IAM Risk Audit - Lead

Key Responsibilities

• Perform both routine and non-routine risk audit activities and meet high performance standards
• Conduct control assurance and reliability assessments, and establish a strong standard.
• Support business improvements, as well as audit and governance in areas where audit processes can be improved.
• Partner with control owners, auditors, and stakeholders to address IT-related security issues and findings
• Work with business analysts and support report development throughout the control implementation.
• The ability to identify and analyze the control environment (audit in areas for audit improvement).
• Lead recruitment and recruitment-related activities for IAM.
• Assist with process improvement and identify opportunities for improvement.
• Work with end users and employees across departments and provide updates on the corporate structure.
• Monitor IT and business analysts with technical expertise, security audits, and architecture.
• Support control remediation efforts and effectiveness measures.
• Develop and maintain IAM RCVK solutions, as well as compliance reporting.
• Identify and address IT security issues, monitor remediation efforts, and track resistance reporting.
• Advise stakeholders and support internal and external audit objectives and regulatory reporting.
• Develop RCVK monitoring and control effectiveness management.
• Develop and implement data recommendations that support the client's environment.
• Provide advice on stakeholder and risk management initiatives.
• Contribute to governance, policy development, and process improvement efforts.

Required Qualifications

• Bachelor's degree in computer information technology, computer science, or a related field (CCSK, CISSP, CISA, CISM, or equivalent).
• 5+ years of experience in cybersecurity, MS risk management, audit compliance, or a related field.
• Gain experience leading IT audit, risk assessment, and risk management activities.
• A strong understanding of the CFPB and audit disciplines (ITGC and access management, controls, and process improvement).
• Hands-on experience with control frameworks, audit activities, and regulatory requirements.
• Experience in developing reports, working papers, and management presentations.
• Testing control applications (e.g., Identity and Access Management).
• Excellent written, verbal, and stakeholder communication skills.
• Proficiency with Microsoft Office products, including Word, PowerPoint, and Excel.

Job Benefits

• The salary range is based on a job's estimate of future pay.
• Northern Trust offers a comprehensive benefits package, including retirement benefits (401(k) and pension), health and welfare benefits (medical, dental, vision, spending accounts, and disability), work-life balance benefits, and professional development benefits, subject to eligibility for full-time employment and minimum work requirements.
• Northern Trust also offers a discretionary annual program that includes an equity component.