Tech Risk & Controls Lead - RCSA Program

Northern Trust; Chicago (IL); On-site; USD 83,000 - 141,000; Full time

Benefits offered by this job

Discretionary bonus

Health benefits

Retirement plan

Paid time off

Parental leave

Life and disability insurance

Job summary

Northern Trust is seeking a Lead, Technology Risk & Control Self-Assessment to strengthen the First Line of Defense by promoting strong risk practices across Global Technology. You will partner with risk, compliance, and audit teams to drive risk identification, assessment, and reporting.

The role requires deep knowledge of technology risk domains, frameworks (NIST, COBIT, ISO 27001) and a proven ability to influence stakeholders in a large financial services organization.

Qualifications

• Bachelor’s degree in information technology, cybersecurity, information security, risk management, or a related discipline.
• Professional certifications such as CISSP, CISA, CRISC, CGEIT, or equivalent are preferred.
• Experience in technology risk or related field within financial services is preferred.

Responsibilities

• Lead the execution and ongoing maturity of the Technology Risk & Control Self-Assessment (RCSA) program across Global Technology.
• Drive consistent identification, assessment, monitoring, and reporting of technology risks and controls.
• Partner with Technology leaders, control officers, risk, compliance, and audit teams to strengthen risk visibility and remediation outcomes.
• Provide risk advisory support on risk assessments, control design and effectiveness, and risk treatment strategies.
• Facilitate governance forums and risk reviews to evaluate technology risk exposures and alignment with risk appetite.

Skills

RCSA

Risk governance

Regulatory compliance

Cybersecurity

Data analytics

Stakeholder management

Education

Bachelor's degree in IT/Cybersecurity

Job description

Northern Trust is seeking a Lead, Technology Risk & Control Self-Assessment to strengthen the First Line of Defense by promoting strong risk practices across Global Technology. You will partner with risk, compliance, and audit teams to drive risk identification, assessment, and reporting.

The role requires deep knowledge of technology risk domains, frameworks (NIST, COBIT, ISO 27001) and a proven ability to influence stakeholders in a large financial services organization.