Sr Principal, Cybersecurity Program Governance & Reporting Lead at Northern Trust

Chicago, Illinois, United States

Not SpecifiedCompensation

Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level

Full TimeJob Type

UnknownVisa

Financial Services, BankingIndustries

Expertise in cybersecurity program governance, reporting, and project delivery methodologies
Strong knowledge of industry frameworks (e.g., Cyber Risk Institute, MITRE ATT&CK, NIST)
Experience in project prioritization scoring methodologies and annual updates
Proficiency in risk and issue management, including thematic analysis and mitigation strategies
Product ownership experience, particularly with PowerBI reporting dashboards for project status, financials, staffing, and milestones
Skills in enterprise change management and organizational change management best practices
Financial management expertise, including capital/expense budgeting, forecasting, and variance analysis
Excellent communication and stakeholder management skills for chairing meetings, executive reporting, and multi-channel communications
Ability to serve as subject matter expert and advisor on project compliance and standards

Chair bi-weekly meetings with program delivery staff to align priorities, disseminate updates, and conduct knowledge sharing
Direct and oversee creation of executive-level status reports for monthly, quarterly, ad-hoc leadership committees, and regulatory stakeholders
Oversee new project request process, including mapping to strategic goals and frameworks, calculating prioritization scores, and maintaining scoring methodology
Review and advise on new project requests and change controls for leadership review
Chair bi-weekly prioritization meetings and preparatory discussions with stakeholders
Facilitate office hours for identifying risks, issues, and dependencies; analyze themes and recommend improvements to leadership
Develop and provide guidance on risk mitigation strategies and issue resolution
Serve as product owner and SME for PowerBI dashboards; consult on compliance, oversee enhancements/defect resolution, and manage development team indirectly
Consult with Enterprise Change Management and Technology Organizational Change Management teams
Advise project managers on compliance with best practices and standards
Manage internal cybersecurity communication resource and partner on email/multi-channel communications plans
Manage internal cybersecurity technical writing resource for project documentation (scope, requirements, SOPs)
Lead development of capital and expense budget requests
Serve as liaison to finance stakeholders for monthly forecasting and variance review