Principal – Technology and Cyber Risk Management

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

The role

This role supports delivery of Northern Trust’s Information Security and Technology Risk Program objectives through deep industry and technical expertise. The position is an individual contributor role, working closely with peers and management to identify, assess, and reduce significant technology and cybersecurity risks, while positively influencing strategic program outcomes.

The key responsibilities of the role include;

• Identify emerging technology and cybersecurity risks (e.g., Artificial Intelligence, Digital Assets, Quantum Computing, Cloud/SaaS, Identity & Access Management) and lead risk reduction through expert assessment and advisory.

• Review, challenge, and provide independent risk perspective on significant technology strategies, initiatives, and architectures.

• Conduct technology and cybersecurity risk assessments, deep dives, testing activities, and operational exercises.

• Research, design, and develop testing tools and risk assessment frameworks for enterprise use.

• Partner with stakeholders to define practical remediation action plans for identified risks.

• Document assessment results, findings, and remediation plans; report clearly to management and senior stakeholders.

• Plan, schedule, and monitor deliverables, milestones, and outcomes across assigned initiatives or programs.

• Produce meaningful risk metrics, dashboards, and deep‑dive assessment reporting.

• Provide cross‑training and mentorship to junior team members.

• Support training, awareness, and education activities related to technology and cybersecurity risk management.

• Remain current on industry trends, emerging threats, technologies, and pricing; advise management and executives on business and financial impact.

• Support strategically important initiatives across information security and technology risk management.

• Participate in technology and cybersecurity incident response activities as required.

Skills and Experience

The successful candidate will benefit from having;

• Several years experience in a highly regulated technical or security-related field.

• Current professional certification required (CISA, CISM, CRISC, CISSP, or equivalent).

• Bachelor’s degree in Accounting, Finance, Information Technology, Management Information Systems, Computer Science, or related discipline (or equivalent practical experience).

• Advanced degree in IT or related field is a plus.

• Expert knowledge of emerging cybersecurity and technology risks, including AI, Digital Assets, Quantum Computing, Cloud/SaaS, and IAM.

• Strong experience performing application security, infrastructure, and technology risk assessments.

• Proven ability to review and challenge first line of defense technology teams within large, highly regulated financial services organizations.

• Background in security consulting or senior advisory roles, providing risk guidance to senior management.

• Experience scoping engagements and developing technical or risk-focused proposals.

• Strong project management skills with the ability to manage multiple priorities simultaneously.

• Excellent written and verbal communication skills, with demonstrated ability to produce clear, well‑structured, and well‑justified documentation and reports.

• Ability to work effectively both independently and within diverse, multi‑national teams.

• Strong stakeholder management skills, with the ability to build trusted relationships at all organizational levels and with third‑party providers.

Working with Us:

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.

Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.

We’d love to learn more about how your interests and experience could be a fit with one of the world’s most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater

Reasonable accommodation

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [email protected].

We hope you’re excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.

Apply today and talk to us about your flexible working requirements and together we can achieve greater.