Act as a trusted advisor and credible challenger to senior Technology leaders.
Provide opinions and recommendations on complex, high-impact, or novel technology initiatives.
Influence risk-aware decision-making while enabling responsible innovation and transformation.
Risk Assessment and Risk Treatment
Oversee enterprise-wide technology risk assessment methodologies, ensuring they are risk-based, proportionate, and regulatory-defensible.
Ensure consistent evaluation of inherent and residual risks, and alignment of risk treatment decisions with stated risk appetite.
Govern material risk acceptances, escalations, and remediation commitments.
Control Design & Effectiveness
Set expectations for control-by-design across technology environments, aligned to preventive, detective, and corrective control principles.
Oversee assessment of control effectiveness, identification of systemic issues, and prioritization of remediation efforts.
Ensure evidence standards support internal assurance, audit, and regulatory review.
Regulatory & External Engagement
Provide executive oversight for regulatory exams, supervisory interactions, and audits related to technology risk and controls.
Ensure regulatory expectations are translated into clear, actionable requirements for first-line technology teams.
Serve as a senior point of escalation for regulatory risk matters.
Enterprise Risk Integration
Partner with Cyber Risk, Model Risk, Data, Privacy, Resilience, and Third‑Party Risk leaders to ensure integrated and coherent risk coverage.
Drive alignment between Technology Risk, Operational Risk, and Enterprise Risk Management frameworks.
Maturity, Simplification & Transformation
Identify and drive opportunities to simplify, standardize, and modernize technology risk and control practices.
Advance governance maturity through improved tooling, automation, metrics, and analytics.
Anticipate and prepare for emerging risk themes associated with evolving technologies and delivery models.
Executive Reporting & Governance Communication
Provide concise, decision-oriented risk insights and reporting to senior management, risk committees, and boards.
Ensure leadership has a clear understanding of technology risk posture, trends, and forward-looking exposures.
Requirements
15+ years of experience in Technology Risk, Cyber Risk, or related disciplines.
Demonstrated experience designing and governing enterprise‑wide risk and control frameworks in regulated environments.
Proven ability to influence, advise, and challenge senior leaders with credibility.
Certifications such as CISSP, CCSK, CRISC, or equivalent preferred.
Working with Us:
As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.
Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.
We'd love to learn more about how your interests and experience could be a fit with one of the world's most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater
Reasonable accommodation
Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part o
Benefits
Flexible schedule
Additional Information
About Northern Trust:
Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.
Northern Trust is proud to provide innovative financial services and guidance to the world's most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.
The Technology Risk and Control function at Northern Trust plays a critical role in enabling Global Information Technology to operate within a strong First Line of Defense, foster a robust control-aware culture, and deliver secure, compliant, and resilient technology capabilities. The function supports regulatory compliance, protects client interests, and strengthens enterprise-wide risk management practices.
The role provides Technology Risk and Controls Governance, Oversight, and Advisory across all technologies, including Core Technology Platforms, Artificial Intelligence, Cloud, and Emerging Technologies.
The role partners closely with Technology, Cyber Security, Data, Privacy, Resilience, Third Party Risk, and Assurance teams to define expectations, challenge outcomes, and advise senior leaders on complex and high‑impact technology initiatives.
Ntrs · Pune, India