Senior Lead – Technology Risk and Control

Northern Trust

. Lead the Technology Risk Treatment practice .

Posted 9/17/2026full-timeChicago • Illinois • United StatesSenior💰 $95,600 - $162,400 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates advanced expertise in technology risk management and cybersecurity, with a strong focus on risk assessment, treatment processes, and governance. Capable of leading initiatives that enhance risk management culture and improve operational metrics.

Highest-signal resume keywords

Technology Risk ManagementCybersecurity Risk AssessmentEnterprise GRC/IRM PlatformsProject and Program ManagementCommunication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentRisk TreatmentControl DesignKPI/KRI DevelopmentData Quality ManagementWorkflow IntegrationGovernanceSDLCITSMCloud Technologies

Soft Skills

CollaborationRelationship ManagementCoachingSelf-DirectedOutcome-Oriented

Tools & Technologies

ServiceNowEnterprise GRC Platforms

Certifications & Qualifications

CISSPCRISCCISMCISA

Industry Keywords

Financial ServicesTechnology Risk TreatmentAuditEmerging TechnologiesInformation Security

Tech Stack

Tools & technologies

CloudCyber SecurityITSMSDLCServiceNow

About the role

Key responsibilities & impact

Lead the Technology Risk Treatment practice
Own and drive the Technology Risk Treatment process
Guide control officers, control owners, and stakeholders in identifying, assessing, documenting, and tracking enterprise technology risk acceptances
Challenge requested risk acceptances and ensure remediation options are fully explored
Analyze impact, likelihood, and mitigating controls associated with gaps
Author risk assessments, severity ratings, and recommended risk treatment options
Define and produce KPIs/KRIs and metrics for program operations and management visibility
Lead risk treatment governance forums
Prepare committee decks, meeting artifacts, and supporting documentation
Coordinate and track meeting outcomes and action items through resolution
Provide guidance, coaching, and subject matter leadership to team members
Lead continuous improvement and maturity initiatives across processes, documentation, and knowledge management
Collaborate with Technology, Risk, and Audit functions
Influence technology decision-making and behaviors to reduce risk exposure and strengthen technology risk management culture

Requirements

What you’ll need

10-12+ years of experience in technology risk management, controls, audit, or related fields with transferable skills
Bachelor’s degree in technology, cybersecurity, or related field
Advanced, broad-based expertise in technology and cybersecurity risks and controls
Ability to apply judgment across resiliency, information security, SDLC, ITSM, operations, governance, SaaS, cloud, AI, and emerging technologies
Highly effective written and verbal communication skills
Capability to develop, review, and deliver management-level materials
Hands-on experience with enterprise GRC/IRM platforms, such as ServiceNow
Knowledge of control hierarchy design, data quality considerations, workflow integration, and reporting
Self-directed and outcome-oriented
Strong project and program management skills
Proven collaboration and relationship management capabilities
Applicants must be authorized to work in the U.S. without employment-based visa sponsorship
Prior experience in financial services preferred
Relevant technology or security certifications such as CISSP, CRISC, CISM, or CISA preferred

Benefits

Comp & perks

Retirement benefits (401k and pension)
Health and welfare benefits (medical, dental, vision, spending accounts and disability)
Paid time off
Parental and caregiver leave
Life and accident insurance
Voluntary and well-being benefits
Discretionary bonus program that may include an equity component
Flexible and collaborative work culture
Internal movement encouraged
Inclusive workplace
Reasonable accommodation during the employment process