Full-Time
Infrastructure Vulnerability Management Governance Lead
Northern Trust
10,001+ employees
Global wealth management and asset servicing
No salary listed
Pune, Maharashtra, India
In Person
On-site role in Pune, India; no remote work.
Bachelor's
 IT & Security (1) |
|---|
Get referred to Northern Trust
See people who can refer or advise you
- Strong experience in Vulnerability Management governance, risk, and control oversight, with 8+ years in Information Security, Technology Risk, Cyber Risk, or related roles.
- 4+ years of experience in Financial Services.
- In-depth understanding of Vulnerability Management processes, remediation lifecycle management, vulnerability prioritization methodologies, risk exceptions, and regulatory expectations in large enterprise environments.
- Strong understanding of vulnerability severity models, including CVSS-based prioritization and risk-based remediation frameworks.
- Proven ability to manage remediation accountability, escalations, governance forums, and closure tracking across multiple technology teams.
- Highly motivated, self-starter who handles ambiguity well and drives execution end-to-end.
- Strong critical thinking, analytical, leadership, stakeholder management, and organizational skills.
- Proven ability to build relationships, influence stakeholders, and drive risk-based decisions across functions.
- Ability to challenge and influence stakeholders with differing viewpoints while driving consensus and measurable outcomes.
- Strong verbal and written communication skills with the ability to present executive-ready risk reports and governance updates.
- Bachelor's degree in Information Technology, Cyber Security, Computer Science, Risk Management, or related field.
- Certifications in Cyber Security, Risk, Audit, or Vulnerability Management are preferred.
- Experience working with global stakeholders and large-scale enterprise Infrastructure environments is preferred.
- Experience supporting vulnerability governance programs, remediation oversight, and audit readiness activities is highly desirable.
- Support the Principal in managing Vulnerability Management governance activities across regions, including oversight of remediation plans, risk exceptions, SLA breaches, escalations, and closure tracking.
- Support the Principal in strengthening Vulnerability Management processes and improving control sustainability across Infrastructure and Platform teams.
- Drive weekly and monthly vulnerability risk and remediation reporting, including current state, aging, due and overdue vulnerabilities, SLA adherence, exception status, and executive escalations.
- Support Infrastructure and Application owners in identifying vulnerability-related risks and assessing the design and operating effectiveness of vulnerability management controls.
- Lead governance activities related to Infrastructure Vulnerabilities (VITs), Container Vulnerabilities (CVITs), Application Security findings, Secure Configuration findings (CTRs), deferrals, and false-positive validations.
- Monitor and challenge remediation progress to ensure accountability and timely closure of high-risk and aging vulnerabilities.
- Establish and maintain strong working relationships with Vulnerability Operations, Infrastructure teams, Technology owners, Risk Management, and Cyber Security stakeholders globally.
- Facilitate governance forums and oversight meetings, ensuring actions, risks, decisions, and commitments are accurately documented, tracked, and reported.
- Coordinate with Global and Regional stakeholders to plan and execute vulnerability oversight coverage aligned with audit requirements, regulatory expectations, and emerging risk priorities.
- Analyze vulnerability trends, recurring remediation delays, and systemic risk themes to identify opportunities for control improvement and process enhancement.
- Support audit and assessment activities by ensuring audit-ready documentation, evidence, metrics, and response coordination related to Vulnerability Management governance.
- Provide executive-level visibility on remediation performance, risk concentrations, and emerging cyber risk themes through dashboards, scorecards, and leadership reporting.
- Certifications in Information Security, Cyber Risk, Vulnerability Management, Risk, or Audit (e.g., CISSP, CISM, CRISC, CISA, CIA).
- Hands-on exposure to vulnerability management platforms and security tooling such as Tenable, Qualys, Rapid7, ServiceNow Vulnerability Response, Wiz, Prisma Cloud, or similar technologies.
- Understanding of Infrastructure patch management, secure configuration management, cloud security, and application security practices.
- Experience with Power BI or similar reporting and visualization tools.
- Experience with ServiceNow, governance tracking, metrics reporting, or dashboarding solutions.
- Prior experience supporting technology audits, regulatory reviews, or cybersecurity assessments in Financial Services.
- Experience in vulnerability risk analytics, trend analysis, and executive-level cyber risk reporting.
Preparing company summary.
Company Size
10,001+
Company Stage
IPO
Headquarters
Menlo Park, California
Founded
1889
Get referred to Northern Trust
See people who can refer or advise you
Simplify's Take
What believers are saying
- Q2 2026 delivered eighth straight quarter of positive organic fee growth.
