Technology Risk & Control Lead — RCSA Program

Cyber Security Jobs; Chicago (IL); On-site; USD 83,000 - 141,000; Full time

Benefits offered by this job

401k & Pension

Health benefits

Paid time off

Job summary

Northern Trust is seeking a Lead, Technology Risk & Control Self-Assessment (RCSA) to champion the RCSA program across Global Technology. You will partner with Technology leaders, Risk, Compliance, and Audit to drive risk identification, assessment, monitoring, and reporting in a regulated financial services environment.

The role requires deep knowledge of technology risk management, regulatory expectations, and strong communication to influence stakeholders and drive improvements.

Qualifications

• Strong knowledge of technology risk management and risk assessment methodologies.
• Experience with cybersecurity, infrastructure, cloud, software development, resilience, and data management.
• Ability to influence stakeholders and communicate complex risk topics clearly.

Responsibilities

• Lead the execution and maturity of the Technology RCSA program across Global Technology.
• Identify, assess, monitor, and report technology risks and controls per ERM standards.
• Collaborate with Technology leaders, Risk, Compliance, and Audit to improve risk visibility.
• Provide risk advisory, challenge, and guidance on controls and risk treatment.
• Facilitate governance forums and risk reviews for risk exposures and appetite alignment.
• Develop risk reporting, metrics, dashboards, and MI for senior leadership.

Skills

Technology risk management

Regulatory compliance

Data analytics

Stakeholder influence

Education

Bachelors in information technology

Tools

NIST

ISO 27001

COBIT

ITIL

Job description

Northern Trust is seeking a Lead, Technology Risk & Control Self-Assessment (RCSA) to champion the RCSA program across Global Technology. You will partner with Technology leaders, Risk, Compliance, and Audit to drive risk identification, assessment, monitoring, and reporting in a regulated financial services environment.

The role requires deep knowledge of technology risk management, regulatory expectations, and strong communication to influence stakeholders and drive improvements.