Principal, Cyber Security - Risk and Controls

Principal, Cyber Security – Risk and Controls

About Northern Trust: Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889. Northern Trust is proud to provide innovative financial services and guidance to the world's most successful individuals, families, and institutions. With over 130 years of financial experience and more than 22,000 partners, we serve sophisticated clients using leading technology and exceptional service.

Our Technology Risk & Control function enables Global IT to build a strong 1st Line of Defense, foster a control‑aware culture, deliver compliant and secure technology capabilities, protect customers, and meet regulatory requirements.

• Lead risk and control assessments for core cybersecurity domains, including vulnerability management, threat management, third‑party security due diligence, and identity & access management.
• Provide technical expertise to develop and maintain cybersecurity standards in line with industry best practices, including security threats & vulnerabilities and software security testing.
• Coordinate remediation of cybersecurity findings from various sources.
• Assist in developing and implementing cybersecurity training for technical domains.
• Participate in cyber incident responses to provide guidance related to cybersecurity risks and control assurance.
• Influence behaviors to resolve conflicts, clarify goals and outcomes, and foster a strong technology risk management culture within the information security organization.

• 12+ years of technical or audit experience in core cybersecurity fields such as vulnerability/threat management, penetration testing, IAM, data protection, incident response, application security, network security, system administration, or GRC.
• Expert knowledge of performing risk management based on NIST 800‑53.
• Experience determining vulnerability risk impact on key objectives and critical processes; ability to link risk management programs to critical business strategies and processes.
• Excellent analytical, consultative, and communication skills.
• Applicable industry standard certification(s) preferred.
• Bachelor’s degree in Computer Science or a related discipline and technical experience in the security aspects of multiple platforms, operating systems, software, communications, and network protocols, or an equivalent combination of education and work experience.

Salary Range: $114,700 – $194,900 USD. The range is a good‑faith estimate of base pay.

Northern Trust provides a comprehensive benefits package, including 401(k) with company match, pension, medical, dental, vision, spending accounts, disability, paid time off, parental and caregiver leave, life and accident insurance, and voluntary wellness benefits. A discretionary bonus program may include equity components.

As a Northern Trust partner, you will be part of a flexible and collaborative work culture where financial strength and stability empower us to explore new ideas. Movement within the organization is encouraged; senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve. Join a workplace with a greater purpose.

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need an accommodation for any part of the employment process, please email our HR Service Center at