- Northern Trust won Dawson Partners on July 28, 2026 for multi-jurisdictional private markets servicing.
- NEST’s 15-year partnership shows clients keep expanding Northern Trust after platform standardization.
What critics are saying
- The January 2026 $35 million elder-fraud lawsuit damages Northern Trust’s fiduciary brand.
- July 2026 restructuring included 51 million severance and 62 million software write-downs.
- A major custody-control failure could trigger client flight and destroy trust-led asset servicing economics.
What makes Northern Trust unique
- Northern Trust’s 20.0T AUC/A platform gives it scale competitors cannot quickly replicate.
- The August 2026 Lukka partnership adds institutional crypto reporting across 100-plus blockchains.
- The July 2026 ETF platform launch bundles custody, accounting, transfer agency, and AP services.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health Insurance
Dental Insurance
Vision Insurance
Life Insurance
Disability Insurance
401(k) Retirement Plan
401(k) Company Match
Paid Vacation
Paid Sick Leave
Paid Holidays
Parental Leave
Hybrid Work Options
Flexible Work Hours
Mental Health Support
Wellness Program
Growth & Insights and Company News
6 month growth
↓ -4%1 year growth
↓ -4%2 year growth
↓ -4%Northern Trust has partnered with Lukka to add digital asset reporting capabilities to its services. Lukka provides data infrastructure and analytical tools for institutions handling digital assets, helping firms collect, standardise and report data from both on-chain and off-chain activity. The collaboration will give clients broader reporting on digital asset information, including transaction records and point-in-time balances. Northern Trust will use Lukka's platform to connect with over 100 blockchains and more than 400 centralised and decentralised exchange sources, as well as custodians and wallets. The service aims to provide scalable reporting tools as institutions increasingly seek streamlined approaches to managing digital asset exposures whilst maintaining the controls expected in traditional finance.
Upstart, an AI-powered lending platform, stands out as a buy opportunity among profitable stocks, according to StockStory's analysis. The company uses machine learning to assess borrower risk for various loan types. Upstart's loan originations surged 54.3% over the past year, enabling increased fee collection and expansion into new markets like credit cards. The company's revenue is expected to grow 30.6% over the next 12 months, with free cash flow anticipated to turn positive next year. Meanwhile, StockStory advises caution on Revvity and Northern Trust. Revvity's sales declined 10.6% annually over five years, whilst Northern Trust's 6.9% annual revenue growth lagged behind financial peers. Both companies face headwinds despite maintaining profitability, with earnings pressures and market share concerns affecting their outlooks.
Northern Trust partners with Lukka to launch institutional-grade digital asset reporting services. Quick summary. Northern Trust has partnered with Lukka to provide institutional-grade digital asset reporting. This collaboration enables institutional investors to aggregate on-chain and off-chain data from over 100 blockchains and 400 exchanges, ensuring a unified view of digital and traditional portfolio holdings for enhanced compliance and risk management. How does Northern Trust solve digital asset reporting challenges? Northern Trust addresses the complexity of digital asset data by integrating Lukka's sophisticated software infrastructure. This partnership allows institutional clients to bridge the gap between traditional finance workflows and the decentralized ecosystem. By providing a single pane of glass for both asset classes, Northern Trust eliminates the fragmentation typically associated with crypto-investments. * Unified Reporting: Combines wallet, balance, and transaction data with traditional holdings. * Scalable Infrastructure: Designed to handle the high volume of institutional digital asset adoption. * Audit-Ready Intelligence: Normalizes raw data into standardized formats suitable for financial reporting. What connectivity does the Lukka partnership provide? The technical backbone of this agreement leverages Lukka's extensive network to ensure comprehensive market coverage. Institutions can now access data across a vast array of sources without building custom integrations for every new protocol or exchange. This institutional-grade digital asset solution focuses on transparency and control, mirroring the standards expected in highly regulated markets. * Access to 100+ blockchains and 400+ centralized and decentralized exchanges. * Integration with OTC desks, custodians, and digital wallets. * Historical views of point-in-time balances and full transaction histories. How does this impact institutional portfolio management? By streamlining the ingestion of normalized data, Northern Trust enables more accurate valuation and risk assessment. As institutional participation in digital markets accelerates, the ability to maintain consistent reporting standards across diverse venues becomes a competitive necessity. This move signals a shift toward a more interoperable servicing model where digital assets are treated with the same rigor as equities or bonds. Ff news take: This partnership moves the needle by legitimizing institutional-grade digital asset reporting within a Tier-1 global custodian's ecosystem. Northern Trust isn't just adding a feature; they are validating that digital assets require the same audit-ready transparency as traditional markets. For the industry, this lowers the barrier to entry for conservative institutional capital that has previously been deterred by fragmented data and reporting hurdles. Featured speakers.
