Senior 2nd Line Controls Testing Specialist

Koitecc Solutions; Tempe (AZ); On-site; USD 70,000 - 120,000; Full time

Benefits offered by this job

401k and pension

Health benefits

Paid time off

Job summary

Northern Trust is seeking a Second Line of Defense Controls Testing professional to collaborate with Enterprise Risk Management, governance, and risk committees. The role focuses on independent review of ERM programs, ELCs, and risk controls across the organization.

You will assess risk and control environments, provide independent assurance, and help drive remediation strategies in partnership with business teams. Strong regulatory knowledge and IT risk expertise are essential.

Qualifications

• 5-7 years of experience in Internal Audit, IT Audit, Risk Management, ERM, Operational Risk, Compliance, Cybersecurity, IT Risk and Control.
• Experience assessing ERM programs, governance processes, risk activities, and control environments.
• Familiarity with ELCs, RCSAs, issue management, risk governance, and risk reporting processes.
• Strong understanding of ERM frameworks, governance, and the Three Lines of Defense model.
• Certifications (CISSP, CISM, CISA, CRISC, CIA) are highly preferred.

Responsibilities

• Test, validate, and assert control testing methods to business owners.
• Perform 2LOD validation, including plan prep, workpapers, findings, and reporting to risk committees.
• Assess ERM programs and activities across the ERM lifecycle.
• Evaluate design and operating effectiveness of Entity Level Controls (ELCs).
• Communicate findings to risk management leadership and risk committees with clarity.

Skills

Internal Audit

Risk Management

Cybersecurity

IT Risk & Controls

Communication

Education

CISSP

CISM

CISA

CRISC

CIA

Tools

ServiceNow

Fusion

Job description

Northern Trust is seeking a Second Line of Defense Controls Testing professional to collaborate with Enterprise Risk Management, governance, and risk committees. The role focuses on independent review of ERM programs, ELCs, and risk controls across the organization.

You will assess risk and control environments, provide independent assurance, and help drive remediation strategies in partnership with business teams. Strong regulatory knowledge and IT risk expertise are essential.