Description

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world's most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.

Risk-Based Issue Validation Execution
Own and execute risk-based validation for high-risk issues, including defining validation scope, test strategy, sample approach, and acceptance criteria. Perform walkthroughs, inquiries, evidence inspection, and, where needed, re-performance testing to confirm remediation effectiveness.

Validation Readiness and Artifact Review
Drive validation readiness by confirming required remediation artifacts exist, including updated control design, procedures, monitoring, operational evidence, and sustainability mechanisms.

Validation Outcomes and Feedback
Where validation fails, return the issue to the appropriate stage and provide clear feedback on identified gaps and documentation expectations.

Issue Quality and Risk Assessment
Assess issue statements, root cause, risk impacts, control objectives, and linkage to applicable requirements. Challenge issue quality to ensure completeness, consistency, and audit defensibility.

Remediation Sustainability Assessment
Ensure remediation plans are risk-aligned and sustainable, including compensating controls and interim risk reduction steps where applicable.

Issue Oversight & Governance
Manage and oversee the Technology Issue Management program, including end-to-end issue lifecycle execution, governance, and stakeholder engagement. This includes coordinating issue review forums, validating high-risk issues, overseeing risk acceptance decisions, tracking actions to closure, and delivering clear, consistent status reporting to leadership.

Continuously assess the effectiveness and maturity of issue management processes, using metrics and risk insights to identify improvement opportunities and drive sustainable process enhancements.

Serve as the primary point of accountability and representation for the Technology Issue Management program, partnering with stakeholders to support integration, adoption, and potential expansion of program scope and tooling.

Provide trusted risk and control advisory support by facilitating governance committees, working groups, and stakeholder forums, ensuring appropriate oversight, challenge, and escalation of material risk issues.

Collaborate closely with Second Line of Defense partners to align on issue management expectations, aggregated risk measurement, and thematic risk analysis, and take action to address identified control gaps or emerging risk trends.

Influence behaviors across the enterprise to strengthen technology risk ownership, reduce residual risk, and reinforce a strong, sustainable risk management culture.

Stakeholder Partnership and Escalation
Partner with Issue Owners, SMEs, and Audit, Compliance, and Risk stakeholders to align on closure criteria, resolve disputes on evidence sufficiency, and ensure timely decisions and escalations.

Reporting and Thematic Analysis
Provide regular reporting on the validation pipeline, issue aging, bottlenecks, and recurring failure modes. Identify themes and systemic control weaknesses and recommend improvements.

Knowledge and Experience

8-12 years of experience in one or more of the following: Technology Risk Management, Cybersecurity Risk & Controls, IT Audit, Technology Control Testing or Assurance, or Issue Management and Remediation Oversight

Demonstrated experience leading validation and testing of remediation outcomes, including designing test approaches and documenting results in an audit-defensible manner

Strong knowledge of control and risk frameworks and security domains (e.g., vulnerability and threat management, IAM, data protection, application security, network and system security)

Experience working in a regulated environment and engaging with audit and regulatory stakeholders on issue closure and supporting evidence

Preferred industry certifications: CISA, CISSP, or CRISC

Working with Us:

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.

Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.

We'd love to learn more about how your interests and experience could be a fit with one of the world's most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater

Reasonable accommodation

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com .

We hope you're excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.

Apply today and talk to us about your flexible working requirements and together we can achieve greater.

About Our Pune Office

The Northern Trust Pune office, established in 2016, is now home to over 3,000 employees. The office handles various functions, including Operations for Asset Servicing and Wealth Management, as well as delivering critical technology solutions that support business operations across the globe.

Our Pune team takes our commitment to service to heart. In 2024, they volunteered more than 10,000+ hours into the communities where they live and work. Learn more.