Senior Lead - Technology Risk and Control – Control Advisory (BU)

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

The Senior Lead, Technology Risk and Control Officer play a key role within Northern Trust’s Global Technology organization, supporting a strong First Line of Defense and a control‑aware culture. This role is responsible for executing technology risk and control activities that support secure, compliant, and resilient technology solutions.

The Senior Lead serves as a trusted risk partner to Technology and Cybersecurity driving effective risk identification, control assessments, issue management, and risk treatment. This role contributes to strong governance outcomes, regulatory readiness, and continuous improvement of technology risk management practices across the enterprise.

Key Responsibilities

Technology Risk & Control Oversight

Lead and oversee the planning and execution of technology risk and control assessments, including evaluations of control design and operating effectiveness across infrastructure, applications, cloud, SaaS, data, and cybersecurity domains.

Ensure controls are appropriately designed, clearly documented, consistently executed, and supported by complete and reliable evidence.

Identify control gaps, emerging risks, and systemic issues, clearly articulate root cause, impact, and risk implications to senior stakeholders.

Risk Advisory & Stakeholder Partnership

Serve as a risk advisor to technology leaders, control owners, and process owners, providing practical, risk-based guidance to strengthen control maturity and reduce residual risk.

Influence risk treatment decisions by presenting balanced risk assessments that consider business objectives, regulatory expectations, and technology realities.