This role pays less than
95%
of similar roles. Most pay
$165,000–$229,100
— the shaded band above.
At the midpoint, this role pays about
$129k
versus about
$197k
for comparable roles.
Based on 240 similar postings.
Employer
About Northern Trust
Northern Trust is a leading provider of wealth management, asset servicing, asset management, and banking services to corporations, institutions, and high-net-worth individuals. Industry: Financial Services & Asset Management
Northern Trust currently has
48 open roles
on FindRole.
Listed pay typically runs
$114,500–$194,700
across 43 roles with salary data.
Senior Lead, Technology Risk & Controls - SOX / SOC Programs joins the Technology Risk and Control team to oversee global technology SOX and SOC 1/SOC 2 control programs. This role serves as a subject matter expert for IT General Controls, including access management, change management, SDLC, and cloud infrastructure. You will perform risk assessments across critical applications and infrastructure while leading complex remediation initiatives and managing relationships with internal and external auditors to ensure regulatory compliance. The position requires expertise in COSO, COBIT, NIST, and various technology domains like cybersecurity operations and identity management. Candidates should be proficient with GRC platforms such as Archer, ServiceNow, AuditBoard, or Power BI. This role addresses the critical challenge of maintaining operational resilience and robust risk governance within a complex, highly regulated global financial services technology environment.
Oversee global Technology SOX and SOC 1/SOC 2 control programs to ensure regulatory and financial reporting compliance.
Serve as a subject matter expert for IT General Controls including access management, change management, and SDLC.
Perform risk and control assessments across critical infrastructure, cloud environments, and cybersecurity processes.
Lead complex remediation programs by performing root cause analysis and developing sustainable corrective action plans.
Act as the primary liaison for external auditors to coordinate activities, manage evidence delivery, and resolve findings.
Conduct control design reviews and maturity evaluations to optimize the overall technology control environment.
Advise senior executives on risk management strategies and influence risk-informed decision-making across the organization.
Identify opportunities to enhance automated controls, monitoring capabilities, and continuous assurance tools.
What we're looking for
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Accounting, Finance, or a related discipline.
Minimum 10 years of progressive experience in Technology Risk Management, IT Audit, Information Security Risk Management, SOX/SOC Compliance, or related fields.
Minimum 5 years of experience leading enterprise-wide SOX, SOC, IT Controls, or Technology Risk programs within highly regulated organizations.
Deep expertise in SOX, SOC 1, and SOC 2 compliance programs within complex technology environments.
Significant experience evaluating controls across domains including Identity and Access Management, Cloud Governance, Change Management, SDLC, and Cybersecurity Operations.
Extensive experience managing relationships with External Auditors, Internal Audit, Compliance, and Risk Management functions.
Proven ability to lead large-scale remediation initiatives and influence senior technology executives in risk-based decision-making.
Remote (San Diego, CA)9 days ago
$148,500–$203,000
IT Audit
Cybersecurity
Cloud Computing
Artificial Intelligence
Data Analytics
SQL
Power BI
GRC
COBIT
NIST
ISO 27001
COSO
Identity and Access Management
Automated Application Controls
Data Governance
Disaster Recovery