.
• Certifications (CISSP/CISM/CISA/CRISC/CIA) preferred.

Responsibilities

• Test and challenge control testing methodology across ERM, reporting findings to risk committees.
• Perform independent 2LOD validation, plan and maintain workpapers, identify findings.
• Assess ERM programs, governance, risk reporting, and issue management processes.
• Evaluate design and operating effectiveness of Entity Level Controls (ELCs).
• Communicate operational and technical findings to senior leadership and coordinate remediation.

Skills

ERM testing

Risk assessment

Entity Level Controls

Regulatory knowledge

Cybersecurity

Project management

Education

CISSP

CISM

CISA

CRISC

CIA

Tools

ServiceNow

Fusion

Microsoft Office 365

GRC platforms

Job description

Northern Trust Corp in Tempe, AZ is seeking a Senior Associate for 2LOD Control Testing within ERM. You will perform independent review and challenge of risk controls, evaluate ELCs, and report findings to risk committees, collaborating with stakeholders across the enterprise.

The role emphasizes governance, risk assessment, and remediation strategies, requiring 5-7 years in internal IT risk/audit disciplines, with certifications preferred. Office-based, with strong cross-functional engagement.