Northern Trust

2 weeks ago

Infrastructure Vulnerability Management Governance – Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 20 hours agoStatus: Live

Job Summary

Provide vulnerability management governance and oversight for infrastructure risk within the Global Infrastructure Risk and Control team. Partner with Vulnerability Operations, Infrastructure and Platform teams, application owners, technology owners, and risk partners to ensure effective remediation, timely closure of high-risk findings, SLA adherence, and strong audit/regulatory readiness. Drive recurring executive-ready reporting (dashboards, scorecards, escalations), lead governance forums, and monitor trends to improve controls and process effectiveness.

Location: Pune

Workplace: Onsite

Employment Type: Full time

Job Function: Administration & Executive Assistance

Key Responsibilities

•Support the Principal in managing vulnerability management governance across regions, including oversight of remediation plans, risk exceptions, SLA breaches, escalations, and closure tracking.
•Drive weekly and monthly vulnerability risk and remediation reporting (current state, aging, due/overdue, SLA adherence, exception status, and executive escalations).
•Lead governance for infrastructure vulnerabilities and related finding types (VITs, container vulnerabilities, application security findings, secure configuration findings, deferrals, and false-positive validations).
•Monitor and challenge remediation progress to ensure accountability and timely closure of high-risk and aging vulnerabilities.
•Coordinate audit and assessment readiness by ensuring audit-ready documentation, evidence, metrics, and response coordination for vulnerability management governance.

Key Requirements

•8+ years in Information Security, Technology Risk, Cyber Risk, or related roles, with strong experience in vulnerability management governance, risk, and control oversight.
•4+ years of experience in Financial Services.
•Deep understanding of vulnerability management processes, remediation lifecycle management, prioritization, risk exceptions, and regulatory expectations in enterprise environments.
•Strong understanding of vulnerability severity models, including CVSS-based prioritization and risk-based remediation frameworks.
•Proven ability to manage remediation accountability, escalations, governance forums, and closure tracking across multiple technology teams.

Experience:8+ yearsFinancial servicesInformation securityCyber risk

Education:Bachelor's in Information Technology, Cyber Security, Computer Science, Risk Management, or related field

Skills:AnalyticalLeadershipStakeholder managementCritical thinkingCommunication

Certifications:CISSPCISMCRISCCISACIA

Tech Stack:CVSSTenableQualysRapid7ServiceNow Vulnerability ResponseWizPrisma CloudPower BIServiceNow

Company Brief

Northern Trust

Global financial services firm providing wealth management, asset servicing, asset management, and banking solutions to institutions, corporations, and affluent individuals, with a focus on custody, investment management, and technology-driven services.

Industry: Asset Management

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Chicago, United States

Founded: 1889

Glassdoor: 3.9

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Northern Trust

2 weeks ago

Infrastructure Vulnerability Management Governance – Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 20 hours agoStatus: Live

Job Summary

Location: Pune

Workplace: Onsite

Employment Type: Full time

Job Function: Administration & Executive Assistance

Key Responsibilities

•Support the Principal in managing vulnerability management governance across regions, including oversight of remediation plans, risk exceptions, SLA breaches, escalations, and closure tracking.
•Drive weekly and monthly vulnerability risk and remediation reporting (current state, aging, due/overdue, SLA adherence, exception status, and executive escalations).
•Lead governance for infrastructure vulnerabilities and related finding types (VITs, container vulnerabilities, application security findings, secure configuration findings, deferrals, and false-positive validations).
•Monitor and challenge remediation progress to ensure accountability and timely closure of high-risk and aging vulnerabilities.
•Coordinate audit and assessment readiness by ensuring audit-ready documentation, evidence, metrics, and response coordination for vulnerability management governance.

Key Requirements

•8+ years in Information Security, Technology Risk, Cyber Risk, or related roles, with strong experience in vulnerability management governance, risk, and control oversight.
•4+ years of experience in Financial Services.
•Deep understanding of vulnerability management processes, remediation lifecycle management, prioritization, risk exceptions, and regulatory expectations in enterprise environments.
•Strong understanding of vulnerability severity models, including CVSS-based prioritization and risk-based remediation frameworks.
•Proven ability to manage remediation accountability, escalations, governance forums, and closure tracking across multiple technology teams.

Experience:8+ yearsFinancial servicesInformation securityCyber risk

Education:Bachelor's in Information Technology, Cyber Security, Computer Science, Risk Management, or related field

Skills:AnalyticalLeadershipStakeholder managementCritical thinkingCommunication

Certifications:CISSPCISMCRISCCISACIA

Tech Stack:CVSSTenableQualysRapid7ServiceNow Vulnerability ResponseWizPrisma CloudPower BIServiceNow

Company Brief

Northern Trust

Industry: Asset Management

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Chicago, United States

Founded: 1889

Glassdoor: 3.9

Website LinkedIn