Northern Trust has launched application programming interfaces for its banking services, enabling institutional clients to access real-time data and payment capabilities through automated connectivity. The APIs provide payment instructions, intraday and end-of-day reporting on account balances, and on-demand data delivery in industry-standard formats. NAV Fund Services, a global fund administrator serving alternative asset managers, is the first client to implement the capability in production. The integration supports more efficient reconciliation, reduced operational risk, and improved data accessibility. "These capabilities allow clients to tightly integrate with Northern Trust for real-time balance and transaction information," said Peter Lantero, head of Banking & Treasury Services at Northern Trust. The API interfaces eliminate delays from batch processing and file dependencies.
Northern Trust launches APIs to enable real-time digital connectivity for banking services. Northern Trust today announced the launch of application programming interfaces (APIs) for its banking services, providing Asset Servicing institutional banking clients with real-time access to data and services through automated connectivity. The API solution enables clients to integrate banking data directly into their operational workflows. Northern Trust's APIs provide clients with automated access to real-time banking data and payment capabilities through direct system integration, including: * Payment instructions and access to intraday and end-of-day reporting on account balances and activity, including real-time credit, debit and balance confirmations; * On-demand data delivery in industry-standard formats that support faster, more seamless integration; * Straight-through processing, improved cash visibility and reduced manual intervention. "Launching APIs for our banking clients underscores Northern Trust's commitment to innovation and digital leadership," said Peter Lantero, head of Banking & Treasury Services at Northern Trust. "These capabilities allow clients to tightly integrate with Northern Trust for real-time balance and transaction information, supporting the complex needs of clients as their operating models continue to evolve." NAV Fund Services (NAV), an independent, global fund administrator serving alternative asset fund managers, is the first client to implement the new capability in production, developed through collaboration between the two firms' technology teams. Working across a wide range of transaction types - covering balance and transaction reporting, cash management, data delivery and real-world fund administration scenarios - NAV built the integration technology to bring Northern Trust's APIs for banking clients into its platform in real time. The integration supports more efficient reconciliation, reduced operational risk, and improved data accessibility aligned with NAV's broader digital strategy. "As a fund administrator, timely and automated access to banking data is critical to supporting our clients and our operations," said Ravi Gupta, Chief Strategic Solutions Officer at NAV Fund Services. "Bringing real-time banking data into fund administration at this level required highly technical collaboration between our teams. We worked through a wide range of transaction types and real-world scenarios together to test and finalize for launch, and we're continuing to extend the capabilities. The resulting API interfaces eliminate the delays of batch processing and file dependencies and advance how we service our clients." About NAV Fund Services Founded in 1991, NAV Fund Services is a privately owned fund administrator recognized for its innovative proprietary technology and award-winning solutions for multiple fund strategies, including hedge funds, private equity/venture capital/real estate funds, and digital asset and tokenized funds. A team of 3,300+ professionals services 2,550+ global funds with $450 billion total AUA, while maintaining a 99% client retention rate. The company is based in the U.S. with eight service and technology facilities in India and locations in Australia, Cayman Islands, Ireland, Mauritius, Philippines, and Singapore, plus the ability to service clients in additional jurisdictions worldwide. For more information: https://www.navfundservices.com/ About Northern Trust Northern Trust Corporation (Nasdaq: NTRS) is a leading provider of wealth management, asset servicing, asset management and banking services to corporations, institutions, affluent families and individuals. Founded in Chicago in 1889, Northern Trust has a global presence with offices in 24 U.S. states and Washington, D.C., and across 22 locations in Canada, Europe, the Middle East and the Asia-Pacific region. As of June 30, 2026, Northern Trust had assets under custody/administration of US$20.0 trillion, and assets under management of US$2.0 trillion. For more than 135 years, Northern Trust has earned distinction as an industry leader for exceptional service, financial expertise, integrity and innovation. Visit 6ix Inc. on northerntrust.com. Follow 6ix Inc. on Instagram @northerntrustcompany or Northern Trust on LinkedIn. Northern Trust Corporation, Head Office: 50 South La Salle Street, Chicago, Illinois 60603 U.S.A., incorporated with limited liability in the U.S. Global legal and regulatory information can be found at https://www.northerntrust.com/terms-and-conditions. View source version on businesswire.com: https://www.businesswire.com/news/home/20260804260917/en/