Principal, Technology and Cyber Risk Management
Core
Identify, assess, and reduce significant technology and cybersecurity risks (including AI, Digital Assets, Quantum Computing, Cloud/SaaS, IAM) to support Northern Trust's Information Security and Technology Risk Program objectives.
Role type
Principal, Technology and Cyber Risk Management (Individual Contributor)
Builds
Risk reduction strategies, testing tools, risk assessment frameworks, and remediation action plans.
Domain
Financial Services / Cybersecurity & Technology Risk
Required skills
Technology and cybersecurity risk assessment, Emerging tech risk analysis (AI, Digital Assets, Quantum, Cloud, IAM), Application security assessment, Infrastructure risk assessment, Risk strategy review and challenge, Remediation planning, Project management, Technical proposal development, Risk metrics and reporting, Mentorship
Preferred skills
Advanced degree in IT or related field, Security consulting background, Scoping engagements
Technologies
AI, Digital Assets, Quantum Computing, Cloud/SaaS, Identity & Access Management (IAM)
Responsibilities
Identify emerging technology and cybersecurity risks and lead risk reduction; Review and challenge significant technology strategies, initiatives, and architectures; Conduct technology and cybersecurity risk assessments, deep dives, testing activities, and operational exercises; Research, design, and develop testing tools and risk assessment frameworks; Partner with stakeholders to define practical remediation action plans; Document assessment results, findings, and remediation plans; Produce meaningful risk metrics, dashboards, and deep-dive assessment reporting; Provide cross-training and mentorship to junior team members; Support training, awareness, and education activities; Remain current on industry trends and advise management on business and financial impact; Participate in technology and cybersecurity incident response activities.
Seniority
Principal, strategy & mentorship
