Head of Technology Control Assurance at Northern Trust in Chicago, Illinois

Job Description:

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world's most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.

Summary

The Head of Technology Control Assurance will set the direction and strategy for designing key controls for information technology, maintaining technology Process, Risk and Control library, delivering Risk and Control Self-Assessments and application risk assessment, and establishing a strong control environment within technology organization. As a leader within Technology Control and Risk function, you will work with Chief Information Security Officer, Chief Technology Officer, Business Unit Chief Information Officers and other leaders within Northern Trust's risk and audit functions and play a vital role in establishing and maintaining a highly effective IT control environment. The Control Assurance team is responsible for designing and executing a first-class IT control assurance program, understanding and interpreting cybersecurity and technology standards, evaluating the impact of these on controls, and ensuring information technology is operating in line with Northern Trust's risk appetite.

Major Duties

• Set strategy and direction for the implementation, development, and maintenance of the technology control assurance program in accordance with the firm's overall risk management framework. Key responsibilities include maintenance of technology Process, Risk and Control (PRC) framework, and full alignment with regulatory requirements as well as industry risk and control frameworks.


• Maintain a modernized program to maintain technology Process, Risk and Control (PRC) and IT control inventory, align IT controls and practices to Northern Trust's IT policies and control standards and global regulatory requirements, and integrate with technology team's delivery practices.


• Set strategy and oversee execution of a comprehensive control assurance function, including risk and control self-assessments by technology management, identification and evaluation of inherent risks, and control strength and residual risks of key IT controls. Coordinate with the central control testing functions to plan, execute and report risk-based control testing program.


• Establish and mature a data driven and automated application risk assessment and infrastructure risk assessment program. Integrate results of multiple assessments into comprehensive risk reporting.


• Coordinate planning, execution and reporting of technology external assurance reports (e.g., SOC1, SOC2 and SOX reports) globally in coordination with Global Financial Services and other stakeholders,.


• Advise technology leaders to leverage automation and analytics to enable control automation and continuous control monitoring. Advise technology leaders in establishing Key Control Indicators (KCIs), develop on-going report of risk and control reporting in line with the firm's risk management framework and standards.


• Provide critical control-based decision-making information to technology leadership to ensure the operating state of the environment meets security control expectations and the adequacy of information system controls.


• Work with other leaders within Norther Trust's technology management and three lines of defenses to assist in timely addressing control gaps, identifying potential opportunities for improvement, and advising on control designs for large complex programs (e.g, cloud, API, third-party vendor oversight, data governance).


• Influence behaviors to reduce risk and foster a strong technology risk management culture throughout the enterprise.


• Inspire, lead and develop a motivated, high-performance IT Control Assurance team. Promotes inclusivity and diversity

• In-depth understanding and experiences of information security, IT audit and/or IT risk management principles.


• In-depth understanding of assessments of IT related processes such as information security, system development and change management, computer operations and data protection.


• Experiences of GRC systems (e.g., ServiceNow) preferred Experience in automation and analytics preferred


• Strong collaboration and relationship management skills, including experiences in executive management relationship Proactive, dynamic leadership and big picture, strategic thinking


• Strong written and verbal communication skills Highly flexible and adaptable to change, technology forward thinking


• Displays a balanced, cross-functional perspective, liaising with the business to improve efficiency, effectiveness and productivity

Your Employment Experience

• A Bachelor's degree in Accounting, Finance, Information Technology, Management Information Systems, Computer Science or a related discipline.


• At least 12 or more years of technology risk management, control functions, audit services experience, or similar experience with transferable skills. Financial Services industry experience is a plus.

Salary Range:
$137,400 - 240,400 USD

Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.

Working with Us:

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.

Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.

We'd love to learn more about how your interests and experience could be a fit with one of the world's most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater

Reasonable accommodation

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com .

We hope you're excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.

Apply today and talk to us about your flexible working requirements and together we can achieve greater.