Senior Lead, Technology Risk & Controls - SOX / SOC Programs

Summary

• You will join Northern Trust’s Technology Risk and Control team as a leader responsible for overseeing the Technology SOX and SOC (SOC 1, SOC 2) control programs across a global technologies environment.
• This role partners with Financial Audit and External Audit firms, specifically assisting in the design, risk assessment, control development, and continuous improvement of technology controls supporting audit reporting, financial reporting, and client assurance responsibilities.
• As a trusted advisor to senior technology executives, you will provide global subject expertise on IT General Controls (ITGC) including risk management, audits of internal controls, audit committee reporting, third party provider oversight, and integrated use of audit tools for issue tracking, issue remediation and control testing.
• This role provides ongoing analysis of organizational needs and development of action plans, recommendations and strategic initiatives to develop the operational and capital requirements to meet organizational objectives.

Responsibilities

• Direct major compliance projects that include development of actionable plans, business analysis, process design/flows, procedure documentation, and the creation and execution of data analysis.
• Provide management with quarterly reports, as well as presenting the findings and recommendations to the Board of Directors.
• Create and lead special projects to mitigate risks identified during audit and assessment engagements.
• Provide guidance and facilitate risk identification, assessment, and mitigation frameworks leveraging ISO 81000.
• Apply risk management and control frameworks across multi-faceted internal and external risk management, compliance, and audit programs.
• Work closely with Technology and Global Risk partners to develop and drive efficient processes and practices.
• Support Technology Risk self-assessments, prepare testing and remediation task lists and deliver test results and milestones expected by external auditors and third-party partners.

Your Knowledge and Skills

• Experience working with audit firms and service providers that require regular performance of service organization controls, including preparation and assessment of initiative and control structure.
• Strong understanding of IT General Controls (ITGCs) principles and industry best practices, including SOX, SOC, GDPR and PCI DSS.
• Deep experience working with ERP systems (SAP, Oracle, Microsoft Dynamics 365, NetSuite, Workday, Workday Financial, Workday Human Capital Management, Workday Service Cloud).
• Strong understanding of IT risk and control frameworks and industry best practices, including COBIT, NIST, ISO 27001, and ISO 22301.
• Expertise working with technical and management teams in an IT governance and audit environment.
• Proven ability to manage, lead, and coach a team in an environment where change is the norm.
• Required proficiency with IT audit and control testing tools, data analytics software (ACL, IDEA, SQL, Power BI/Tableau, Python, R) and collaborative platforms (Jira, Confluence, ServiceNow).
• Strong analytical, written, and verbal communication skills.

Qualifications

• Bachelor's degree in CPA, CIA, CISA, CISM, CRISC, CISSP, or related field required.
• Relevant industry recognized certifications required, one combination, including but not limited to: Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Risk and Information Systems Controls (CRISC), Certified Internal Auditor (CIA), Certified Protection Professional (CPP).

Working With Us

• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.
• Minimum Experience: 8-11 Years
• Maximum Experience: More than 12
• Work Schedule: Regular Work Schedule
• Location: Illinois, Chicago Full Time
• Salary Range: $140,000 - $160,000