Principle, Infrastructure Engineering Risk and Control Lead

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Role: Principle, Infrastructure Engineering Risk and Control Lead

Northern Trust is looking for a Principle, Infrastructure Engineering Risk and Control Lead to help assess, advise, evaluate, and mature the controls around the platforms which collectively host our most critical applications and functions.

This diverse position will require the individual to work with infrastructure owners and their management, Northern Trust Control officers, engineers, internal IT risk and control teams, auditors, regulators, automation teams and control testers. This role reports to the global head of Infrastructure Engineering and Operations.
 

JOB RESPONSIBILITIES

• Serve as the central point of contact for Control Functions across the Technology towers in the Infrastructure Engineering and Operations organization.
• Provide guidance and oversight of 4 Embedded Control Analysts in a global team covering those towers.
• Represent the Infrastructure towers in Risk Control or audit meetings with IT Leadership and operational committees to discuss the status of all ticket types of the infrastructure organization.
• Peer with the leaders of six major infrastructure towers (network, storage, compute, database, middleware, and monitoring) to develop and optimize cross-functional, horizontal processes and procedures.
• Maintain an effective network of counterparts across the Control community, Technology Infrastructure Project Management Office portfolio leads, technical SMEs and architects to prioritize and oversee strategic, high-visibility and mission-critical initiatives.
• Transform Infrastructure controls and reduce risk through rigorous lifecycle management, vulnerability management and adherence to control standards.  Show leadership in regulatory processes and audits, interface with regulators and counterparts in other parts of the organization.
• Interpret/understand controls
  • Understand the universe of Control Standards in general, and the Controls owned by the Infrastructure Engineering and Operations organization in particular.
  • Develop an in-depth understanding of the various moving parts and functions involved in the Control remediation process.
  • Help to interpret the control gap findings (aka issues or IPTs) as related to the infrastructures engineered and supported at Northern Trust.
• Control Design
  • Determine ownership and proper placement and assignment tower for issues
  • Assist with solution design by helping to define objectives, create plans, assemble project teams, and create governance structure.
  • Be clear and methodical when dividing and assigning work to individuals, setting aggressive deadlines and stretch goals and holding people accountable. 
  • Recommend control automation approach to help ensure compliance.
• Identify Control Gaps
  • Conduct risk and control self-assessments.
  • Coordinate external third-party assessments.
  • Interface with Second Line of Defense in the interpretation of assigned gaps.
  • Serve as key liaison and participant during audits for Infrastructure Engineering towers, as soon as a control gap has been identified and facilitating communications between Northern Trust groups.
• Formalized issue management
  • IPT Management – Validate accuracy, ownership, audience of issues to be uploaded to ServiceNow as IPT tickets.
  • Assist in writing action plan and implementation dates.
  • Guide efforts with strong focus and precision by organizing staff, contractors, consulting partners and service providers around the implementation of those initiatives.
  • Assist with IPT remediation by applying broad technical knowledge to solution guidance.
  • Provide oversight, guidance and feedback and adjust direction when needed.  Resolve conflict and build unity.
• Reporting
  • Support First Line Control Officers in providing timely information on status to key stakeholders (CIO, CTO etc.) and obtain necessary approvals.
  • Support First Line Control Officer in monitoring issues with upcoming due dates (30 – 60 – 90 days), communicating and validating on progress to e