Senior Technology Risk & Control Leader

001 The Northern Trust Company; Chicago (IL); On-site; USD 96,000 - 162,000; Full time

Benefits offered by this job

401k and pension

Health & welfare benefits

Paid time off

Parental leave

Job summary

Northern Trust seeks a Senior Lead, Technology Risk and Control to lead the Risk Treatment practice across the Technology org. You will chair governance forums, assess risk acceptances, and partner with technology, risk, and audit teams to strengthen controls and reporting.

The role requires 10–12+ years in technology risk, a Bachelor's in a related field, and relevant certifications. A strong collaboration mindset and ability to drive improvements are essential.

Qualifications

• 10–12+ years in technology risk management, controls, audit, or related fields.
• Bachelor’s degree in technology, cybersecurity, or related field.
• Experience in financial services preferred.
• Certifications such as CISSP, CRISC, CISM, or CISA preferred.

Responsibilities

• Own and drive the Technology Risk Treatment process, guiding control officers and stakeholders.
• Provide guidance to technology and business partners seeking risk acceptances.
• Analyze impact, likelihood, and controls; produce risk assessments and recommendations.
• Define and produce metrics and KPIs for program operations and risk visibility.
• Lead risk treatment governance forums with accurate materials and follow-up.
• Collaborate across Technology, Risk (2LOD), and Audit (3LOD) functions.
• Influence technology teams to reduce risk exposure and improve culture.

Skills

Technology risk

Cybersecurity

Stakeholder management

Cloud security

GRC/IRM platforms

Education

Bachelor's degree in technology or cybersecurity

Tools

ServiceNow

Job description

Northern Trust seeks a Senior Lead, Technology Risk and Control to lead the Risk Treatment practice across the Technology org. You will chair governance forums, assess risk acceptances, and partner with technology, risk, and audit teams to strengthen controls and reporting.

The role requires 10–12+ years in technology risk, a Bachelor's in a related field, and relevant certifications. A strong collaboration mindset and ability to drive improvements are essential.