Data Protection - Data Discovery & Remediation Senior Lead

Northern Trust Corp; Limerick; Hybrid; EUR 110,000 - 150,000; Full time

Job summary

Northern Trust is seeking a Data Protection - Data Discovery & Remediation Senior Lead in Ireland to drive control compliance and risk reduction across multi-cloud environments, SaaS and on-premise suites.

The role requires hands-on security engineering, architecture reviews, and collaboration with Enterprise Architecture to implement pragmatic, cost-effective security solutions for business stakeholders.

Qualifications

• Experience in technology risk across multiple architectures.
• Security risk consultancy with cloud focus.
• Ability to articulate security requirements to diverse stakeholders.
• Experience with cloud platforms (Azure, AWS).
• Familiarity with threat modelling (STRIDE) and SSDLC.

Responsibilities

• Guide awareness of technology risk and controls framework.
• Develop detective controls for data protection and data integrity.
• Deliver security solutions meeting performance and usability needs.
• Lead application risk reviews and risk treatment activities.
• Act as InfoSec SME for cloud apps across Azure/AWS.

Skills

Security architecture

Cloud security

Risk management

Threat modelling

Information security

Education

CRISC

CISM

CISA

CISSP

AWS Certified Security

Tools

Azure

AWS

Azure DevOps

M365

Oracle

Windows

Linux

BigID

Defender

Job description

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

This role is part of the Information Security & Data Protection organisation, aligning to Global Information Technology. We operate within a complex landscape driven by client expectations and the vastness/variety that comes with operating in countries across the globe. The role is for a Data Protection - Data Discovery & Remediation Senior Lead accountable for driving control compliance with policies, standards and targeting prioritized applications/solutions/architectures to reduce risk. The primary candidate has technical knowledge and experience in Information Security domain involving application security and security risk consultancy focusing on data security within multi-cloud environments, SaaS solutions and on-premise application suites

Key Responsibilities:

• Offer guidance, best practices, and support across businesses to drive awareness and understanding of the technology risk and controls framework and challenges to compliance with it.
• Develops and administers the solutions and detective controls that meet system expectations relative to scalability, performance, fault tolerance, usability, and data integrity.
• Delivers solutions that meet end user expectations relative to performance, usability and security for the Data Protection Engineering and Architecture function.
• Determining operational feasibility by evaluating, analyzing, problem definition, requirements, solution development, and proposing solutions.
• Collaborating with Enterprise Architecture organization as needed.
• Reviewing documentation, processes or procedures, and recommends where automation or improvements can be implemented.
• Operating independently; has in-depth knowledge of business unit/function; accomplishes engineering and organization mission by completing related results as needed.
• Lead Application risk reviews and assessments, identifying threats, communicating with Application teams and stakeholders to define risk treatment activities.
• Act as an InfoSec subject matter expert, primarily focused on cloud application security across the Bank’s core technology within Azure & AWS cloud platforms.
• Maintain specialist knowledge in assigned security processes, systems or frameworks Represent Information Security with Business stakeholders as a trusted advisor, finding pragmatic and cost-effective security solutions that efficiently support customer needs.

The ideal candidate should have a fair amount of the following skills and experience:

• Experience within Security & Technology experience across a broad range of architectures.
• Security Architecture experience with hands on experience designing and delivering technology solutions.
• Experience in the area of technology risk.
• Successful candidate is likely to have held roles such as Security Risk Consultant, Risk Consultant, Information or IT Security Risk Manager, IT Audit Manager, IT Incident Manager or Security Analyst.
• Extensive experience with cloud technology including, hybrid environments, security from the start design (SSDLC)
• Experience conducting architecture reviews to find and evaluate application and infrastructure security risks using Threat Modelling methodologies (e.g. STRIDE)
• Extensive experience in developing and implementing detective controls using Regular Expressions etc.
• Relevant technical qualifications such as CRISC, CISM, CISA, CISSP, AWS Certified Security etc;
• Relevant business experience/qualifications/knowledge: Expertise established in assessing and articulating technology and/or security risk in the context of various other operational risks and challenges facing the organization.
• Information Security subject matter expert in multiple cloud technology areas such as M365, Azure (Identity, Security and Compliance), BigID, Defender, Azure DevOps, Azure IaaS, SaaS, and on premise application suites (Oracle, Windows, Linux) etc.
• Solid, practical and demonstrable experience of information security (technical and non technical aspects), ideally with an understanding of privacy & Data Management;
• Able to influence decision making to surface and mitigate issues and risks across a wide range of stakeholders;
• Positive, collaborative and builds and maintains effective relationship with others
• Pragmatic, and effectively balances risk and control requirements with commercial drivers;
• Ability to articulate and document security requirements and risks so that they are accurate, auditable and understandable;
• Ability to solve problems creatively and effectively Plan, organise and prioritise tasks and projects effectively

Work Authorization

Applicants must have the right to work in Ireland at the time of application and for the duration of employment. Please note that Northern Trust is unable to provide employment permit sponsorship for this role. This includes Critical Skills Employment Permits, General Employment Permits, Intra-Company Transfer Employment Permits, Stamp 1G permissions, and other employment permits under Irish immigration frameworks.

Working with Us

As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.

Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.

Reasonable Accommodation Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [e-mail], or alternatively you can discuss your individual requirements with the recruiter you are working with.

Looking for greater? You found it. A global financial leader with more than 22,000 employees in 23 locations worldwide, Northern Trust empowers our employees to achieve more than just business goals. Our focus on work-life balance, career mobility and unique opportunities are just a few of the reasons we’ve been named one of the world’s most admired companies.

Terms and Conditions

Terms and Conditions Candidate Privacy Notice California Applicant Privacy Notice Pay Transparency Nondiscrimination Provision (U.S) Transparency in Coverage Disclosure – North America Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities.

APAC/INDIA EEO STATEMENT

It is the policy and practice of Northern Trust to provide equal employment opportunities to all employees and applicants. Northern Trust does not discriminate on the basis of race, colour, religion or belief, nationality, ethnic or national origin, sex, marital status, sexual orientation, disability or age. All employment decisions will be made in a non-discriminatory manner in accordance with our obligations under the law and codes of practice. This includes human resources’ decisions relating to recruitment, terms and conditions of employment, transfers, promotions and access to learning and development.

Canada EEO STATEMENT

Northern Trust is an Equal Opportunity Employer. Hiring and other employment decisions at Northern Trust are made without regard to race, colour, religion, sex, ancestry, national origin, ethnic origin, age, disability, citizenship, veteran status, sexual orientation, record of offences, marital status, family status, or any other characteristic protected under federal, provincial, or local law, regulation, or ordinance.

EMEA EEO STATEMENT

It is the policy and practice of Northern Trust to provide equal employment opportunities to all employees and applicants. Northern Trust does not discriminate on the basis of race, colour, religion or belief, nationality, ethnic or national origin, sex, marital status, sexual orientation, disability or age. All employment decisions will be made in a non-discriminatory manner in accordance with our obligations under the law and codes of practice. This includes human resources’ decisions relating to recruitment, terms and conditions of employment, transfers, promotions and access to learning and development.

USA EEO STATEMENT

It is the policy of The Northern Trust Company to afford equal opportunity in all phases of employment without regard to an individual's age, race, color, religion, creed, gender, national origin, citizenship status, marital status, pregnancy, sexual orientation, gender identity, gender expression, genetic tests and information, physical or mental disability, protected veteran status or any other legally protected status. EEO Know Your Rights (U.S.)