Cybersecurity GRC Compliance Lead

About Northern Trust

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

The Cybersecurity Governance, Risk and Compliance (GRC) team within Northern Trust’s Technology function (1st Line of Defense) seeks a Cybersecurity GRC Compliance Lead. The role is a subject‑matter expert overseeing the delivery of cyber rules and regulations, controls oversight, assurance, and coordination of cyber controls information and evidence for regulators, auditors and clients. The successful candidate will combine expertise in cybersecurity and assurance (audit or compliance) and have strong communication and stakeholder‑management skills.

• Support the operation and enhancement of cyber compliance and assurance initiatives.
• Act as a point of coordination and subject‑matter expert for cyber controls information and evidence requests, including SOC 2 and SOX testing and reporting for all cyber controls.
• Support cybersecurity audits, providing expertise, consolidation and coordination of responses.
• Facilitate the production of information and evidence on cyber controls for regulatory requests.
• Facilitate the production of information and evidence on cyber controls for client requests, supporting new client revenue generation and existing client retention.
• Oversee adherence to cyber‑related regulatory requirements in all jurisdictions globally in which Northern Trust operates.
• Provide oversight, tracking, analysis and reporting of all cybersecurity issues and findings to ensure timely, complete and compliant remediation.
• Proactively work with the broader cybersecurity team to ensure new products, services and processes are built and operated in a controlled and compliant manner.
• Engage with senior stakeholders across Lines of Defense to ensure cybersecurity regulations and internal control requirements are well understood and embedded in business and technology practices.

• Bachelor’s or Master’s degree in Information Security, Computer Science or a related field.
• Minimum of 7 years of experience in cybersecurity, with a focus on assurance or audit.
• Strong knowledge of cyber regulations, risk‑management frameworks and methodologies.
• Strategic thinker with a strong understanding of cyber threats, vulnerabilities and risk‑mitigation options.
• Innovative thinker and adaptable to change.
• Strong communication and presentation skills, capable of translating technical risk into business terms.
• Excellent analytical, problem‑solving and decision‑making skills.
• Relevant certifications such as CISSP, CISM, CRISC or similar.

Salary Range: $83,100 – 141,300 USD.

Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401(k) and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well‑being benefits. Northern Trust also offers a discretionary bonus program that may include an equity component.

Applicants must be authorized to work in the U.S. without the need for employment‑based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity.

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at