IT Controls Lead – Global Financial Controls

Northern Trust

. Serve as a senior subject matter expert for SOX and SOC governance, including scoping strategy, control advisory, and reporting standards.

Posted 5/14/2026full-timeChicago • Illinois • 🇺🇸 United StatesSenior💰 $85,900 - $145,900 per yearWebsite

About the role

Key responsibilities & impact

Serve as a senior subject matter expert for SOX and SOC governance, including scoping strategy, control advisory, and reporting standards.
Establish and maintain control inventories, risk mappings, and report structures.
Define expectations for control descriptions, frequency, evidence quality, and audit defensibility across the program.
Evaluate system, process, and organizational changes for potential impact.
Perform and/or oversee independent testing of IT General Controls (ITGCs) (access management, change management, computer operations, etc.) and IT Application Controls (ITACs) and automated controls.
Evaluate both control design and operating effectiveness, including, sampling methodologies and population completeness, evidence inspection and re-performance where required, validation of system-generated reports and data dependencies.
Identify, document, and evaluate control exceptions, including root cause and risk implications.
Provide authoritative interpretation of SOX/SOC standards, AICPA guidance, and auditor expectations.
Define and challenge testing approaches, population scoping, and evidence sufficiency.
Assess complex or ambiguous scenarios and determine impact on SOC control objectives, Report disclosures, Auditor conclusions, etc.
Coordination with Audit Services and Technology Risk & Control.
Act as a primary counterpart to external auditors (e.g., KPMG).

Requirements

What you’ll need

8-10+ years of experience in SOC reporting, IT audit, IT risk, or control testing
Deep expertise in: SOX, SOC 1 and SOC 2 frameworks
ITGCs, ITACs, and business process controls
Control design and operating effectiveness testing
Demonstrated experience performing or overseeing end-to-end control testing.
Ability to challenge testing approaches and auditor conclusions with strong technical rationale.
Strong understanding of technology environments and data flows supporting control execution.
Exceptional written and verbal communication skills.

Benefits

Comp & perks

retirement benefits (401k and pension)
health and welfare benefits (medical, dental, vision, spending accounts and disability)
paid time off
parental and caregiver leave
life & accident insurance
other voluntary and well-being benefits
discretionary bonus program that may include an equity component

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

SOXSOC 1SOC 2IT General Controls (ITGCs)IT Application Controls (ITACs)control designoperating effectiveness testingcontrol testingrisk mappingevidence inspection

Soft Skills

communication skillsanalytical skillsproblem-solvingcollaborationleadershipcritical thinkingattention to detailauthoritative interpretationchallenge testing approachestechnical rationale