Principal, GRC Cyber Risk Management

Northern Trust

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Tempe, AZ
Employment: Full-time
Posted: 109 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $191k

$134k $244k

below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $161,250–$221,375.

Based on 240 similar postings.

Employer

About Northern Trust

Northern Trust is a leading provider of wealth management, asset servicing, asset management, and banking services to corporations, institutions, and high-net-worth individuals. Industry: Financial Services & Asset Management

Northern Trust currently has 107 open roles on FindRole.

Listed pay typically runs $114,500–$194,700 across 77 roles with salary data.

Most-posted roles

View all roles at Northern Trust

At a glance

TL;DR · Principal, GRC Cyber Risk Management

Role Posting Log in to save

JOB TITLE: Principal, GRC Cyber Risk Management The Principal, GRC Cyber Risk Management joins the Cybersecurity Governance, Risk and Compliance organization to drive the modernization of enterprise cyber risk management. This role involves leading the identification, assessment, and reporting of cyber risks while integrating cyber threat intelligence, attack surface insights, and vulnerability trends into data-driven decision-making. Key responsibilities include conducting cyber maturity assessments, developing forward-looking reporting for executive leadership, and enhancing risk intelligence through automation and AI-enabled processes. The candidate must utilize frameworks such as NIST CSF, FAIR, MITRE ATT&CK, CRI, and ISO 27001. Required skills include experience with data engineering, threat actor analysis, and translating technical risks into business narratives. The role addresses the challenge of improving risk visibility and cyber resilience within a global financial institution.

Skills

NIST CSF FAIR MITRE ATT&CK ISO 27001 Cyber Threat Intelligence Data Analytics Artificial Intelligence Automation Data Engineering CISSP CISM CRISC Risk Metrics KRIs KCIs

What you'll do

Lead the identification, assessment, prioritization, and reporting of cyber risks across the enterprise.
Integrate cyber threat intelligence, attack surface insights, and vulnerability trends into enterprise risk reporting.
Conduct cyber risk assessments and maturity reviews aligned to industry frameworks and regulatory expectations.
Develop forward-looking cyber risk reporting that provides actionable insights to executive leadership and regulators.
Enhance cyber risk intelligence capabilities through analytics, automation, and AI-enabled processes.
Translate highly technical cyber risks into clear business impact narratives and strategic recommendations.
Develop risk metrics, KRIs, KCIs, and predictive cyber risk analytics.
Evaluate emerging threats, including AI capabilities, to determine enterprise cyber risk implications.

What we're looking for

Bachelor’s degree in Information Security, Computer Science, or a related field.
Master’s degree (preferred).
Minimum of 10 years of experience in cybersecurity with a focus on risk management.
Extensive knowledge of frameworks including NIST CSF, FAIR, MITRE ATT&CK, CRI, and ISO 27001.
Experience leveraging AI, analytics, automation, or data engineering to improve cyber risk management processes.
Demonstrated ability to design and mature cyber risk reporting for executive leadership and regulators.
Relevant certifications such as CISSP, CISM, CRISC, or similar.
Work Authorization.

Similar roles

Principal Associate, Cyber Security Logging

Capital One Financial

McLean, VA +1 22 days ago $161,800–$184,600

NIST CSF MITRE ATT&CK AWS Azure GCP Splunk Crowdstrike Qualys AWS Security Hub Linux Unix Windows Cybersecurity Governance Risk Management Security Incident Analysis CMMC FedRAMP

3+ yrs exp

Save

Principal Cyber Threat Intelligence Specialist

University of Miami

Remote (Miami, FL) 54 days ago

Cyber Threat Intelligence Artificial Intelligence Security Automation Incident Response Vulnerability Management Threat Hunting SOC Risk Mitigation Security Operations Identity and Access Management Governance, Risk and Compliance

10+ yrs exp Remote

Save

Manager, Cyber Security, Information Security Office Consultant

Capital One Financial

New York, NY 5 days ago $215,200–$245,600

NIST CSF MITRE ATT&CK Cloud Security Splunk Crowdstrike Qualys AWS Security Hub AI Cybersecurity Governance Risk Management Security Architecture Threat Intelligence Multi-cloud Security Incident Analysis CMMC FedRAMP

5+ yrs exp

Save

Principal Associate, Cyber Risk & Analysis

Capital One Financial

McLean, VA 48 days ago

AI ML Prompt Engineering Multi-agent Orchestration Threat Intelligence Cloud Security Application Security Databricks Spark AWS GCP Azure IaC APIs Containers CI/CD MITRE ATT&CK NIST CSF PCI DSS SOX ITGC SIEM SOAR Graph Tooling

3+ yrs exp

Save

Cybersecurity GRC Manager

Ann & Robert H. Lurie Children's Hospital of Chicago

Chicago, IL 81 days ago $119,600–$197,350

GRC NIST CSF PCI DSS HIPAA HITECH Vulnerability Management Audit Risk Assessment Data Protection Email Security Information Security Project Management

5+ yrs exp

Save

Principal, Cyber Intelligence

L3Harris

Huntsville, AL 6 days ago

Risk Management Framework (RMF) JSIG NIST 800-53 DISA STIGs ACAS NESSUS SCAP HBSS Active Directory Group Policy VMWare Nutanix Citrix Linux UNIX Windows Server Artificial Intelligence Information Assurance Cyber Intelligence

10+ yrs exp

Save