The Senior Lead, Technology Risk and Control Officer plays a key role within the Global Technology organization, supporting a strong First Line of Defense and a control aware culture. This role is responsible for executing technology risk and control activities that support secure, compliant, and resilient technology solutions.

The Senior Lead serves as a trusted risk partner to Technology and Cybersecurity, driving effective risk identification, control assessments, issue management, and risk treatment. This role contributes to strong governance outcomes, regulatory readiness, and continuous improvement of technology risk management practices across the enterprise.

Key Responsibilities

- Lead and oversee the planning and execution of technology risk and control assessments, including evaluations of control design and operating effectiveness across infrastructure, applications, cloud, SaaS, data, and cybersecurity domains.
- Ensure controls are appropriately designed, clearly documented, consistently executed, and supported by complete and reliable evidence.
- Identify control gaps, emerging risks, and systemic issues, clearly articulate root cause, impact, and risk implications to senior stakeholders.
- Risk Advisory Stakeholder Partnership: Serve as a risk advisor to technology leaders, control owners, and process owners, providing practical, risk-based guidance to strengthen control maturity and reduce residual risk.
- Influence risk treatment decisions by presenting balanced risk assessments that consider business objectives, regulatory expectations, and technology realities.
- Build robust partnerships across Technology, Cybersecurity, Compliance,



Enterprise Risk Management, and Audit.
- Risk Treatment, Issues Governance: Lead and support the technology risk treatment lifecycle, including risk identification, assessment, documentation, approval, and ongoing monitoring of remediation or acceptance decisions.
- Oversee the lifecycle of technology control issues, ensuring timely remediation, appropriate escalation, and readiness for validation and audit review.
- Support preparation of materials for governance forums and committees, including senior management and risk committees.
- Regulatory, Audit Assurance Support: Play a key role in regulatory exams, supervisory interactions, internal audits, and independent risk assessments, ensuring well-coordinated responses and high-quality evidence.
- Proactively monitor regulatory developments and assess their impact on technology risk and control expectations.

Qualification Experience

- Extensive experience in Technology Risk Management, IT Audit, Cybersecurity Risk, or related disciplines.
- Bachelor's degree in technology, information systems, cybersecurity, risk management, or a related discipline.
- Prior experience within the financial services industry is preferred.
- Excellent written and verbal communication skills, with the ability to present risk and control information clearly to senior stakeholders.
- Professional certifications such as CISSP, CISA, CRISC, or CGEIT, or equivalent.

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Senior Lead - Technology Risk and Control Control Advisory (BU) (Pune)
🏢 Northern Trust
📍 Pune