Cyber GRC Operations Lead

Role/ Department:

This role will sit in the newly formed Cyber Governance, Risk and Compliance (GRC) team within Northern Trust s Technology function (1st Line of Defense), and will focus on the measurement, analysis, oversight and reporting of cybersecurity risks and controls.

As a Global GRC Operations Lead, you will play an important role in delivering NT s Cyber GRC processes, supporting the identification, assessment and mitigation of cyber security risks across Northern Trust. Within this specialist role you will work closely with your team to execute and continuously improve GRC processes and documentation, driving efficiency and automation. Areas of focus include cyber metrics and controls oversight, thematic analysis of risks and issues, data analytics and automation, and documentation and reporting for various stakeholders.

The key responsibilities of the role include:

• Operate and optimise Cyber GRC processes and framework
• Support the oversight and maintenance of program documentation, including creation, review cycles and approvals
• Work alongside the Cyber GRC Risk team to support the execution of risk assessment and reporting processes
• Work alongside the Cyber GRC Compliance team to support the execution of assurance processes, including controls oversight, monitoring and reporting
• Work alongside the Cyber GRC Governance team to support the effective operation of cyber governance, reporting, and issue tracking within the firm
• Drive automation, analytics, and continuous improvements of processes for your services and within the team
• Collaborate with various stakeholders to integrate cyber risk management practices into all aspects of the organisation
• Stay abreast of emerging threats, trends and regulatory changes and ensure that NTs cyber risk services evolve accordingly
• Acts as a resource for direction and development, guiding less experienced staff

Skills/ Qualifications:

• Significant experience in Cyber Security Risk management and reporting
• Strong expertise in cyber security frameworks, risk management methodologies and regulatory compliance
• Experience with managing large scale cyber risk assessments and mitigation programs across complex environments
• Innovative thinking and adaptability to change
• Strong interpersonal, written and verbal communication skills
• Organizational and communication skills required to coordinate risk related activities with peers and management
• High level of attention to detail
• Relevant certification such as CISSP, CISM, CRISC or similar