Lead– High Risk Issue Validation And Issue Governance & Oversight
Northern Trust
Hybrid
Risk-based validation of high-risk issues
Technology issue management program oversight
Assess issue statements and root cause
Northern Trust is seeking a Lead for High Risk Issue Validation and Issue Governance & Oversight to manage and validate high-risk issues within its technology framework. The role requires extensive experience in technology risk management, cybersecurity, and issue oversight
Job Summary
Own and execute risk-based validation for high-risk issues, including defining validation scope, test strategy, sample approach, and acceptance criteria.
Manage and oversee the Technology Issue Management program, including end-to-end issue lifecycle execution, governance, and stakeholder engagement.
Provide trusted risk and control advisory support by facilitating governance committees, working groups, and stakeholder forums, ensuring appropriate oversight, challenge, and escalation of material risk issues.
Matching Summary
Match Score: 85
Northern Trust is seeking a Lead for High Risk Issue Validation and Issue Governance & Oversight to manage and validate high-risk issues within its technology framework. The role requires extensive experience in technology risk management, cybersecurity, and issue oversight.
Skills & Requirements
Must-have
Risk-based validation of high-risk issues
Technology Issue Management program oversight
Assess issue statements and root cause
Validate remediation effectiveness
Collaborate with Second Line of Defense partners
Influence enterprise risk management behaviors
Nice-to-have
Flexible and collaborative work culture
Commitment to community service
Encouraged movement within the organization
Accessible senior leaders
Key Requirements
8-12 years in Technology Risk Management, Cybersecurity Risk & Controls, IT Audit, Technology Control Testing or Assurance, or Issue Management and Remediation Oversight
Demonstrated experience leading validation and testing of remediation outcomes
Strong knowledge of control and risk frameworks and security domains
Experience in a regulated environment engaging with audit and regulatory stakeholders
Preferred industry certifications: CISA, CISSP, or CRISC