Sr. Lead, IT Risk and Controls – KRI Development, Metrics & Automation

Northern Trust • Chicago, IL

14d • $95,600 - $162,400

About The Position

Northern Trust is a global leader in innovative wealth management, asset servicing, asset management, and banking services. Since 1889, they have been guided by their principles of Service, Expertise, and Integrity. With over 135 years of financial experience and more than 24,000 partners, they serve sophisticated clients using leading technology and exceptional service. This role offers the opportunity to continue learning, growing, and evolving within the organization, with a strong focus on individual career development and growth. Movement within the organization is encouraged, senior leaders are accessible, and there is pride in working for a company committed to strengthening communities.

Requirements

• Bachelor's or Master's degree in a relevant field such as Information Systems, Data Analytics, Data Science, Business Analytics, Risk Management, Statistics, or a related discipline.
• 7+ years of experience in technology risk, risk analytics, metrics development, controls, data analysis, or a related field, with demonstrated ability to operate at a senior lead level.
• Experience designing, implementing, and maintaining KRIs, KPIs, dashboards, thresholds, and risk reporting for technology risk, controls, issue management, or governance functions.
• Proficiency with data analysis and reporting tools such as SQL, Power BI, Excel, and Python; experience with automation tools such as Power Automate, SharePoint workflows, or similar platforms is strongly preferred.
• Familiarity with technology risk and control frameworks such as NIST, COBIT, ITIL, ISO 27001, or similar frameworks, and the ability to connect control objectives to measurable risk indicators.
• Strong analytical, problem-solving, and critical-thinking skills, with the ability to identify trends, challenge assumptions, and convert data into actionable risk insights.
• Excellent communication and presentation skills, with the ability to influence stakeholders, explain complex risk concepts, and prepare senior-management-ready reporting.
• Highly organized and detail-oriented, with the ability to manage multiple priorities, lead initiatives independently, and drive continuous improvement across risk reporting and automation processes.
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.

Nice To Haves

• Experience with automation tools such as Power Automate, SharePoint workflows, or similar platforms is strongly preferred.

Responsibilities

• Lead the design, refinement, and implementation of Key Risk Indicators (KRIs) that provide meaningful insight into technology risk, control health, emerging trends, and management action priorities.
• Partner with risk, control, technology, and business stakeholders to define KRI methodology, thresholds, escalation criteria, and reporting standards.
• Develop and maintain risk metrics, dashboards, and recurring reporting that enable senior management to monitor risk exposure, control performance, issue trends, and remediation effectiveness.
• Translate complex data into clear insights, themes, and actionable recommendations.
• Identify opportunities to automate manual reporting, data aggregation, KRI refreshes, workflow handoffs, and control-monitoring activities using tools such as Power BI, Power Automate, SQL, Python, SharePoint, or similar platforms.
• Build or guide sustainable automation solutions that improve accuracy, timeliness, scalability, and repeatability.
• Establish and maintain data definitions, lineage, documentation, and quality checks supporting KRIs and risk reporting.
• Work with data owners and stakeholders to improve completeness, accuracy, consistency, and usability of risk and control data.
• Serve as a senior subject matter resource for KRI development, risk analytics, and automation-enabled reporting.
• Facilitate discussions with cross-functional teams, influence alignment on metrics and thresholds, and provide guidance to less experienced team members.
• Stay current with technology risk management practices, control frameworks, analytics techniques, and automation capabilities.
• Recommend enhancements that strengthen risk monitoring, improve decision-making, and reduce manual effort across the function.

Benefits

• retirement benefits (401k and pension)
• health and welfare benefits (medical, dental, vision, spending accounts and disability)
• paid time off
• parental and caregiver leave
• life & accident insurance
• other voluntary and well-being benefits
• discretionary bonus program that may include an equity component

What This Job Offers

• Job Type: Full-time
• Career Level: Senior