Senior Lead, Cyber Security IT Risk Management

Tasks

The InfoSec Control Officer Team is responsible for leading risk and control assessments for core areas of cybersecurity, conducting security tests and evaluations to ensure compliance with information security policies and procedures. Responsibilities include:

• Lead risk and control assessments for core areas of cybersecurity, including vulnerability management, threat management, third-party security due diligence, identity and access management
• Provision of technical expertise to support the development and maintenance of cybersecurity standards in line with industry best practices, as well as technical expertise in the area of security threats and vulnerabilities and software security testing.
• Coordination of the remediation of cybersecurity findings from various sources
• Support in the development and implementation of cybersecurity training for technical areas
• Participation in cybersecurity response to provide assistance related to other security risks and controls
• Influencing behaviors to resolve conflicts, clarify goals and outcomes, and promote a strong technology risk management culture within the information security organization

Requirements

Required qualifications and experience:

• 8+ years of technical or testing experience in core areas of cybersecurity, such as vulnerability/threat management, penetration testing, IAM, data protection, IV/IR, AppSec/network security, system administration, GRC
• Expert knowledge in the field of risk management based on NIST 800-53
• Experience in determining the risk impact of vulnerabilities on key objectives and critical processes, ability to link risk management programs and initiatives to critical business strategies and processes
• Excellent analytical, advisory, and communication skills
• Industry standard certifications preferred
• Degree in computer science or a related field and technical experience in the security aspects of multiple platforms, operating systems, software, communication and network protocols, or an equivalent combination of education and professional experience.

We offer

As a partner at Northern Trust, you can expect greater success. You will become part of a flexible and collaborative work culture where financial strength and stability are assets that enable us to explore new opportunities. We offer an inclusive work environment and understand that flexibility means different things to different people.