Senior Technology Risk & Cybersecurity Analyst

001 The Northern Trust Company; Tempe (AZ); On-site; USD 79,000 - 134,000; Full time

Benefits offered by this job

401k and pension

Medical, dental, vision benefits

Paid time off

Job summary

The Northern Trust Company is seeking an IT Risk Management professional to support cybersecurity risk initiatives, regulatory interactions, and risk reporting across core programs. You will work with cross-functional teams to identify, assess, and remediate technology risk, delivering clear metrics and executive-level insights.

Ideal candidates have certifications (CISA/CISM/CRISC/CISSP), a relevant degree, and strong experience with frameworks like COBIT 5 and NIST 800-53.

Qualifications

• Required certification: CISA, CISM, CRISC, CISSP, or equivalent
• Bachelor’s degree in Accounting, Finance, Information Technology, MIS, Computer Science, or related discipline
• Advanced IT-related degree desirable
• Strong ability to develop technology and cybersecurity risk metrics, assessments, and executive-level presentations
• Experience with FFIEC handbooks and relevant regulatory bodies in Financial Services
• Familiarity with COBIT 5, ISO 27001/27002, and NIST 800-53
• Exposure to information security disciplines such as forensics, threat intelligence, or secure development

Responsibilities

• Develop and maintain technology and cybersecurity risk metrics and assessments
• Prepare materials for regulatory interactions, audits, and senior management meetings
• Identify and assess risks in internal technologies and externally hosted systems
• Define requirements and execution plans for information security and risk management programs
• Align risk programs with regulations, standards, and compliance needs
• Communicate security policies clearly to ensure understanding and adoption
• Produce measurable metrics for risk management programs
• Review controls using established frameworks and drive remediation
• Report risk findings and remediation plans to management
• Collaborate with Information Security, Privacy and Enterprise Risk teams to enhance policies and frameworks
• Provide risk advice on strategic business and technology initiatives
• Participate in cybersecurity incident response activities as required

Skills

IT Risk Management

IT Audit

Metrics & Reporting

Education

Bachelor’s degree in Accounting, Finance, IT, MIS, CS

Tools

Power BI

PowerPoint

Job description

The Northern Trust Company is seeking an IT Risk Management professional to support cybersecurity risk initiatives, regulatory interactions, and risk reporting across core programs. You will work with cross-functional teams to identify, assess, and remediate technology risk, delivering clear metrics and executive-level insights.

Ideal candidates have certifications (CISA/CISM/CRISC/CISSP), a relevant degree, and strong experience with frameworks like COBIT 5 and NIST 800-53.