This role involves conducting security risk assessments on new and existing third-party business partners and ensuring proper controls are in place. The ideal candidate will have a proven knowledge of information security domains and regulatory requirements.
Requirements
- Conduct security risk assessment on new and existing Northern Trust’s third parties' business partners
- Ensure proper preventative and detective controls are in place and prepare recommendations to strengthen control weaknesses
- Review master services contracts of the third parties to identify information technology and security related clauses
- Support Issue Owners and/or Issue Identifiers in accurate documentation of root cause analysis, impact analysis, severity ratings and corresponding remediation actions
- Monitor the status of remediation actions and provide periodic updates to applicable stakeholders
- Work across the lines of defense to coordinate changes, provide review and challenge, and respond to audit and regulatory requirements
- Participate in cyber incident responses to provide guidance related to cyber security risks and control assurance
Benefits
- Flexible working arrangements
- Opportunities for career growth and development
- Competitive salary and benefits package
- Opportunities to work with a global and diverse team
- Reasonable accommodation for individuals with disabilities