Senior IT Risk & Cybersecurity Governance Lead

ntrs; Tempe (AZ); On-site; USD 79,000 - 134,000; Full time

Job summary

Northern Trust in the United States seeks an IT Risk Management professional to support regulatory interactions, risk assessments, information security initiatives, and management reporting.

You will develop technology and cybersecurity risk metrics, prepare materials for audits and senior management meetings, and assess risks across internal and externally hosted systems, ensuring programs align with regs and standards.

Qualifications

• Strong experience in IT Risk Management, Technology Risk, or IT Audit.
• Experience creating metrics and reporting using Power BI and PowerPoint.
• Bachelor's degree in Accounting, Finance, Information Technology, MIS, Computer Science, or related discipline; advanced IT degree desirable.
• Exposure to COBIT 5, ISO 27001/27002, and NIST 800-53.

Responsibilities

• Develop and maintain technology and cybersecurity risk metrics and assessments.
• Prepare materials for regulatory interactions, audit examinations, and senior management meetings.
• Identify and assess risks associated with internal technologies and externally hosted systems.
• Define requirements and execution plans for information security and technology risk management programs.
• Ensure risk management programs align with applicable regulations, industry standards, and compliance requirements.
• Communicate security policies and requirements clearly to stakeholders.
• Produce meaningful, measurable metrics for owned risk management programs.
• Review and assess technology and security controls using established frameworks.
• Drive risk reduction through defined risk treatment and remediation processes.
• Document, track, and report risk findings and remediation plans to management.
• Collaborate with Information Security, Privacy, and Enterprise Risk teams to enhance policies and frameworks.
• Stay current on industry trends, emerging threats, technologies, and regulatory developments.

Skills

IT risk management

IT audit

Power BI

Executive reporting

Analytical skills

Communication skills

Education

Bachelor's degree in IT/Finance/Accounting

Advanced IT-related degree desirable

Tools

COBIT 5

ISO 27001/27002

NIST 800-53

Job description

Northern Trust in the United States seeks an IT Risk Management professional to support regulatory interactions, risk assessments, information security initiatives, and management reporting.

You will develop technology and cybersecurity risk metrics, prepare materials for audits and senior management meetings, and assess risks across internal and externally hosted systems, ensuring programs align with regs and standards.