Principal, Technology Risk and Control

About this role

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Title: Principal, Technology Risk and Control

Role Overview • The Technology Risk and Control function at Northern Trust plays a critical role in enabling Global Information Technology to operate within a strong First Line of Defense, foster a robust control-aware culture, and deliver secure, compliant, and resilient technology capabilities. The function supports regulatory compliance, protects client interests, and strengthens enterprise-wide risk management practices. • The Principal, Technology Risk and Control role is accountable for end-to-end ownership of the Technology Risk and Control Issue Management Program Operations. This role will be part of a highly skilled global team dedicated to promoting control awareness and ensuring disciplined management of technology risks across the organization. • The successful candidate will partner closely with Global Technology stakeholders, advising on compliance with Issue Management requirements, and will collaborate with Risk, Compliance, and Audit partners to ensure a complete, accurate inventory of technology control–related issues. The role also provides operational leadership and oversight of a team responsible for executing the full lifecycle of high-risk issue management, including pre-assertion validation.

Key Responsibilities Responsibilities include, but are not limited to: • Support the Issue Management Process Owner in overseeing program operations and driving the strategic direction of the Technology Issue Management process. • Provide strong program and project management leadership in the design, development, and implementation of operational enhancements to the Technology Risk and Control Issue Management Program, ensuring alignment with the Enterprise Issue Management framework and Technology-specific expectations. • Lead the simplification, standardization, and automation of Technology Issue Management metrics and reporting, leveraging Power BI to deliver accurate, timely, and actionable insights; design, develop, and implement advanced analytics and AI-enabled use cases focused on issue quality assessment, trend analysis, and identification of data quality gaps to enhance decision-making, risk visibility, and program effectiveness. • Design, deliver, and administer comprehensive training programs for Risk and Control staff, Technology teams, issue source owners, and business stakeholders. • Manage day-to-day operational activities, including development of executive-level meeting materials, facilitation of issue review forums, documentation and tracking of follow-up actions, high-risk issue validation, and status reporting. • Drive accountability by holding Control Officers and stakeholders accountable to defined process requirements and standards. • Continuously assess program effectiveness and identify opportunities for process improvement and maturity enhancement. • Serve as the primary point of contact and visible advocate (“face”) for the Technology Issue Management Program, partnering with stakeholders on adoption, integration, and potential expansion of program usage and supporting tools. • Ensure appropriate governance, challenge, and oversight of issues progressing through risk acceptance. • Facilitate governance committees, working groups, and stakeholder forums, acting as a trusted advisor on technology risk and control matters within the Issue Management scope. • Partner with Second Line of Defense teams to align on issue management expectations, aggregated risk measurement, and risk analysis; take appropriate actions to address identified gaps or emerging risk trends. • Oversee executive reporting, issue tracking and remediation, and measurement against defined risk appetite thresholds. • Influence behaviors and decision-making to reduce risk exposure and strengthen a proactive technology risk management culture across the enterprise.

Qualifications • Strong program and project management capabilities, including product/process ownership, milestone management, risk and issue escalation, system development oversight, training and awareness initiatives, and management reporting. • Demonstrated expertise in control identification and definition, issue validation methodologies, and remediation governance. • Deep understanding of information security principles, technology risk assessments, and security risk management frameworks. • Proven ability to build and sustain strong collaborative relationships across functions, including senior and executive leadership. • Excellent written and verbal communication skills, with the ability to clearly articulate complex risk and control topics to senior stakeholders.

Experience and Education • Bachelor’s degree in technology, information security, cybersecurity, or related discipline. • Minimum of 10+ years of experience in technology risk management, control functions, audit services, or related roles with transferable skills. • Prior experience within the financial services industry is strongly preferred. • Relevant technology or security certifications (e.g., CISSP, CISA and CRIC) and professional qualifications are an advantage.

Applicants must be authorized to work in the U.S. without the need for employment-based vi

Similar jobs

• Senior Manager, Business Risk and Controls - Technology — KeyBank · Brooklyn, OH
• Manager, Technology Risk — Hinge Health · San Francisco-HQ
• Vice President, Technology Risk & Controls — Blackrock · Wilmington, DE
• Senior Manager, Technology Risk — Upstart · Remote
• Director Technology Risk — Ameriprise · Minneapolis, Minnesota
• Technology Project Manager- Risk & Controls — Morgan Stanley · New York, New York, United States
• Technology Risk and Controls Senior Consultant — Crowe · Chicago IL USA
• Technology Risk Management - Control Officer; VP — MUFG · New York, NY