global risk management director

Deloitte

<div>Do you love a challenge? Global Finance Services uses the latest technology and insights to provide Deloitte with a fully managed, global financial solution. We develop world-class processes that drive efficiency and effectiveness to ensure consistency and compliance across our global network.<br>
<br>
<b>Work You'll Do</b><br>
<br>
The Global Controls Director reports to the GFS Senior Managing Director and leads the Global Controls team. This role sets and executes the organization's global controls strategy, overseeing the design, evolution, and sustainability of the internal control framework, business continuity program, and confidential information management program.<br>
<br>
You will advise, guide, and consult senior leaders within GFS and across the Deloitte member firm network to evaluate and strengthen the control environment, proactively identify and mitigate risks, and ensure ongoing compliance with internal control, privacy, and governance requirements. You will also collaborate with Global Internal Audit to plan, execute, and remediate audits of GFS processes, and engage with the GFS Board of Directors, Global Audit Committee, and Global Risk &amp; Compliance leaders on strategic initiatives.<br>
<br>
Additionally, you will partner with Deloitte Global risk and privacy teams to stay current on best practices and standards from a Deloitte Global perspective. Building and maintaining strong relationships with senior leaders within SAP Security, SWIFT Technology Team, member firm internal control teams, and business process owners will be essential for success in this role.<br>
<br>
Responsibilities and Duties:
<br>
<ul><li>Define and lead the GFS Global Controls strategy for GFS, leveraging highly advanced influencing and persuasion competencies, strong collaboration and agility skills.</li><li>
Lead annual internal control testing for GFS, reporting findings to senior leadership across GFS, member firms, Global Internal Audit, and the GFS Board to support financial statement certification and overall governance.</li><li>
Develop strategy for remediation of internal control deficiencies, ensuring timely action by management in coordination with GFS and member firm leaders.</li><li>
Lead alignment with Global Internal Audit regarding the GFS audit plan and communicate key elements to senior internal and external stakeholders.</li><li>
Lead conversation with Global Risk &amp; Brand Protection, and Privacy leadership to ensure adherence to member firm standards, monitor emerging risks, address privacy incidents, and facilitate annual privacy assessments.</li><li>
Develop and implement GFS strategy for our Confidential Information Management Plan (CIMP), educating member firms and ensuring organization-wide adoption.</li><li>
Lead collaboration with senior leaders within the Global Security Office to maintain a compliant business continuity plan and business impact assessment, meeting ISO22301 requirements.</li><li>
Lead collaboration with senior leaders within the Global BISO team to develop and drive the GFS strategy related to application repository and communicate guidance on cyber standards, policies, and risk exceptions to GFS leaders.</li><li>
