Senior Principal, IAM Strategy & Product Management

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Position Summary

The Senior Principal, Identity & Access Management (IAM) Strategy & Product Management, is responsible for defining, driving, and executing the strategic vision, product roadmap, and governance framework for the organization's IAM capabilities. This role serves as a senior subject matter expert and strategic advisor, partnering with cyber security leadership, technology teams, business stakeholders, risk, compliance, and audit functions to advance the maturity, effectiveness, and adoption of IAM services across the enterprise.

The successful candidate will lead strategic planning, product management, capability development, and transformation initiatives across key IAM domains, including Identity Governance & Administration (IGA), Privileged Access Management (PAM), Access Controls, Authentication, Authorization, Directory Services, and Emerging Identity Technologies. This role will drive innovation, establish performance measures, and ensure IAM capabilities align with business objectives, regulatory requirements, and industry best practices.

Key Responsibilities

IAM Strategy & Vision

• Define and maintain the multi-year IAM strategy, roadmap, and capability maturity plan.
• Partner with senior business and technology leaders to align IAM priorities with enterprise objectives and cyber security priorities.
• Identify emerging identity and security trends, technologies, and industry best practices to inform strategic direction.
• Provide thought leadership on IAM transformation initiatives and future-state operating models.
• Drive strategic planning activities, capability assessments, and roadmap prioritization.

Product Management & Capability Ownership

• Own product strategy and lifecycle management for assigned IAM capabilities and services.
• Define product vision, objectives, key results (OKRs), performance measures, and success criteria.
• Lead product roadmap development and prioritization activities across multiple workstreams.
• Evaluate new technologies, vendor solutions, and market opportunities to enhance IAM capabilities.
• Develop business cases, strategic recommendations, and executive presentations to support IAM priorities and roadmap decisions.

Enterprise Stakeholder Leadership

• Serve as a trusted advisor to senior leadership, engineering teams, and business stakeholders.
• Facilitate alignment across cyber security, technology, risk, compliance, and business functions.
• Lead governance forums, steering committee discussions, and strategic planning sessions.
• Influence enterprise priorities and drive adoption of IAM services and controls.
• Communicate complex technical and strategic concepts to executive audiences.

Program & Transformation Leadership

• Lead large-scale IAM transformation initiatives from strategy through delivery.
• Identify and manage dependencies, risks, and opportunities across IAM programs.
• Establish operating models, governance structures, and performance management frameworks.
• Drive continuous improvement initiatives that enhance efficiency, scalability, and security outcomes.
• Support organizational change management and adoption efforts.

Governance, Risk & Compliance

• Ensure IAM capabilities align with regulatory requirements, security policies, and control frameworks.
• Partner with audit, compliance, and risk management teams to strengthen governance processes.
• Assess IAM risk exposure and define strategies to improve control effectiveness and maturity.
• Sponsor remediation efforts for significant audit findings and control gaps.
• Champion security-by-design principles across IAM products and services.

Data Analytics & Performance Management

• Establish metrics, KPIs, KCIs, and executive reporting frameworks for IAM services.
• Drive data-informed decision making through analy