Head of Identity & Access Management (IAM) Governance, Risk & Operations

Northern Trust • Chicago, IL

4d • Hybrid

About The Position

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889. Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service. We are seeking a strategic and execution-focused Head of IAM Governance, Risk & Operations to lead and modernize Identity & Access Management Governance, Risk and Operations program. This role extends beyond traditional IAM to include next-generation identity challenges, including AI agents, non-human identities, and autonomous systems. You will define how identity is governed in an era where agentic AI act with delegated authority. Grounded in balancing power, control, and alignment—you will ensure identity systems are secure by design, governed with intent, and constrained by policy, preventing uncontrolled privilege expansion across both human and machine actors.

Requirements

• 12+ years in cybersecurity/IAM with 5+ years in senior leadership roles
• Deep expertise in: Identity Governance & Administration (IGA), Privileged Access Management (PAM), Authentication and access control
• Proven experience managing IAM in complex, highly regulated environments
• Strong understanding of non-human identities.
• Demonstrated ability to design governance models, not just operate within them

Nice To Haves

• Experience integrating IAM with AI/ML platforms or data ecosystems
• Familiarity with agentic AI frameworks and orchestration tools
• Experience with tools such as SailPoint, Saviynt, CyberCyberArk, Okta, and cloud IAM platforms
• Anthropic Mythos Leadership and Assessment.

Responsibilities

• Define and implement a modern IAM governance framework spanning: Human identities, Machine/service identities / AI agents and autonomous actors
• Establish policies and standards based on global regulations
• Lead governance forums to ensure accountability across technology, security, and business domains
• Partner with data governance to align identity controls with data sensitivity and usage
• Define and operationalize identity frameworks for agentic AI, including: Unique identity issuance for AI agents, Scoped permissions and task-based entitlements, Lifecycle management (creation, delegation, revocation, termination)
• Establish policy guardrails for autonomous decision-making systems, ensuring: Traceability of actions, Attribution of decisions, Controlled delegation of authority
• Implement controls to prevent: Privilege escalation by AI agents, Unauthorized data access or propagation, “Identity sprawl” across machine and AI ecosystems
• Partner with AI/ML teams to integrate IAM into AI pipelines, orchestration layers, and model execution environments
• Own IAM risk identification across human and non-human identities.
• Define risk models for autonomous access, delegated authority, and machine-to-machine interactions
• Ensure compliance with evolving regulatory expectations related to AI governance and identity accountability
• Lead audit readiness for IAM and AI identity controls
• Develop KPIs/KRIs for: Identity risk exposure, Access anomalies (human vs. agentic), Policy violations and drift
• Oversee IAM operations across: Joiner/Mover/Leaver (JML) lifecycle, Access certifications and continuous attestation, Privileged Access Management (PAM), Authentication and authorization services
• Implement access controls (adaptive, context-aware, risk-based)
• Ensure operational scalability as identity volumes grow exponentially with AI adoption
• Build and lead a forward-looking IAM organization capable of supporting AI-era identity challenges
• Partner with: Risk, Data Governance, AI/ML Engineering, Enterprise Architecture
• Translate complex identity and AI risk concepts into clear executive narratives
• Establish a culture of accountability, transparency, and controlled innovation

Benefits

• retirement benefits (401k and pension)
• health and welfare benefits (medical, dental, vision, spending accounts and disability)
• paid time off
• parental and caregiver leave
• life & accident insurance
• other voluntary and well-being benefits
• discretionary bonus program that may include an equity component

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed