Description

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world's most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.

Northern Trust Technology Risk & Control Function enables Global Information Technology to operate a strong 1st Line of Defense, foster a risk-aware and control-conscious culture, deliver resilient and compliant technology capabilities, protect customers, and meet regulatory and business requirements across the enterprise.

The Principal Technology Risk & Control Officer is a senior member of the Technology Risk and Controls team, responsible for leading end-to-end technology risk management across platforms, infrastructure, applications, data, third-party services, and delivery pipelines. The role provides independent risk perspective while partnering closely with technology, architecture, operations, product, and risk stakeholders to identify, assess, and manage technology risks throughout the lifecycle.

You will work across multiple technology domains-beyond information security and cyber-to ensure risks are transparently identified, well-controlled, and aligned to business objectives, regulatory expectations, and industry best practices. You will contribute to strengthening Northern Trust's overall technology risk posture and operational resilience.

Major Duties:

• Lead technology risk and control assessments across a broad range of domains, including application development, infrastructure, cloud, data, identity and access management, resiliency, third-party technology services, change management, and technology operations
• Evaluate technology risks throughout system lifecycles, including design, build, deployment, operation, and decommissioning, ensuring alignment with enterprise risk appetite and regulatory expectations
• Provide subject-matter expertise to support the development, maintenance, and alignment of technology risk, control, and governance standards with industry frameworks and internal policies
• Partner with technology teams to assess control design and operating effectiveness, and to drive timely remediation of technology risk findings from audits, regulatory exams, risk assessments, and internal reviews
• Analyze the impact of technology risks on critical business services, key processes, and customer outcomes, including availability, integrity, resilience, and regulatory compliance
• Participate in major incident, resiliency, and control-failure events, providing technology risk guidance and contributing to root-cause analysis and control enhancements
• Support technology risk training, awareness, and advisory activities to strengthen risk ownership and decision-making across engineering, operations, and delivery teams
• Influence behaviors, resolve conflicts, and foster strong collaboration between technology, risk, and business stakeholders to promote a mature and accountable technology risk management culture

Experience

• 10+ years of experience in technology, risk management, audit, or control functions covering multiple technology domains such as application development, infrastructure, cloud, data, identity and access management, operations, resiliency, or third-party technology risk
• Strong experience performing technology risk assessments using recognized risk management frameworks (e.g., NIST, COBIT, ISO, or equivalent)
• Demonstrated ability to assess risk impact, control effectiveness, and residual risk, and to translate technical issues into business-relevant risk insights
• Proven consultative, analytical, and communication skills with experience engaging senior technology and risk leaders
• Industry certifications (risk, technology, audit, or security) preferred but not required
• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related discipline, or an equivalent combination of education and experience supporting complex technology environments

Salary Range:
$114,700 - 194,900 USD

Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.

Working with Us:

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.

Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.

We'd love to learn more about how your interests and experience could be a fit with one of the world's most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater

Reasonable accommodation

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com .

We hope you're excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.

Apply today and talk to us about your flexible working requirements and together we can achieve greater.