IAM Risk Audit (CIAM) - Lead

## IAM Risk Audit (CIAM) - Lead Apply locations:
Chicago, IL:
Tempe, AZtime type:
Full time posted on:
Posted Todayjob requisition :
R158264
** About Northern Trust
** As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.  Since 1889, we have aligned our efforts with our three guiding Principles That Endure:
Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.  With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.
The Lead, Client Identity & Access Management (CIAM) Risk & Audit, plays a key role in supporting and advancing risk, audit, governance, and control activities across the organization's client identity ecosystem. This position partners with cyber security, risk management, audit, compliance, technology teams, and business stakeholders to ensure client identity services operate within established regulatory, security, privacy, and control requirements.

The successful candidate will lead audit readiness activities, risk assessments, control reviews, remediation programs, and governance initiatives while helping strengthen the maturity of CIAM processes. The role combines risk management, analytical reporting, process improvement, and a strong understanding of client identity controls, authentication technologies, client access management, and regulatory expectations.
** Key Responsibilities
**** Risk & Control Management
*** Lead execution and oversight of CIAM risk and control activities.
* Evaluate identity-related risks and recommend mitigation strategies.
* Support risk assessments, control reviews, and control effectiveness evaluations.
* Identify control gaps and partner with stakeholders to develop remediation plans.
* Monitor remediation activities and ensure timely resolution of identified issues.
** Audit & Compliance Leadership
*** Lead audit readiness efforts for CIAM platforms and processes.
* Coordinate internal and external audit engagements, regulatory examinations, and compliance reviews.
* Review and validate audit evidence prior to submission.
* Partner with auditors and control owners to address inquiries and findings.
* Track audit observations and drive remediation efforts through closure.
** Governance & Strategy Support
*** Support development and execution of CIAM governance programs.
* Contribute to identity risk management strategies and maturity initiatives.
* Assist with development and maintenance of policies, standards, procedures, and control documentation.
* Participate in governance forums and working groups.
* Recommend process improvements that strengthen compliance, security, privacy, and operational effectiveness.
** Reporting & Analytics
*** Develop and maintain risk, compliance, and audit reporting.
* Analyze identity data to identify trends, exceptions, and emerging risks.
* Create dashboards and scorecards supporting management and leadership reporting.
* Develop KPIs, KCIs, and control effectiveness metrics.
* Present findings and recommendations to technology, risk, and business stakeholders.
** CIAM Governance & Identity Assurance
*** Partner with CIAM and engineering teams to strengthen client identity controls.
* Support governance processes related to client identity lifecycle management.
* Assist in evaluating client authentication, authorization, onboarding, and identity proofing controls.
* Review client access management practices for regulatory, privacy, and security compliance.
* Promote security and privacy best practices across client identity services.
** Required Qualifications
*** Bachelor's degree in Cyber Security, Information Technology, Computer Science, Business, or a related field.
* 5-8 years of experience in Cyber Security, Identity & Access Management, Risk Management, Audit,…