Lead, Cyber Sec IT Risk Management

Responsibilities

• Conduct security risk assessments on new and existing third-party business partners to ensure proper preventative and detective controls.
• Serve as a Subject Matter Expert (SME) on third-party risks across domains including Cloud Security, Network Security, and Access Control.
• Define, maintain, and refine KPIs, KRIs, and KCIs to measure program effectiveness and vendor risk trends.
• Build and present executive-level dashboards and reports to senior leadership to provide actionable security insights.
• Utilize AI-driven tools and Microsoft Copilot to automate third-party risk management workflows and documentation.
• Review master services contracts to identify and manage information technology and security-related clauses.
• Support issue owners with root cause analysis, impact analysis, and remediation tracking to ensure all findings meet acceptance criteria.
• Coordinate with various lines of defense to respond to audit, regulatory requirements, and cyber incident responses.

Requirements

• Bachelor's degree in Computer Science or a related field.
• 10+ years of experience in Technology Security.
• Strong working knowledge of information security frameworks such as NIST, ISO 27001, SIG, or SOC2.
• Proven experience with Cloud Security and Network Security.
• Proficiency in MS Office and SharePoint.

Preferred Qualifications

• Professional certifications such as CISA, CRISC, CISM, or CISSP.
• Experience working in global, cross-functional, and collaborative team environments.
• In-depth understanding of operating systems, software development, and database systems.
• Advanced experience with reporting tools and data analytics.

About the Company

Northern Trust is a Fortune 500 company and a globally recognized financial institution that has been in continuous operation since 1889. We provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions through our enduring principles of service, expertise, and integrity.