Sr Lead, Cyber Security Admin

185 Northern Operating Sols Pvt Ltd; Pune District; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Northern Trust seeks a Data Protection - Risk & Remediation consultant to join the Cybersecurity & Data Protection organization in Pune, reporting to the BISO. The role drives control compliance across assets and coordinates with BU counterparts to align with policies and risk appetite.

You will combine technical information security expertise with business needs, leading remediation projects and advising on data protection controls and governance.

Qualifications

• 7–10 years security, risk and/or technology experience across architectures.
• Ability to articulate security risks and requirements clearly and auditable.
• Experience in assessing BU requirements vis‑à‑vis security standards.

Responsibilities

• Identify security and data protection risks and partner with stakeholders to define remediation strategies.
• Evaluate feasibility, requirements and propose solutions that align with policies and standards.
• Represent Information Security with BU stakeholders as a trusted advisor.
• Collaborate with Technology, Risk, Enterprise Architecture and BU organizations.
• Lead risk reviews and assessments, defining risk treatment activities.
• Act as an InfoSec SME focused on data protection risk and remediation strategies.

Skills

Security risk

Data protection

Regulatory compliance

Cloud security

Communication

risk assessment

stakeholder management

Auditing

Education

CRISC

CISM

CISA

CISSP

AWS Certified Security

Job description

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

This role is part of the Cybersecurity & Data Protection organization, aligning to the Business Information Security Officer (BISO) for Asset Management and Wealth Management, this role will report to the BISO. We operate within a complex landscape driven by client expectations and the diverse needs that comes with operating in countries across the globe. The role is for a Data Protection - Risk & Remediation accountable for driving control compliance with policies, standards and targeting prioritized applications/solutions/architectures to reduce risk. The successfully candidate will work closely with Business Unit (BU) counterparts. He/she will marry technical knowledge and experience in Information Security domains involving application security and security with business requirements for communicating with clients and other counterparties.

Job responsibilities:

• Identify security and data protection risks within business and technology solutions and partner with stakeholders to define and enable remediation strategies for the Data Protection Engineering and Architecture function.
• Determine operational feasibility by evaluating, analyzing, problem definition, requirements, solution development, and proposing solutions.
• Represent Information Security with BU stakeholders as a trusted advisor, finding pragmatic and cost-effective security solutions that efficiently support customer needs.
• Collaborate with Technology, Info Sec, Risk, Enterprise Architecture and BU organizations as needed.
• Be familiar with BU leadership, operations and priorities.
• Offer guidance, best practices, and support across businesses to identify, assess, control and reduce data protection risk.
• Drive awareness and understanding of the technology risk and controls framework and challenges to compliance with it.
• Partner with engineering, architecture, and platform teams to prioritize and drive implementation of the solutions and detective controls that meet system expectations relative to scalability, performance, fault tolerance, usability, and data integrity.
• Maintain specialist knowledge in assigned security processes, governance, systems and/or frameworks.
• Review documentation, processes or procedures, and recommends where automation or improvements can be implemented.
• Operate independently and maintain in-depth knowledge of business unit/function; accomplish engineering and organization mission by completing related results as needed.
• Lead risk reviews and assessments, identifying threats, communicating with BU and Application teams and stakeholders to define risk treatment activities.
• Act as an InfoSec subject matter expert, primarily focused on data protection risk, control compliance, and remediation strategies across the Bank’s core technology within platforms.

