below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$164,375–$222,937.
Based on 240 similar postings.
Employer
About Northern Trust
Northern Trust is a leading provider of wealth management, asset servicing, asset management, and banking services to corporations, institutions, and high-net-worth individuals. Industry: Financial Services & Asset Management
Northern Trust currently has
107 open roles
on FindRole.
Listed pay typically runs
$114,500–$194,700
across 77 roles with salary data.
JOB TITLE: Senior Lead, Technology Risk & Controls - SOX / SOC Programs
You will join the Technology Risk and Control team as a leader overseeing global Technology SOX and SOC 1 / SOC 2 control programs. You will serve as a subject matter expert on IT General Controls, partnering with technology leadership and audit functions to ensure the design, implementation, and monitoring of controls supporting regulatory and financial reporting requirements. Your daily work involves performing risk assessments across cloud environments, cybersecurity processes, and infrastructure platforms while leading complex remediation initiatives. You will utilize core competencies in risk management, audit readiness, and control optimization. Required technical knowledge includes COSO, COBIT, NIST, and GRC platforms like Archer, ServiceNow, or AuditBoard. This role solves critical business problems regarding operational resilience and risk governance within a highly regulated financial services environment.
Oversee global Technology SOX and SOC 1/SOC 2 control programs to ensure regulatory and financial reporting compliance.
Serve as the subject matter expert for IT General Controls including Access Management, SDLC, and Cloud Infrastructure.
Lead technology risk and control assessments across critical applications, cybersecurity processes, and cloud environments.
Drive control design reviews, maturity evaluations, and optimization initiatives to improve the technology control environment.
Identify and remediate control deficiencies and audit findings through sustainable corrective action plans.
Act as the primary liaison for External Audit, Internal Audit, and Compliance functions to coordinate activities and evidence delivery.
Monitor SOX and SOC scoping activities, application onboarding, and the implementation of new regulatory requirements.
Identify opportunities to enhance control monitoring through analytics, automation, and continuous assurance capabilities.
What we're looking for
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Accounting, Finance, or a related discipline.
Minimum 10 years of progressive experience in Technology Risk Management, IT Audit, Information Security Risk Management, SOX/SOC Compliance, or related fields.
Minimum 5 years of experience leading enterprise-wide SOX, SOC, IT Controls, or Technology Risk programs within highly regulated organizations (preferably in financial services).
Deep expertise in SOX, SOC 1, and SOC 2 compliance programs within complex technology environments.
Significant experience evaluating and testing controls across domains including Identity and Access Management, Cloud Governance, Change Management, and Cybersecurity Operations.
Extensive experience managing relationships with External Auditors, Internal Audit, Compliance, and 2LOD Risk Management functions.
Proven ability to lead large-scale remediation initiatives and influence senior technology executives in driving risk-based decision-making.
AI
Data Management
Risk Management
Data Quality
Jira
Confluence
MS Office
PowerPoint
Excel
Teams
Project Management
Audit
Regulatory Compliance
Data Risk & Controls
RAID
Governance
Reporting