Drive the controls automation and innovation roadmap, maximizing the use of SAP Governance, Risk &amp; Compliance (GRC) to enable compliance, documentation maintenance, and sustainable monitoring.</li></ul><ul><li>
Annually review the GRC Access Control rule set to monitor and mitigate segregation of duties risks, escalating concerns and recommending mitigation actions to leadership as needed.</li><li>
Lead collaboration with SAP Security and the SWIFT Technology Team to identify, assess, and mitigate potential risks associated with security and system changes, ensuring solutions are scalable, effective, and support robust risk management across the global organization.</li><li>
Serve as a senior advisor to GFS leaders, member firms, and external auditors, coordinating audit communications and reinforcing governance expectations.</li><li>
Develop communication strategies to disseminate critical information impacting the control environment to appropriate stakeholders in a timely manner.</li><li>
Lead the facilitation of the annual process documentation certification program, ensuring documentation remains current; develop training and forums to reinforce ownership and compliance.</li><li>
Advise, guide, and consult senior leaders from onboarding member firms to ensure alignment with control requirements and elevate controls maturity across the Deloitte network.</li></ul><br>
<b>
The Team</b><br>
<br>
The Global Control team sits within the second line of defense and serves an important monitoring function. The team plans and executes management's assessment of internal controls related to GFS for the Member Firms. This team also manages the GFS business continuity plan and the overall GFS confidential information management plan. In addition, they also monitor user access for segregation of duties risk to have global security oversight and appropriately mitigate user access risk.<br>
<br>
<b>Qualifications:</b><br>
<ul><li>
Bachelor's degree in business administration, Accounting, Finance, Computer Science or equivalent educational or professional experience and/or qualifications. An advanced degree is also preferred.</li><li>
10+ years of related experience in professional services, external/internal audit or IT audit</li><li>
Experience in leading internal controls, risk assessments, business process and internal IT control testing or operational auditing</li><li>
General knowledge of SAP functionality and SAP Governance, Risk, &amp; Compliance (GRC) preferred</li><li>
Strong presentation and training skills, including the ability to develop and deliver live and virtual training sessions.</li><li>
Exceptional customer service skills, with clear and concise verbal and written communication.</li><li>
Proven ability to interact professionally with stakeholders at all organizational levels, both in-person and virtually.</li><li>
An influential, strategic, motivated, and inclusive leader.</li><li>
Demonstrated ability to research, resolve, and communicate complex control issues.</li><li>
Experience in dealing with multiple projects and cross-functional teams, and ability to coordinate across teams in a large matrix organization environment.</li><li>
Ability to travel 0-20%, on average, based on the work you do and client needs.</li><li>
Limited immigration sponsorship may be available</li></ul><br>
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.</div>

