Technology Risk & Controls Leader: SOX/SOC Programs

Northern Trust; Chicago (IL); On-site; USD 140,000 - 230,000; Full time

Benefits offered by this job

Retirement benefits (401k)

Health and welfare benefits

Paid time off

Parental and caregiver leave

Life & accident insurance

Discretionary bonus program

Job summary

Northern Trust is seeking a technology risk leader to oversee SOX and SOC control programs across a global technology environment. You will partner with Technology leadership, Compliance, Internal Audit, External Audit, and 2LOD to ensure control design, implementation, monitoring, and improvement.

You will drive governance, audit readiness, and regulatory compliance as the subject matter expert for ITGCs and associated controls, across IAM, cloud governance, SDLC, and more.

Qualifications

• Deep expertise in SOX, SOC 1, and SOC 2 compliance programs within complex technology environments.
• Significant experience executing risk assessments, control effectiveness assessments, and residual risk evaluations.
• Extensive experience with ITGCs across identities, cloud governance, change management, SDLC, and infrastructure controls.

Responsibilities

• Represent the Technology organization as liaison for global SOX and SOC report issuance, ensuring governance, audit readiness, and regulatory compliance.
• Serve as SME for ITGCs including Access Management, Privileged Access, Change Management, SDLC, IPE, Technology Operations, and Cloud/Infrastructure controls.
• Drive remediation initiatives, root-cause analyses, and sustainable control implementations across the technology environment.
• Lead interactions with External Auditors, Internal Audit, Compliance, and 2LOD risk management functions.

Skills

SOX & SOC leadership

ITGCs expertise

Risk assessments & remediation

Executive communication

COSO/COBIT/NIST familiarity

Tools

Archer

ServiceNow

AuditBoard

Power BI

Job description

Northern Trust is seeking a technology risk leader to oversee SOX and SOC control programs across a global technology environment. You will partner with Technology leadership, Compliance, Internal Audit, External Audit, and 2LOD to ensure control design, implementation, monitoring, and improvement.

You will drive governance, audit readiness, and regulatory compliance as the subject matter expert for ITGCs and associated controls, across IAM, cloud governance, SDLC, and more.