Description

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world's most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.

Roles and Responsibilities:

This role will be responsible for assessing and monitoring the risk posture of third-party vendors, driving process improvements, leading automation initiatives and delivering actionable insights through risk metrics and reporting The individual will be required to serve as the subject matter expert (SME) on third parties risks and the individual's primary day to day responsibilities are mentioned below (but are not limited to these):

• Conduct security risk assessment on new and existing Northern Trust's third parties business partners. Ensure proper preventative and detective controls are in place and prepare recommendations to strengthen control weaknesses.

• Demonstrate some proven knowledge on the following domains:
  • Information Security Governance and Risk Management
  • Access Control
  • Vulnerability Management and Penetration Testing
  • Network Security
  • Application Security
  • Cryptography
  • Security Architecture and Design
  • Operations Security
  • Business Continuity and Disaster Recovery Planning
  • Legal, Regulations, Investigations and Compliance
  • Physical and Environmental Security
  • Cloud Security

• Strong understanding and proven working experience on Information Security frameworks (e.g., NIST, ISO 27001, SIG, SOC2)
• Knowledge of regulatory requirements and guidelines relating to Cyber Security, Information Security, Privacy, Business Resilience and Business Continuity Management.
• Define, maintain and refine KPIs, KRIs, and KCIs for third-party risks to measure program effectiveness and vendor risk trends.
• Build and present executive level dashboards and reports to senior leadership.
• Ensure traceability and accuracy in risk reporting
• Ability to utilize Microsoft Copilot and AI-driven tools for automating third-party risk management workflows, generating risk reports, cyber incident response and simplifying documentation tasks.
• Responsible for reviewing master services contracts of the third parties to identify information technology and security related clauses.
• Knowledge on risk treatment and issues management functions and industry tools to support the program.

• Support Issue Owners and/or Issue Identifiers in accurate documentation of root cause analysis, impact analysis, severity ratings and corresponding remediation actions.
• Review evidence provided to validate remediation actions were implemented as required and meet all acceptance criteria to close the issue.
• Monitor the status of remediation actions and provide periodic updates to applicable stakeholders.
• Work across the lines of defense to coordinate changes, provide review and challenge, and respond to audit and regulatory requirements.
• Participate in cyber incident responses to provide guidance related to cyber security risks and control assurance

• Able to interact in a professional manner and develop relationships with individuals and teams at any level in Northern Trust.
• Foster a positive and collaborative environment.
• Flexibility, multi-tasking, good business judgment skills are required to meet competing priorities.
• Contribute to automation, analytics, and continuous improvements of processes
• Demonstrate ability to work well in both an individual contributor and team capacity. Train associates on the incident / issue management process and procedures via mentoring.

Skills Preferred:

• Excellent written and verbal communication skills.
• Experience working in global, cross-functional, collaborative teams.
• Attention to detail.
• In-depth understanding of information security, network management, operating systems, software development, database systems and information technology.
• Understanding of information security, Cyber Security Framework like NIST, Center for Internet Security (CIS), ISO etc.
• Knowledge of technology controls around Cloud Computing reviews.
• Advanced experience with MS Office, SharePoint, and Reporting tools

Experience:

Bachelor's degree in computer science or a related discipline and at least ten or more years of experience in the field of Technology Security. Professional certifications (such as CISA, CRISC, CISM, CISSP or similar) is a plus

Working with Us

As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.

Philanthropy is deeply rooted in Northern Trust's history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.

Reasonable Accommodation

Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com , or alternatively you can discuss your individual requirements with the recruiter you are working with.

About Our Pune Office

The Northern Trust Pune office, established in 2016, is now home to over 3,000 employees. The office handles various functions, including Operations for Asset Servicing and Wealth Management, as well as delivering critical technology solutions that support business operations across the globe.

Our Pune team takes our commitment to service to heart. In 2024, they volunteered more than 10,000+ hours into the communities where they live and work. Learn more.