Director of Global Financial Services (GFS) - Global Controls

Scotiabank

<p></p><div><p><b>Requisition ID:</b> 242602</p><p><b>
Salary Range:</b> 120,900.00 - 231,400.00</p><p><i>
Please note that the Salary Range shown is a guideline only. Salary offered may vary based on factors, including, but not limited to, the successful candidate&rsquo;s relevant knowledge, skills, and experience.</i></p><p></p><p><br>
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.</p><p></p><p><b><br>
Senior Manager, U.S. Trade Floor Risk Management, Global Risk Management - New York, NY</b></p><p></p><p><b><br>
Purpose</b><br>
The Trade Floor Risk Management role will be to monitor the risks generated by all Mortgage Trading desks in the U.S. including Agency MBS/TBA&rsquo;s, CMO&rsquo;s, Non-Agency RMBS, as well as Whole Loan Trading. The risk manager will be part of a team co-located on the trading floor, working closely with other product specialists. The role will also include interfacing with the Houston-based mortgage lending and origination teams as the business expands. The role will also include opining on the suitability of certain mortgage collateral types as well as haircuts that the Repo desk will be financing with the bank&rsquo;s clients.</p><p></p><p><b><br>
The Senior Manager will:</b></p><ul><li>
Be the primary market risk management lead for the U.S. Mortgage Business in its entirety.</li><li>
Be responsible for the establishment of risk limits related to all of the Mortgage businesses, risk reporting, capital calculations under FRTB, breach discussions and remediation, as well as be instrumental in the business review process.</li><li>
Have significant interaction with the front office to solidify a strong cooperative relationship between risk and the front office. This aspect also involves participation in the setting of Volcker metrics for these desks along with advising the desk about the rule.</li><li>
Be participating within a much larger risk management team in the U.S., as well as within a global Trade Floor Risk Management effort.</li><li>
Produce significant market risk material and analysis to be used in local and global risk committees, including business risk metrics, top and emerging market risks, as well as risk support and challenge to the various businesses.</li><li>
Be presenting and interfacing with the various regulators that oversee the bank including the Fed, OSFI, the DFS, and others. This will involve working closely with the bank&rsquo;s Regulatory Relations team.</li><li>
Require significant interaction with the Financial Engineering/Modeling team, the Market Risk Model Development team, the Model Risk team, the Data Governance team, as well as the Risk Technology effort.</li><li>
Require an understanding of the modeling effort&rsquo;s design and capture of the various risk factors generated by all facets of the business. This may require frequent interaction with the Model</li><li>
Risk team to discuss the sufficiency of the risk models used for each business.</li><li>
Work closely with other risk partners within the bank including Operational Risk, Compliance, Internal Control, and others within Financial and Non-Financial Risk.</li></ul><p></p><p><b><br>
Accountabilities</b></p><ul><li>
Produce Mortgage Trading risk reports with utilizations against limits, and perform breach remediation discussions and resolutions.</li><li>
Working with the front office, help in establishing and revising the desk limit structures including total notional, VaR, Stress Testing Limits, and other risk sensitivities.</li><li>
Respond on a daily basis to front office risk needs, questions, and provide challenge to confirm justification for limit change requests.</li><li>
Participate in the end of month IPV (Independent Price Valuation) process working closely with Product Control.</li><li>
Drive a customer-focused culture that deepens client relationships and leverages broader Bank relationships, systems and knowledge.</li><li>
Build a high-performance environment and implement a people strategy that attracts, retains, develops, and motivates their team by fostering an inclusive work environment and using a coaching mindset and behaviors, communicating vision/values/business strategy, and managing succession and development planning for the team.</li><li>
Create an environment in which the team pursues effective and efficient operations of their respective areas in accordance with Scotiabank&rsquo;s Values, its Code of Conduct and other policies.</li><li>
Assist in the training and development of junior members of the team, which includes putting direct reports in situations where they can present transactions and gain visibility within the organization.</li><li>
Effectively communicate with senior management, head office and the relevant Risk Committees to ensure proper risk management and sound corporate governance across the SBUS operations.</li><li>
Represent TFRM when necessary at the global Market Risk Management Policy Committee.</li><li>
Participate in, and assist with, internal audits, regulatory reviews, and projects.</li></ul><p></p><p><b><br>
Interested?</b><br>
If your experience is closely related but doesn&rsquo;t align perfectly with every qualification, we do encourage you to apply - you might be the right candidate for this or other roles at Scotiabank!<br>
At Scotiabank, every employee is empowered to reach their fullest potential, respected for who they are and embraced for their differences. That&rsquo;s why we work to grow and diversify talent and engage employees in a performance-oriented culture.</p><p></p><p><b><br>
What's in it for you?</b><br>
Scotiabank wants you to be able to bring your best self to work &ndash; and life, every day. With a focus on holistic well-being, our many flexible benefit programs are designed to help support your unique family, financial, physical, mental, and social health needs.</p><p></p><p><br>
Location(s): United States : New York : New York City</p><p>
Scotiabank is a leading bank in the Americas. Guided by our purpose: &quot;for every future&quot;, we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.</p><p>
At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.</p></div>

Senior Manager, U.S. Trade Floor Risk Management, Global Risk Management

Morgan Stanley

<div><p>We are seeking someone to join our team as a Global Financial Crimes (GFC) : Investigations Technology Strategy and Program Transformation Professional.
<br>
<br>
In the Legal &amp; Compliance division, we assist the Firm in achieving its business objectives by facilitating and overseeing the Firm's management of legal, regulatory and franchise risk. This is a Director level position within the Investigations team which is responsible for leading investigations of a wide variety of suspected financial crimes, including money laundering, terrorist financing, market manipulation, insider trading, trafficking, fraud, public corruption and bribery, cybercrime, and tax evasion.
<br>
<br>
Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.
<br>
<br>
In Global Financial Crimes (GFC), you will play a critical role in identifying potentially suspicious activity, protecting vulnerable individuals, and safeguarding the integrity of the financial system. GFC coordinates day-to-day implementation of the Firm's financial crime prevention efforts. Including governance, oversight and execution of the Firm's Anti-Money Laundering (AML), Sanctions, Anti-Corruption and Government and Political Activities Compliance programs.
<br>
<br>
If you are passionate about financial crimes prevention, seeking a rewarding and dynamic career, and focused on making a difference, then GFC might be the right team for you.
<br>
<br>
<b>What you'll do in the role </b>:
</p><ul><li>Collaborate with technology Product Owner for GFC Investigations and the Firm's Technology teams to manage ongoing technology initiatives and enhancements, including the organization and rationalization of GFC team members' requests and the alignment of technology plans to the group's priorities and timelines
</li><li>Leverage expertise of tools used by financial crimes investigations teams and the process of conducting alert reviews and case investigations to help provide detailed guidance to the Technology squad, including by organizing input from subject matter experts and directly conducting or coordinating assistance for testing of proposed updates.
</li><li>Contribute to process optimization and strategic implementation of technology, including automation and use of artificial intelligence tools, to improve the efficiency and quality of investigations processes
</li>Provide general support to the Program Transformation team in enhancing the relevant global and U.S. policies, procedures and desktop manuals.<br>
<li>
</li></ul><p><br>
<b>What you'll bring to the role:
</b></p><ul><li>Bachelor's degree or equivalent military experience
</li><li>5+ years of experience in technology product ownership, investigative, or related consulting experience, with emphasis on BSA/AML.
</li><li>Excellent communication, leadership, and presentation skills with the ability to communicate effectively through all levels of the organization
</li><li>Experience leading business transformation efforts, including the evaluation and enhancement of global processes, and experience using artificial intelligence tools for related efficiency enhancements.
</li><li>Advanced analytical capabilities and ability to transform large data sets or complex questions into user-friendly information for management review.
</li>Self-motivated and independent operator with the ability and maturity to make decisions and operate in fast-paced and dynamic setting.<br>
<li>
</li></ul><p><br>
Four days in office attendance is required.
</p><p></p><p><b>WHAT YOU CAN EXPECT FROM MORGAN STANLEY:
</b></p><p></p><p>At Morgan Stanley, we raise, manage and allocate capital for our clients &ndash; helping them reach their goals. We do it in a way that&rsquo;s differentiated &ndash; and we&rsquo;ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren&rsquo;t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you&rsquo;ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There&rsquo;s also ample opportunity to move about the business for those who show passion and grit in their work.
</p><p></p><p>To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.
</p><p></p><p>Morgan Stanley's goal is to build and maintain a workforce that is diverse in experience and background but uniform in reflecting our standards of integrity and excellence. Consequently, our recruiting efforts reflect our desire to attract and retain the best and brightest from all talent pools. We want to be the first choice for prospective employees.
</p><p></p><p>It is the policy of the Firm to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, creed, age, sex, sex stereotype, gender, gender identity or expression, transgender, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy, veteran or military service status, genetic information, or any other characteristic protected by law.
</p><p></p><p>Morgan Stanley is an equal opportunity employer committed to diversifying its workforce (M/F/Disability/Vet).</p></div><p></p>

Global Financial Crimes (GFC): Investigations Technology Strategy and Program Transformation Director

McKesson

<div><p>McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve &ndash; we care.</p><p></p><p>
What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow&rsquo;s health today, we want to hear from you.</p><p></p><p><b>
Role Summary:</b></p><p>
The AI Governance Operations Lead ensures that McKesson&rsquo;s Responsible AI framework is executed consistently across the enterprise. This role operationalizes the governance structures defined by the Enterprise AI Council (EAIC) and the Responsible AI Boards (RAIBs), overseeing intake, triage, risk assessment workflows, quality assurance, documentation, and monitoring aligned with enterprise AI governance standards. The position ensures compliant, transparent, and risk ‑aligned‑ AI adoption across business units.</p><p></p><p><b>
Key Responsibilities:</b></p><ul><li>
Manage the Enterprise Intake Process: maintain central intake form and routing process to ensure process reliability</li><li>
Maintain, update, and implement enterprise AI Governance standards, taxonomies, definitions and risk-classification logic as the EAIC continues to develop them.</li><li>
Ensure alignment between AI governance standards and broader enterprise policies</li><li>
Support Appropriate Routing Intake &amp; Quality of Submissions by validating intake submissions for completeness and ensure proper routing.</li><li>
Manage enterprise-level exception requests and coordinate routing for EAIC level escalation</li><li>
Implement EAIC directed process updates; ensure required adjustments to intake logic, workflow, dashboards etc. as directed by the EAIC</li><li>
Ensuring Operational Reliability: identify, diagnose and resolve technical failures to support consistent governance processes</li><li>
Conduct trend analysis on AI use case submissions, risk tiers, model types, vendor maturity and recurring issues</li><li>
Identify systemic risks, gaps or repeated exceptions across RAIBs and escalate them to the EAIC</li><li>
Maintain repository of approved/flagged AI vendors and relevant risk data</li><li>
Support EAIC monitoring function by creating enterprise reports, risk trend summaries, and thematic insights.</li><li>
Maintain dashboards and workflow visibility for RAIB and EAIC leadership, including status updates, approval milestones, and escalations requested by your applicable RAIB</li><li>
Provide enterprise insights, develop and deliver dashboards and materials that provide enterprise level insights to support EAIC, EOT and RAIB monitoring and decision making.</li><li>
Coordinate with RAIB leaders, other RAIB Operations Leads, and subject matter experts to ensure coordination and communication across AI Governance landscape.</li><li>
Develop and maintain training materials, playbooks and guidance for business submitters and RAIB participants as needed.</li><li>
Deliver or coordinate training or office hours to business teams to ensure intake quality and adoption of governance processes</li><li>
Create and update role-based training for RAIB members, SMEs and PMOs</li><li>
Actively participate in the RAIB Operations/Lead community of practice to align processes, develop best practices, and trouble-shoot new and emerging challenges to the AI governance process</li><li>
Partner with Legal, Compliance, Cybersecurity, Procurement, and other stakeholder teams to socialize governance practices and educate employees who utilize your respective RAIB process</li></ul><p></p><p><b>
Minimum Requirements
</b></p><p>Degree or equivalent experience. Typically requires 12+ years of professional experience and 4+ years of management experience.</p><p></p><p><b>
Critical Skills
</b></p><ul><li>Proven experience designing, implementing, and scaling compliance programs for technology organizations</li><li>
Strong understanding of AI laws, data protection laws and related regulatory frameworks, with the ability to translate regulatory expectations into practical enterprise workflow.</li><li>
AI/ML Technical Fluency</li><li>
Understanding of AI/ML lifecycle, model validation, monitoring, and documentation.</li><li>
Familiarity with GenAI/LLM risks (hallucination, prompt injection, etc) +Knowledge of model risk management frameworks and risk‑tiering logic.</li><li>
Ability to influence senior stakeholders (VP/EVP level) across business units.</li><li>
Strong change‑leadership skills to drive adoption of governance processes.</li></ul><p></p><p>
We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here.</p><p></p><p><b>
Our Base Pay Range for this position</b></p><p></p>
$148,900 - $248,100<p></p><p>
McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson&rsquo;s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:<br>
<br>
McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.</p><p><br>
McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.</p><p></p><p>
McKesson job postings are posted on our career site: careers.mckesson.com.</p><p></p><p><b>
McKesson is an Equal Opportunity Employer</b></p><p></p><p><br>
McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson&rsquo;s full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page.</p><p></p><p><br>
McKesson welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process. If you require accommodation please contact us by sending an email to Disability_Accommodation@McKesson.com.</p><p></p><p><b>
Join us at McKesson!</b></p></div><p></p>

RAIB Governance Lead Director

Northern Trust Corp.

<div><div>About Northern Trust:</div><div></div><div>
Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.</div><div></div><div>
Northern Trust is proud to provide innovative financial services and guidance to the world&rsquo;s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world&rsquo;s most sophisticated clients using leading technology and exceptional service.</div><div></div><div>
Technology Risk and Control - Governance and Risk Reporting Lead</div><div></div><div>
Major Duties :</div><div></div><div>
1. Support monthly Technology Risk committee, including preparation for the meetings / stakeholder engagement, facilitation of meetings, production of minutes, tracking of actions / challenge log items and interactions with other committees / working groups.</div><div>
2. Run a Technology Risk advisory forum to triage and vet technology risks. Support escalation of material issues and risks to relevant committees and help to drive informed decision making and robust risk mitigation.</div><div>
3. Maintain agenda and calendar for committee meetings / working groups.</div><div>
4. Support the development and maintenance of monthly Technology Risk Profile reporting, ensuring it provides a clear, decision‑useful view of technology risk posture and trends. Ensure reporting aligns to the Cyber and Technology Risk Management (CTRM) Policy, approved risk taxonomy, and enterprise risk appetite structure.</div><div>
5. Stakeholder Engagement and Cross‑Functional Coordination - Partner closely with Technology Risk &amp; Control, Cyber Risk, Risk Reporting, and Technology leadership to ensure aligned messaging and consistent interpretation of risk data. Act as an escalation point for reporting inconsistencies, data gaps, or material risk concerns identified during reporting cycles. Coordinate inputs and feedback across first‑ and second‑line stakeholders while maintaining appropriate line‑of‑defense boundaries.</div><div></div><div>
Knowledge: Requires excellent communication skills, analytical ability, strong judgment, and the ability to work effectively with IT management and staff, vendors and consultants.</div><div></div><div>
Experience: Bachelor degree in Computer Science or a related discipline and at least six, typically eight or more years experience in risk management and governance related to Technology environments or an equivalent combination of education and work experience.</div><div></div><div>
Salary Range:</div>
$83,100 - 141,300 USD<div></div><div><i>
Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life &amp; accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.</i></div><div></div><div>
Working with Us:</div><div></div><div>
As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.</div><div></div><div>
Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.</div><div></div><div>
We&rsquo;d love to learn more about how your interests and experience could be a fit with one of the world&rsquo;s most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater</div><div></div><div>
Reasonable accommodation</div><div></div><div><br>
Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at <div>MyHRHelp@ntrs.com</div>.</div><div><br>
<br>
We hope you&rsquo;re excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.</div><div></div><div>
Apply today and talk to us about your flexible working requirements and together we can achieve greater.</div></div>

Technology Risk and Control - Governance and Risk Reporting Lead

Grant Thornton

<div><p><b>Grant Thornton is seeking a Director of Cyber Risk Operations to join the team. Approved office locations can be found below.
</b></p><p>We are seeking a Director of Cyber Risk Operations to design, build, and lead a global Cyber Risk Operations Center (ROC). This role will own the continuous identification, assessment, prioritization, and management of technology and infrastructure risk across the enterprise.
</p><p>The ideal candidate brings deep hands-on technical expertise, strong risk judgment, and the ability to operationalize cyber risk at scale&mdash;translating technical exposures into actionable, business-aligned risk insights. This leader will work closely with infrastructure, cloud, engineering, IAM, compliance, and third-party stakeholders globally.
</p><p><b>Key Responsibilities
</b></p><p><b>Cyber Risk Operations &amp; Strategy
</b></p><ul><li>Design and stand up a global Cyber Risk Operations Center (ROC), including operating model, workflows, tooling integration, metrics, and governance.
</li><li>Define and operationalize a consistent framework for identifying, prioritizing, tracking, and remediating cyber and infrastructure risk.
</li><li>Partner with security architecture, infrastructure, cloud, and application teams to embed risk management into day-to-day operations.
</li></ul><p><b>Technology &amp; Infrastructure Risk Management
</b></p><ul><li>Own enterprise technology risk visibility across on-prem, cloud, hybrid, and SaaS environments.
</li><li>Lead risk assessment and exception management processes, including risk acceptance, compensating controls, and executive-level risk reporting.
</li><li>Drive secure configuration assessment and risk management aligned to industry standards (CIS, NIST, Microsoft benchmarks, etc.).
</li></ul><p><b>Cloud Exposure &amp; Attack Surface Management
</b></p><ul><li>Oversee cloud security posture, exposure management, and attack path analysis across Azure and multi-cloud environments.
</li><li>Leverage tools such as Wiz, Azure Security Center / Defender, and related platforms to identify toxic combinations, misconfigurations, and high-risk attack paths.
</li><li>Partner with cloud engineering teams to prioritize remediation based on risk and business impact.
</li></ul><p><b>Vulnerability &amp; Endpoint Risk
</b></p><ul><li>Lead vulnerability management and endpoint exposure programs using tools such as Qualys and CrowdStrike.
</li><li>Ensure risk-based prioritization of vulnerabilities beyond CVSS, incorporating exploitability, asset criticality, and exposure.
</li></ul><p><b>Identity &amp; Access Risk
</b></p><ul><li>Oversee identity-related risk management, including privileged access, misconfigurations, and conditional access gaps using Microsoft Entra ID and related tooling.
</li><li>Partner with IAM teams to reduce identity-driven attack paths and enforce least privilege at scale.
</li></ul><p><b>Third-Party Risk Management
</b></p><ul><li>Own the cyber risk aspects of third-party and supply chain risk, including technology assessments, ongoing monitoring, and issue remediation.
</li><li>Integrate third-party risk insights into enterprise risk reporting and decision-making.
</li></ul><p><b>Leadership &amp; Stakeholder Engagement
</b></p><ul><li>Build and lead a high-performing, globally distributed team of cyber risk professionals.
</li><li>Communicate complex technical risk clearly to executives, auditors, and non-technical stakeholders.
</li><li>Provide regular risk posture updates to senior leadership, including trends, systemic issues, and material risks.
</li></ul><p><b>Required Qualifications
</b></p><ul><li>12+ years of experience in cybersecurity, infrastructure security, or technology risk, with 5+ years in senior leadership roles.
</li><li>Deep technical background in enterprise infrastructure, cloud platforms (especially Azure), identity systems, and security architecture.
</li><li>Hands-on experience with tools such as <b>Qualys, CrowdStrike, Wiz, Azure Security/Defender, and Microsoft Entra ID </b>.
</li><li>Proven experience building or scaling cyber risk, vulnerability management, or exposure management programs.
</li><li>Strong understanding of cyber risk frameworks (NIST CSF, NIST 800-53, ISO 27001, CIS).
</li><li>Demonstrated ability to translate technical findings into business-relevant risk decisions.
</li></ul><p><b>Preferred Qualifications
</b></p><ul><li>Experience standing up a centralized risk operations or exposure management function.
</li><li>Background in highly regulated or global enterprise environments.
</li><li>Familiarity with SOC 2, cloud compliance, and audit-driven risk management.
</li>Relevant certifications (CISSP, CISM, CCSP, CRISC, or equivalent).<br>
<li>
</li></ul><p></p><p>The base salary range for this position in the firm&rsquo;s Chicago, IL, Downers Grove, IL, Cleveland, OH, Minneapolis, MN, Reno, NV, Denver, CO and Baltimore, MD offices only is between $187,500 and $312,500 per year.
</p><p>The base salary range for this position in the firm&rsquo;s Washington, DC, Boston, MA, Bellevue, WA, Los Angeles, CA, Newport Beach, CA San Diego, CA, Edison, NJ, and New York, NY, and Melville, NY offices only is between $202,500 and $337,500 per year.
</p><p>The base salary range for this position in the firm&rsquo;s San Francisco, CA and San Jose, CA offices only is between $215,625 and $359,375.</p></div>

Director, Cyber Risk Operations (Global ROC)

<div><div><b>Grant Thornton is seeking a Director of Information Security Audit &amp; Compliance to join the team. Approved office locations can be found below.<br>
</b></div><div></div><p>We are seeking a Director of Information Security Audit &amp; Compliance to lead and scale a global audit and compliance practice. This role will be responsible for establishing global delivery centers, managing internal and external audits, and ensuring the information security program is governed through a consistent, defensible framework aligned to NIST CSF and NIST 800-53.
</p><p>The ideal candidate combines deep audit and regulatory expertise with strong operational leadership, enabling the organization to meet regulatory, client, and certification requirements while supporting business growth and innovation.
</p><p></p><p><b>Key Responsibilities
</b></p><p><b>Audit &amp; Compliance Strategy
</b></p><ul><li>Define and lead the global information security audit and compliance strategy across the enterprise.
</li><li>Establish and scale global delivery centers to support audits, evidence management, and continuous compliance operations.
</li><li>Own the audit calendar and roadmap for ISO, NIST-based, HIPAA, and client-driven audits.
</li></ul><p><b>Audit Management &amp; Execution
</b></p><ul><li>Lead enterprise-wide audits and assessments including <b>ISO 27001 </b>, <b>NIST </b>, <b>HIPAA </b>, and client-specific security audits.
</li><li>Act as the primary point of contact for external auditors, regulators, and client assessors.
</li><li>Ensure timely, high-quality audit deliverables, responses, and remediation plans.
</li></ul><p><b>Governance, Risk &amp; Control Framework
</b></p><ul><li>Align the information security governance program to <b>NIST Cybersecurity Framework (CSF) </b>and <b>NIST 800-53 </b>.
</li><li>Develop, maintain, and mature security policies, standards, and control frameworks.
</li><li>Ensure controls are consistently implemented, tested, and evidenced across global teams.
</li></ul><p><b>Continuous Compliance &amp; Control Assurance
</b></p><ul><li>Establish processes for continuous control monitoring, internal testing, and readiness assessments.
</li><li>Track audit findings, remediation efforts, and risk acceptances through closure.
</li><li>Partner with technology, security, and business teams to remediate gaps and strengthen control effectiveness.
</li></ul><p><b>Client &amp; Regulatory Engagement
</b></p><ul><li>Support client due diligence, RFP security responses, and client-led audits.
</li><li>Translate technical and control-based requirements into clear, business-aligned commitments.
</li><li>Build trust with clients by demonstrating a mature, transparent compliance posture.
</li></ul><p><b>Leadership &amp; Global Team Development
</b></p><ul><li>Build, lead, and mentor a globally distributed team of audit and compliance professionals.
</li><li>Define roles, responsibilities, career paths, and training for audit and compliance staff.
</li><li>Foster strong collaboration with security engineering, IT, legal, privacy, and risk teams.
</li></ul><p></p><p><b>Required Qualifications
</b></p><ul><li>12+ years of experience in information security, audit, or compliance, with 5+ years in senior leadership roles.
</li><li>Deep hands-on experience leading <b>ISO 27001, 27701, 27017, </b><b>NIST </b>, <b>HIPAA </b>, and client-driven security audits.
</li><li>Strong expertise in <b>NIST CSF </b>and <b>NIST 800-53 </b>governance, control design, and assessment.
</li><li>Proven experience building or scaling global audit and compliance delivery models.
</li><li>Strong understanding of information security controls, risk management, and regulatory expectations.
</li><li>Excellent communication skills with the ability to engage executives, auditors, and clients.
</li></ul><p></p><p><b>Preferred Qualifications
</b></p><ul><li>Experience operating in global, highly regulated environments.
</li><li>Familiarity with SOC 1 / SOC 2, cloud compliance, and third-party risk assessments.
</li><li>Experience implementing GRC tooling to support audit and compliance workflows.
</li><li>Professional certifications such as <b>CISSP, CISA, CRISC, CISM, ISO 27001 Lead Auditor </b>, or equivalent.<br>
</li></ul><p></p><div>The base salary range for this position in the firm&rsquo;s Chicago, IL, Downers Grove, IL, Cleveland, OH, Minneapolis, MN, Reno, NV, Denver, CO and Baltimore, MD offices only is between $172,000 and $258,000 per year.<br>
</div><div></div><div>The base salary range for this position in the firm&rsquo;s Washington, DC, Boston, MA, Bellevue, WA, Los Angeles, CA, Newport Beach, CA San Diego, CA, Edison, NJ, and New York, NY, and Melville, NY offices only is between $185,760 and $278,640 per year.<br>
</div><div></div><div>The base salary range for this position in the firm&rsquo;s San Francisco, CA and San Jose, CA offices only is between $197,800 and $296,700 per year.</div></div>

Director, Information Security Audit & Compliance (Global)

Search 10000+ Global risk management director jobs near you this March. New roles added regularly across leading industries. Apply today.