Senior Lead, Technology Risk and Control Self-Assessment (RCSA)

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services,

Northern Trust (Nasdaq

NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding

Principles That Endure

Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Title - Senior Lead, Technology Risk and Control Self-Assessment (RCSA)

Role Overview

• The Technology Risk and Control function at Northern Trust plays a critical role in enabling Global Information Technology to operate as a strong First Line of Defense, fostering a robust control-aware culture, and delivering secure, compliant, and resilient technology capabilities. The function supports regulatory compliance, protects client interests, and strengthens enterprise-wide risk management practices.
• The Senior Lead, Technology Risk and Control Self-Assessment (RCSA) will play a key role in the execution and ongoing enhancement of the Technology RCSA Program. The role will support consistent identification, assessment, measurement, monitoring, and reporting of technology risks and controls across Global Technology, in alignment with Enterprise Risk Management standards and regulatory expectations.
• The successful candidate will work closely with Technology leadership, Control Officers, Risk partners, Compliance, Audit, and other stakeholders to improve risk visibility, strengthen control effectiveness, and support proactive risk management. The role will provide subject-matter expertise and day-to-day coordination of RCSA activities, including risk identification, control design and effectiveness assessments, risk aggregation, risk appetite monitoring, and continuous improvement of Technology risk and control practices.

Key Responsibilities

Responsibilities include, but are not limited to

• Drive the day-to-day execution of the Technology Risk and Control Self-Assessment (RCSA) Program, supporting alignment with Enterprise Risk Management frameworks, regulatory expectations, and First Line of Defense responsibilities.
• Coordinate and support the identification, assessment, measurement, monitoring, and reporting of technology risks and controls across Global Technology, performing quality reviews to promote consistency, completeness, and accuracy of assessments.
• Partner with Technology teams, Control Officers, Risk, Compliance, and Audit stakeholders to maintain a comprehensive inventory of key technology risks, controls, control gaps, and associated remediation activities.
• Support the development, standardization, automation, and continuous improvement of technology risk reporting, metrics, and dashboards, leveraging Power BI, data analytics, and AI-enabled capabilities to improve risk insights and decision-making.
• Facilitate risk assessment workshops, stakeholder reviews, and governance discussions to evaluate technology risk exposure, control effectiveness, emerging risks, and alignment with established risk appetite and tolerance thresholds.
• Provide guidance and subject-matter expertise to Technology stakeholders on RCSA methodologies, risk identification, control design, assessment requirements, and risk and control documentation.
• Support the development and delivery of training, awareness, and capability-building activities to strengthen risk ownership, control accountability, and a proactive risk and control culture across Technology.
• Identify opportunities to simplify RCSA processes, strengthen assessment methodologies, improve data quality, and enhance the effectiveness and efficiency of Technology risk management practices.
• Support program governance, including the preparation of risk reporting, management information, governance materials, and escalation of key risk themes, control gaps, and emerging concerns.

Qualifications

• Strong knowledge and practical experience in Risk and Control Self-Assessment (RCSA) methodologies, operational risk management, control design, control testing, and risk governance.
• Good understanding of technology risk domains, including cybersecurity, infrastructure, cloud computing, software development, technology operations, data management, and operational resilience.
• Working knowledge of relevant risk management frameworks and industry standards such as NIST, ISO 27001, COBIT, and ITIL, as well as regulatory expectations applicable to financial services.
• Demonstrated ability to constructively challenge and influence stakeholders while building collaborative relationships across Technology, Risk, Compliance, and Audit.
• Strong analytical, written, verbal, and presentation skills, with the ability to translate complex risk and control concepts into clear and actionable information for senior stakeholders.
• Experience using data analytics and visualization capabilities, including Power BI, to support risk reporting and insights. Exposure to AI-enabled capabilities within risk and control processes is an advantage.

Experience and Education

• Bachelor’s degree in technology, information security, cybersecurity, risk management, or related discipline.
• Relevant experience in technology risk management, technology controls, operational risk, audit, cybersecurity, or related roles with transferable skills.

Salary Range

$95,600 - 162,400 USD

Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.

Work Authorization

Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).

Working with Us

As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.

Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.

Reasonable Accommodation

Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com, or alternatively you can discuss your individual requirements with the recruiter you are working with.