Senior Lead, Technology Risk and Control Self-Assessment (RCSA)

Northern Trust • Chicago, IL

7d • $95,600 - $162,400

About The Position

The Senior Lead, Technology Risk and Control Self-Assessment (RCSA) will support the execution and ongoing enhancement of Northern Trust’s Technology RCSA Program. The role helps Global Information Technology operate as a strong First Line of Defense and supports consistent identification, assessment, measurement, monitoring, and reporting of technology risks and controls in line with Enterprise Risk Management standards and regulatory expectations.

The successful candidate will work with Technology leadership, Control Officers, Risk partners, Compliance, Audit, and other stakeholders to improve risk visibility, strengthen control effectiveness, and support proactive risk management. The role provides subject-matter expertise and day-to-day coordination of RCSA activities, including risk identification, control design and effectiveness assessments, risk aggregation, risk appetite monitoring, and continuous improvement of Technology risk and control practices.

Requirements

• Strong knowledge and practical experience in RCSA methodologies, operational risk management, control design, control testing, and risk governance.
• Good understanding of technology risk domains, including cybersecurity, infrastructure, cloud computing, software development, technology operations, data management, and operational resilience.
• Working knowledge of risk management frameworks and industry standards such as NIST, ISO 27001, COBIT, and ITIL, and regulatory expectations applicable to financial services.
• Ability to constructively challenge and influence stakeholders while building collaborative relationships across Technology, Risk, Compliance, and Audit.
• Strong analytical, written, verbal, and presentation skills, including the ability to translate complex risk and control concepts into clear, actionable information for senior stakeholders.
• Experience using data analytics and visualization capabilities, including Power BI, to support risk reporting and insights.
• Bachelor’s degree in technology, information security, cybersecurity, risk management, or a related discipline.
• Relevant experience in technology risk management, technology controls, operational risk, audit, cybersecurity, or related roles with transferable skills.
• Applicants must be authorized to work in the U.S. without employment-based visa sponsorship now or in the future.

Nice To Haves

• Exposure to AI-enabled capabilities within risk and control processes.

Responsibilities

• Drive day-to-day execution of the Technology RCSA Program, aligning it with Enterprise Risk Management frameworks, regulatory expectations, and First Line of Defense responsibilities.
• Coordinate identification, assessment, measurement, monitoring, and reporting of technology risks and controls across Global Technology; perform quality reviews for consistency, completeness, and accuracy.
• Partner with Technology teams, Control Officers, Risk, Compliance, and Audit to maintain an inventory of key technology risks, controls, control gaps, and remediation activities.
• Support development, standardization, automation, and continuous improvement of technology risk reporting, metrics, and dashboards using Power BI, data analytics, and AI-enabled capabilities.
• Facilitate risk assessment workshops, stakeholder reviews, and governance discussions about risk exposure, control effectiveness, emerging risks, and alignment with risk appetite and tolerance thresholds.
• Advise Technology stakeholders on RCSA methodologies, risk identification, control design, assessment requirements, and risk and control documentation.
• Support training, awareness, and capability-building activities to strengthen risk ownership, control accountability, and a proactive risk and control culture across Technology.
• Identify opportunities to simplify RCSA processes, improve assessment methodologies and data quality, and enhance the effectiveness and efficiency of Technology risk management.
• Support program governance by preparing risk reporting, management information, and governance materials, and escalating key risk themes, control gaps, and emerging concerns.

Benefits

• Retirement benefits, including 401(k) and pension.
• Health and welfare benefits, including medical, dental, vision, spending accounts, and disability coverage.
• Paid time off.
• Parental and caregiver leave.
• Life and accident insurance.
• Other voluntary and well-being benefits.
• Discretionary bonus program that may include an equity component.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior