Senior Lead, Technology Risk and Control Self-Assessment (RCSA)

Northern Trust Corp; Chicago (IL); Hybrid; USD 96,000 - 162,000; Full time

Benefits offered by this job

401k and pension

Health and welfare benefits

Paid time off

Job summary

Northern Trust in Chicago, IL seeks a Senior Lead for Technology Risk and Control Self-Assessment (RCSA). You will lead the RCSA program, coordinate risk identification, control design and reporting across Global Technology, and partner with Risk, Compliance, and Audit to improve risk visibility.

The role requires strong knowledge of risk governance, familiarity with frameworks such as NIST, ISO 27001, COBIT and ITIL, and experience with Power BI for dashboards.

Qualifications

• Strong knowledge and practical experience in RCSA methodologies and risk governance.
• Understanding of technology risk domains such as cybersecurity, cloud, and IT operations.
• Familiarity with NIST, ISO 27001, COBIT and ITIL standards and regulatory expectations.

Responsibilities

• Lead day-to-day execution of the RCSA program aligned with ERM and regulatory expectations.
• Coordinate risk identification, assessment, monitoring, and reporting across Global Technology.
• Support governance discussions and risk remediation activities with stakeholders.

Skills

RCSA methodologies

Operational risk management

Control design

Control testing

Risk governance

Cybersecurity knowledge

Data analytics

Power BI

AI-enabled capabilities

Education

Bachelor’s degree in technology, information security, cybersecurity, risk management, or related discipline

Tools

Power BI

AI-enabled risk tools

Data analytics

Job description

Senior Lead, Technology Risk and Control Self-Assessment (RCSA)Please view Northern Trust's cookie policy here.# NT Careers## Senior Lead, Technology Risk and Control Self-Assessment (RCSA)Apply: Hybrid: Chicago, IL: Full time: Posted Today: R161625**About Northern Trust** As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service. **Title - Senior Lead, Technology Risk and Control Self-Assessment (RCSA)****Role Overview*** The Technology Risk and Control function at Northern Trust plays a critical role in enabling Global Information Technology to operate as a strong First Line of Defense, fostering a robust control-aware culture, and delivering secure, compliant, and resilient technology capabilities. The function supports regulatory compliance, protects client interests, and strengthens enterprise-wide risk management practices.* The Senior Lead, Technology Risk and Control Self-Assessment (RCSA) will play a key role in the execution and ongoing enhancement of the Technology RCSA Program. The role will support consistent identification, assessment, measurement, monitoring, and reporting of technology risks and controls across Global Technology, in alignment with Enterprise Risk Management standards and regulatory expectations.* The successful candidate will work closely with Technology leadership, Control Officers, Risk partners, Compliance, Audit, and other stakeholders to improve risk visibility, strengthen control effectiveness, and support proactive risk management. The role will provide subject-matter expertise and day-to-day coordination of RCSA activities, including risk identification, control design and effectiveness assessments, risk aggregation, risk appetite monitoring, and continuous improvement of Technology risk and control practices. **Key Responsibilities****Responsibilities include, but are not limited to:** * Drive the day-to-day execution of the Technology Risk and Control Self-Assessment (RCSA) Program, supporting alignment with Enterprise Risk Management frameworks, regulatory expectations, and First Line of Defense responsibilities.* Coordinate and support the identification, assessment, measurement, monitoring, and reporting of technology risks and controls across Global Technology, performing quality reviews to promote consistency, completeness, and accuracy of assessments.* Partner with Technology teams, Control Officers, Risk, Compliance, and Audit stakeholders to maintain a comprehensive inventory of key technology risks, controls, control gaps, and associated remediation activities.* Support the development, standardization, automation, and continuous improvement of technology risk reporting, metrics, and dashboards, leveraging Power BI, data analytics, and AI-enabled capabilities to improve risk insights and decision-making.* Facilitate risk assessment workshops, stakeholder reviews, and governance discussions to evaluate technology risk exposure, control effectiveness, emerging risks, and alignment with established risk appetite and tolerance thresholds.* Provide guidance and subject-matter expertise to Technology stakeholders on RCSA methodologies, risk identification, control design, assessment requirements, and risk and control documentation.* Support the development and delivery of training, awareness, and capability-building activities to strengthen risk ownership, control accountability, and a proactive risk and control culture across Technology.* Identify opportunities to simplify RCSA processes, strengthen assessment methodologies, improve data quality, and enhance the effectiveness and efficiency of Technology risk management practices.* Support program governance, including the preparation of risk reporting, management information, governance materials, and escalation of key risk themes, control gaps, and emerging concerns. **Qualifications:*** Strong knowledge and practical experience in Risk and Control Self-Assessment (RCSA) methodologies, operational risk management, control design, control testing, and risk governance.* Good understanding of technology risk domains, including cybersecurity, infrastructure, cloud computing, software development, technology operations, data management, and operational resilience.* Working knowledge of relevant risk management frameworks and industry standards such as NIST, ISO 27001, COBIT, and ITIL, as well as regulatory expectations applicable to financial services.* Demonstrated ability to constructively challenge and influence stakeholders while building collaborative relationships across Technology, Risk, Compliance, and Audit.* Strong analytical, written, verbal, and presentation skills, with the ability to translate complex risk and control concepts into clear and actionable information for senior stakeholders.* Experience using data analytics and visualization capabilities, including Power BI, to support risk reporting and insights. Exposure to AI-enabled capabilities within risk and control processes is an advantage. **Experience and Education*** Bachelor’s degree in technology, information security, cybersecurity, risk management, or related discipline.* Relevant experience in technology risk management, technology controls, operational risk, audit, cybersecurity, or related roles with transferable skills. Salary Range:$95,600 - 162,400 USD*Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.* **Work Authorization** Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa). **Working with Us** As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve. Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities. **Reasonable Accommodation** Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [e-mail], or alternatively you can discuss your individual requirements with the recruiter you are working with.