Senior Technology Risk & Cybersecurity Advisor

Cyber Security Jobs; Tempe (AZ); On-site; USD 109,000 - 185,000; Full time

Benefits offered by this job

401(k) and pension

Health and welfare benefits

Paid time off

Discretionary bonus program

Job summary

Northern Trust is seeking an experienced information security professional to lead risk assessments, advise on technology risk, and support incident response in a regulated financial services environment.

The role emphasizes identifying emerging cybersecurity risks, developing remediation plans, and producing risk metrics for senior management, with collaboration across teams and opportunities to mentor colleagues.

Qualifications

• Several years in a regulated technical or security-related field.
• Current professional certification required (CISA, CISM, CRISC, CISSP, or equivalent).
• Bachelor's degree in Accounting, Finance, Information Technology, MIS, CS, or related discipline (or equivalent practical experience).
• Advanced degree in IT or related field is a plus.
• Expert knowledge of emerging cybersecurity and technology risks, including AI, Digital Assets, Quantum Computing, Cloud/SaaS, and IAM.
• Strong experience performing application security, infrastructure, and technology risk assessments.
• Proven ability to review and challenge first line of defense technology teams within large, highly regulated financial services organizations.
• Background in security consulting or senior advisory roles, providing risk guidance to senior management.
• Experience scoping engagements and developing technical or risk-focused proposals.
• Strong project management skills with the ability to manage multiple priorities simultaneously.
• Excellent written and verbal communication skills, with demonstrated ability to produce clear, well-structured, and well-justified documentation and reports.
• Ability to work effectively both independently and within diverse, multi-national teams.
• Strong stakeholder management skills, with the ability to build trusted relationships at all organizational levels and with third-party providers.

Responsibilities

• Identify emerging technology and cybersecurity risks and lead risk reduction through expert assessment and advisory.
• Review, challenge, and provide independent risk perspective on significant technology strategies, initiatives, and architectures.
• Conduct technology and cybersecurity risk assessments, deep dives, testing activities, and operational exercises.
• Research, design, and develop testing tools and risk assessment frameworks for enterprise use.
• Partner with stakeholders to define practical remediation action plans for identified risks.
• Document assessment results, findings, and remediation plans; report clearly to management and senior stakeholders.
• Plan, schedule, and monitor deliverables, milestones, and outcomes across assigned initiatives or programs.
• Produce meaningful risk metrics, dashboards, and deep-dive assessment reporting.
• Provide cross-training and mentorship to junior team members.
• Support training, awareness, and education activities related to technology and cybersecurity risk management.
• Remain current on industry trends, emerging threats, technologies, and pricing; advise management and executives on business and financial impact.
• Support strategically important initiatives across information security and technology risk management.
• Participate in technology and cybersecurity incident response activities as required.

Skills

Risk assessment

Security governance

Threat monitoring

Stakeholder management

Communication

Project management

Emerging tech risks

Education

Bachelor's degree in IT, finance, or related

Advanced IT-related degree (plus)

Professional certifications (CISA, CISM, CRISC, CISSP)

Tools

NIST CSF

Security risk tooling

Job description

Northern Trust is seeking an experienced information security professional to lead risk assessments, advise on technology risk, and support incident response in a regulated financial services environment.

The role emphasizes identifying emerging cybersecurity risks, developing remediation plans, and producing risk metrics for senior management, with collaboration across teams and opportunities to mentor colleagues.