Senior Director of Technology and Cyber Risk Management

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Position Overview

The function of the Senior Director of Tech Risk Management role will be to help define and implement 2nd line of defense functions, including developing several new capabilities. This role assists the Head of Cyber and Technology Risk Management in the execution of strategic technology risk objectives, establishing 2nd LOD oversight and governance over all Technology Programs, including IT Asset Management, Enterprise Infrastructure, Cloud Infrastructure, IT Incident Management, Software Development Lifecycle, End of Life/End of Service, Disaster Recovery, and other technology programs. This role also directs the operational and administrative activities associated with running this team and is accountable for the performance management process and staffing for the team.

Key Responsibilities

• Develop and lead the oversight and governance over all technology programs in 1st LOD, including associated standards or procedures, training, and controls.
• Partner with other Non-Financial Risk leaders to develop and mature the Technology Risk Reporting, including inputs to the Technology Risk appetite metrics and other senior management and board-level dashboards.
• Develop a new program to ensure comprehensive and recurring risk management assessments are conducted and all key controls are implemented.
• Be a key leader in any technology incident management activities in partnership with the Operational Resilience Incident Management and 1LOD teams.
• Partner with Chief Administrative Office and Risk Reporting teams to develop KPIs and KRIs for technology risk programs.
• Develop budgets and resource requirements for direct reporting teams.
• Participate in the development of team strategic plans, annual goals, delivery plans, and quarterly and monthly updates and retrospectives.

Knowledge/Skills

• Broad understanding of existing and emerging technology risks, particularly those to the financial sector, and how to prevent them from impacting Northern Trust.
• Strong understanding of technology regulatory requirements for the financial sector.
• Strong understanding of cybersecurity and technology risk control frameworks, including but not limited to NIST Cybersecurity Framework, COBIT, ISO, CIS, and CSA.
• Strong aptitude to develop and maintain internal and external business relationships.
• Extensive knowledge of systems security architecture, excellent consultative skills, strong analytical ability, and ability to work effectively with clients.
• Experience effectively communicating technology risk posture in the context of the business at the executive level.
• Experience with technology risk metrics development and reporting.
• Extensive knowledge of technology risk management to include risk treatment, issues management, control validation, cybersecurity consultation and assessment, risk measurement and reporting, and lines of defense.
• Ability to influence risk decisions with both business and technology organizations without formal authority.

Experience

• 8-10 years of cybersecurity experience either in an operational role or in risk management role.
• Bachelor's degree in computer science or related field of study or comparable work experience.
• Experience leading a team in an operational risk management program with preference for technology experience in any of the three lines of defense.
• Experience leading a regionally disparate team.
• Demonstrated experience working with senior-level clients in a consultative and/or advisory capacity.
• Demonstrated experience presenting to executive management.

Working with Us

We have a balanced hybrid working model to ensure you get the flexibility you need. The successful candidate will spend their time between working in the office and working from home.

Salary Range: $171,700 - 300,500 USD

Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability emboldens us to explore new ideas.

We’d love to learn more about how your interests and experience could be a fit with one of the world’s most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater

Reasonable Accommodation

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at .

Apply today and talk to us about your flexible working requirements and together we can achieve greater.