Sr Lead, Cyber Security Admin

Northern Trust; Maharashtra; On-site; INR 1,800,000 - 2,800,000; Full time

Benefits offered by this job

Flexible work culture

Inclusive workplace

Community philanthropy

Job summary

Northern Trust in Pune, India, is seeking a Data Protection Risk & Remediation consultant with 7–10 years of security experience to drive control compliance and remediation across core technology platforms. You will collaborate with BU, Technology, and Risk teams to translate data protection requirements into actionable controls.

The role focuses on ensuring data privacy, classification, and encryption strategies while maintaining adherence to policies and standards.

Qualifications

• Data protection risk and remediation experience across security domains.
• Ability to articulate technology risk in business terms with auditable documentation.
• Experience interfacing with BU, IT, Risk, and Security functions to drive remediation.

Responsibilities

• Identify data protection risks within business and technology solutions and define remediation strategies.
• Represent InfoSec with BU stakeholders to align security with customer needs.
• Lead risk reviews, communicate threats, and define risk treatment actions.

Skills

Data protection

Security risk

Information security

AWS Security (certs)

Job description

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service. This role is part of the Cybersecurity & Data Protection organization, aligning to the Business Information Security Officer (BISO) for Asset Management and Wealth Management, this role will report to the BISO. We operate within a complex landscape driven by client expectations and the diverse needs that comes with operating in countries across the globe. The role is for a Data Protection - Risk & Remediation accountable for driving control compliance with policies, standards and targeting prioritized applications/solutions/architectures to reduce risk. The successfully candidate will work closely with Business Unit (BU) counterparts. He/she will marry technical knowledge and experience in Information Security domains involving application security and security with business requirements for communicating with clients and other counterparties.

Job Responsibilities

• Identify security and data protection risks within business and technology solutions and partner with stakeholders to define and enable remediation strategies for the Data Protection Engineering and Architecture function. Determine operational feasibility by evaluating, analyzing, problem definition, requirements, solution development, and proposing solutions.
• Represent Information Security with BU stakeholders as a trusted advisor, finding pragmatic and cost-effective security solutions that efficiently support customer needs. Collaborate with Technology, Info Sec, Risk, Enterprise Architecture and BU organizations as needed. Be familiar with BU leadership, operations and priorities.
• Offer guidance, best practices, and support across businesses to identify, assess, control and reduce data protection risk. Drive awareness and understanding of the technology risk and controls framework and challenges to compliance with it.
• Partner with engineering, architecture, and platform teams to prioritize and drive implementation of the solutions and detective controls that meet system expectations relative to scalability, performance, fault tolerance, usability, and data integrity. Maintain specialist knowledge in assigned security processes, governance, systems and/or frameworks.
• Review documentation, processes or procedures, and recommends where automation or improvements can be implemented.
• Operate independently and maintain in-depth knowledge of business unit/function; accomplish engineering and organization mission by completing related results as needed.
• Lead risk reviews and assessments, identifying threats, communicating with BU and Application teams and stakeholders to define risk treatment activities.
• Act as an InfoSec subject matter expert, primarily focused on data protection risk, control compliance and remediation strategies across the Bank’s core technology within platforms.

Key Requirements

• Data Protection Risk & Remediation Consultant candidate preferably with 7-10 years Security, Risk and/or Technology experience across a broad range of architectures. Data Protection experience with hands on experience designing and delivering technology solutions.
• Relevant business experience/qualifications/knowledge: Expertise established in assessing and articulating technology and/or security risk in the context of various other operational risks and challenges facing the organization. Ability to quickly identify, learn and assess BU requirements vis‑to‑risk standards.
• Successful candidate is likely to have held roles such as Security Risk Consultant, Risk Consultant, Information or IT Security Risk Manager, IT Audit Manager, IT Incident Manager or Security Analyst.
• Ability to clearly articulate and document security risks and requirements so that they are accurate, auditable and understandable.
• Preferred technical qualifications such as CRISC, CISM, CISA, CISSP, AWS Certified Security etc. Familiarity with data protection domain capabilities (e.g., data discovery, classification, data loss prevention, encryption) and solutions, not required but strongly recommended.
• Solid, practical and demonstrable experience of information security (technical and non-technical aspects), ideally with an understanding of protection, privacy & data management.
• Able to influence decision making to surface and mitigate issues and risks across a wide range of stakeholders; positive and professional demeanor, able to collaborate, build and maintain effective relationship with others. Pragmatic and effectively balances risk and control requirements with commercial drivers.
• Ability to solve problems creatively and effectively. Plan, organize and prioritize tasks and projects effectively

Working with Us

As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.

Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.

Reasonable Accommodation

Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [e-mail], or alternatively you can discuss your individual requirements with the recruiter you are working with.

About Our Pune Office

The Northern Trust Pune office, established in 2016, is now home to over 3,000 employees. The office handles various functions, including Operations for Asset Servicing and Wealth Management, as well as delivering critical technology solutions that support business operations across the globe. Our Pune team takes our commitment to service to heart. In 2024, they volunteered more than 10,000+ hours into the communities where they live and work. Learn more.