Principal, Cyber Sec IT Riskm

About Northern Trust:
Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Summary

Responsible for providing technical expertise and support to client, IT management and staff in risk assessments. Participates in the evaluation, development, implementation, communication, monitoring and maintenance of information technology security policies and procedures. Helps establish and communicate common goal and direction for a team. Acts as a resource for direction, training and guidance for less experienced staff.

**Job Description**:
Northern Trust Technology Risk & Control function is responsible for enabling Global Information Technology to build a strong 1st Line of Defense, foster a control aware culture, deliver compliant and secure technology capabilities, protect customers and meet regulatory requirements. The Principal cybersecurity risk and control officer is part of the InfoSec Control Officer Team, responsible for leading risk and control assessments for core cyber security domains, performing security testing, and evaluating compliance to information security policies and procedures and regulatory requirements. Youi will work directly with cyber security teams providing guidance to implement defense-in-depth controls to protect Northern Trust and the customers. You will work with a dynamic team and contribute to the overall cyber security of the firm.

Major Duties
_include but not limited to;_

Lead risk and control assessments for core cyber security domains, including vulnerability management, threat management, third-party security due diligence, identity and access management

Provide technical expertise to assist the development and maintenance of cyber security standards in line with industry best practices, as well as technical expertise around security threats & vulnerabilities and software security testing

Coordinate remediation of cyber security findings from various sources

Assist in development and implementation of cyber security trainings for technical domains

Participate in cyber incident responses to provide guidance related to cyber security risks and control assurance

Influence behaviors to resolve conflicts, clarify goals and outcomes, and foster a strong technology risk management culture with information security organization

Knowledge /Skills/Abilities/Experience &
_Desirable Criteria include;_

12+ years of technical or audit experience in core cyber security fields such as vulnerability / threat management, Pen-Testing, IAM, Data Protection, IH / IR, AppSec, Network Security, System Administrator, GRC

Expert knowledge of performing risk management based on NIST 800-53.

Experience in determining vulnerability risk impact on key objectives and critical processes; ability to link risk management programs and initiatives to inform critical business strategies and processes.

Excellent analytical ability, consultative and communication skills

Applicable industry standard certification(s) preferred

Bachelor degree in Computer Science or a related discipline and technical experience in the security aspects of multiple platforms, operating systems, software, communications and network protocols or an equivalent combination of education and work experience.

Working with Us:
As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.

Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve Join a workplace with a greater purpose.

Reasonable accommodation


We hope you’re excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.