Key Requirements;

• Data Protection Risk & Remediation Consultant candidate preferably with 7-10 years Security, Risk and/or Technology experience across a broad range of architectures. Data Protection experience with hands on experience designing and delivering technology solutions.
• Relevant business experience/qualifications/knowledge: Expertise established in assessing and articulating technology and/or security risk in the context of various other operational risks and challenges facing the organization.
• Ability to quickly identify, learn and assess BU requirements vis‑vis security and risk standards.
• Successful candidate is likely to have held roles such as Security Risk Consultant, Risk Consultant, Information or IT Security Risk Manager, IT Audit Manager, IT Incident Manager or Security Analyst.
• Ability to clearly articulate and document security risks and requirements so that they are accurate, auditable and understandable.
• Preferred technical qualifications such as CRISC, CISM, CISA, CISSP, AWS Certified Security etc.
• Familiarity with data protection domain capabilities (e.g., data discovery, classification, data loss prevention, encryption) and solutions, not required but strongly recommended.
• Solid, practical and demonstrable experience of information security (technical and non-technical aspects), ideally with an understanding of protection, privacy & data management.
• Able to influence decision making to surface and mitigate issues and risks across a wide range of stakeholders; positive and professional demeanor, able to collaborate, build and maintain effective relationship with others.
• Pragmatic and effectively balances risk and control requirements with commercial drivers.
• Ability to solve problems creatively and effectively.
• Plan, organize and prioritize tasks and projects effectively.

Working with Us

As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve. Philanthropy is deeply rooted in Northern Trust's history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.

Reasonable Accommodation

Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [e-mail], or alternatively you can discuss your individual requirements with the recruiter you are working with.

Reasonable Accommodation Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the employment process, please email our HR Service Center or call 1-800-807-0302 (North America), [phone] (Asia Pacific), 1800-425-0333 (India), [phone] (Europe, Middle East and Africa) and let us know the nature of your request and your contact information.

About Our Pune Office

The Northern Trust Pune office, established in 2016, is now home to over 3,000 employees. The office handles various functions, including Operations for Asset Servicing and Wealth Management, as well as delivering critical technology solutions that support business operations across the globe. Our Pune team takes our commitment to service to heart. In 2024, they volunteered more than 10,000+ hours into the communities where they live and work. Learn more.

Looking for greater?

You found it. A global financial leader with more than 22,000 employees in 23 locations worldwide, Northern Trust empowers our employees to achieve more than just business goals. Our focus on work-life balance, career mobility and unique opportunities are just a few of the reasons we've been named one of the world’s most admired companies.

APAC/INDIA EEO STATEMENT

It is the policy and practice of Northern Trust to provide equal employment opportunities to all employees and applicants. Northern Trust does not discriminate on the basis of race, colour, religion or belief, nationality, ethnic or national origin, sex, marital status, sexual orientation, disability or age. All employment decisions will be made in a non-discriminatory manner in accordance with our obligations under the law and codes of practice. This includes human resources’ decisions relating to recruitment, terms and conditions of employment, transfers, promotions and access to learning and development.

Canada EEO STATEMENT

Northern Trust is an Equal Opportunity Employer. Hiring and other employment decisions at Northern Trust are made without regard to race, colour, religion, sex, ancestry, national origin, ethnic origin, age, disability, citizenship, veteran status, sexual orientation, record of offences, marital status, family status, or any other characteristic protected by federal, provincial, or local law, regulation, or ordinance. This includes human resources’ decisions relating to recruitment, terms and conditions of employment, transfers, promotions and access to learning and development.

EMEA EEO STATEMENT

It is the policy and practice of Northern Trust to provide equal employment opportunities to all employees and applicants. Northern Trust does not discriminate on the basis of race, colour, religion or belief, nationality, ethnic or national origin, sex, marital status, sexual orientation, disability or age. All employment decisions will be made in a non-discriminatory manner in accordance with our obligations under the law and codes of practice. This includes human resources’ decisions relating to recruitment, terms and conditions of employment, transfers, promotions and access to learning and development.

USA EEO STATEMENT

It is the policy of The Northern Trust Company to afford equal opportunity in all phases of employment without regard to an individual's age, race, color, religion, creed, gender, national origin, citizenship status, marital status, pregnancy, sexual orientation, gender identity, gender expression, genetic tests and information, physical or mental disability, protected veteran status or any other legally protected status.

EEO Know Your Rights (U.S.)