Overview
On Site
USD 137,400.00 - 240,400.00 per year
Full Time
Skills
Financial Services
IT Risk Management
IT Risk
Training
Security Architecture
Policies and Procedures
Risk Assessment
Auditing
Evaluation
Testing
Computer Hardware
Firmware
System Security
Recruiting
Strategic Planning
Budget
Risk Management
Regulatory Compliance
SDM
Incident Management
POC
Agile
IBS
Vulnerability Assessment
Process Management
Encryption
Data Masking
Recovery
Migration
Cloud Computing
Artificial Intelligence
Inventory
Communication
Analytical Skill
Management
IT Management
Computer Science
Operating Systems
Network Protocols
Insurance
Finance
Job Details
About Northern Trust:
Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.
Northern Trust is proud to provide innovative financial services and guidance to the world's most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.
Major Duties :1. Manages the Technology Risk unit or function. Establishes
performance standards for the unit. Conducts the performance
management process, identifies training and career development
needs.
2. Approves IS security architecture/designs, plans, controls, processes,
standards, policies and procedures to ensure alignment with IS
standards and overall IS security strategy.
3. Responsible for directing the development of techniques and
procedures for conducting IS security risk assessments and
compliance audits, the evaluation and testing of hardware, firmware
and software for possible impact on system security, and the
investigation and resolution of security incidents.
4. Advises management on security effectiveness and recommends
enhancements. Develops, implements, and communicates an
overall strategy to meet both the business units and the corporations
strategic plan. Directs the activities of the area towards accomplishing
those objectives.
5. Determines staffing needs, makes hiring and firing decisions, handles
salary administration, and ensures resources are available to
accomplish priorities. Develops and manages diversity programs and
programs for the unit.
6. Participates in developing the business unit strategic plan and
sets goals and priorities based on the direction set for the unit.
Follows through to ensure that objectives are met.
7. Develops unit(s) budget and manages the expenses for the unit.
8. Develops risk management and compliance programs and activities
for the unit.
Specific roles and responsibilities include the following:
1) Serve as risk and control lead to inform and lead BU CIO portfolio of risks and controls work, in conjunction with SDM and BU Chief Architect
2) Lead and oversee risk treatment and issue management efforts for the LOB and represent used cases in IT and business oversight committees and governance groups
3) Serve as effective liaison and POC for 2LOD and 3LOD functions as well as regulators for BU CIOs
4) Embed control SME in the app development Agile teams to shift-left, including control assessments for major initiatives for BU CIOs
5) Lead and actively interface in the IBS tech vulnerability assessment for BU CIO and provide control enhancement advise and jointly drive remediation projects for vulnerability remediation
6) Lead and actively interface in the following horizontal remediation projects for the LOB . Provide risk-based prioritization approach, delivery and on-going BAU process implementation: a) Data Encryption, b) Data Masking, c) Value Chain, d) Point-In-Time Recovery, e) RCE
7) Lead and oversee from a risk perspective, cloud migration pipelines for the LOB and readiness to mitigate application and data risks.
8) Develop cloud and AI control framework, control inventory
9) Actively engage in the BU ARB meetings and serve as risk and control SME for Go-No/Go decisions for BU CIOs
10) Responsible for proactive and comprehensive application control health monitoring and control enhancement backlog management for the LOB
Knowledge :Requires excellent communication skills, analytical ability, strong judgment and management skills, and the ability to work effectively with client, IT management and staff, vendors and consultants.
Experience :Bachelor degree in Computer Science or a related discipline and at least six, typically eight or more years experience in security aspects of multiple platforms, operating systems, software, communications and network protocols or an equivalent combination of education and work experience.
Salary Range:
$137,400 - 240,400 USD
Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.
Working with Us:
As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.
Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.
We'd love to learn more about how your interests and experience could be a fit with one of the world's most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater
Reasonable accommodation
Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at .
We hope you're excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.
Apply today and talk to us about your flexible working requirements and together we can achieve greater.
Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.
Northern Trust is proud to provide innovative financial services and guidance to the world's most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.
Major Duties :1. Manages the Technology Risk unit or function. Establishes
performance standards for the unit. Conducts the performance
management process, identifies training and career development
needs.
2. Approves IS security architecture/designs, plans, controls, processes,
standards, policies and procedures to ensure alignment with IS
standards and overall IS security strategy.
3. Responsible for directing the development of techniques and
procedures for conducting IS security risk assessments and
compliance audits, the evaluation and testing of hardware, firmware
and software for possible impact on system security, and the
investigation and resolution of security incidents.
4. Advises management on security effectiveness and recommends
enhancements. Develops, implements, and communicates an
overall strategy to meet both the business units and the corporations
strategic plan. Directs the activities of the area towards accomplishing
those objectives.
5. Determines staffing needs, makes hiring and firing decisions, handles
salary administration, and ensures resources are available to
accomplish priorities. Develops and manages diversity programs and
programs for the unit.
6. Participates in developing the business unit strategic plan and
sets goals and priorities based on the direction set for the unit.
Follows through to ensure that objectives are met.
7. Develops unit(s) budget and manages the expenses for the unit.
8. Develops risk management and compliance programs and activities
for the unit.
Specific roles and responsibilities include the following:
1) Serve as risk and control lead to inform and lead BU CIO portfolio of risks and controls work, in conjunction with SDM and BU Chief Architect
2) Lead and oversee risk treatment and issue management efforts for the LOB and represent used cases in IT and business oversight committees and governance groups
3) Serve as effective liaison and POC for 2LOD and 3LOD functions as well as regulators for BU CIOs
4) Embed control SME in the app development Agile teams to shift-left, including control assessments for major initiatives for BU CIOs
5) Lead and actively interface in the IBS tech vulnerability assessment for BU CIO and provide control enhancement advise and jointly drive remediation projects for vulnerability remediation
6) Lead and actively interface in the following horizontal remediation projects for the LOB . Provide risk-based prioritization approach, delivery and on-going BAU process implementation: a) Data Encryption, b) Data Masking, c) Value Chain, d) Point-In-Time Recovery, e) RCE
7) Lead and oversee from a risk perspective, cloud migration pipelines for the LOB and readiness to mitigate application and data risks.
8) Develop cloud and AI control framework, control inventory
9) Actively engage in the BU ARB meetings and serve as risk and control SME for Go-No/Go decisions for BU CIOs
10) Responsible for proactive and comprehensive application control health monitoring and control enhancement backlog management for the LOB
Knowledge :Requires excellent communication skills, analytical ability, strong judgment and management skills, and the ability to work effectively with client, IT management and staff, vendors and consultants.
Experience :Bachelor degree in Computer Science or a related discipline and at least six, typically eight or more years experience in security aspects of multiple platforms, operating systems, software, communications and network protocols or an equivalent combination of education and work experience.
Salary Range:
$137,400 - 240,400 USD
Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.
Working with Us:
As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.
Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.
We'd love to learn more about how your interests and experience could be a fit with one of the world's most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater
Reasonable accommodation
Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at .
We hope you're excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.
Apply today and talk to us about your flexible working requirements and together we can achieve greater.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.