Lead Cyber Sec Eng – Business Analyst

Northern Trust; Chicago (IL); On-site; USD 110,000 - 160,000; Full time

Job summary

Northern Trust in Chicago is seeking a detail-oriented Business Analyst focused on Data Protection and Cybersecurity to support enterprise data security programs and governance.

This role partners with business and technical teams to translate requirements into secure solutions, ensuring regulatory alignment and effective controls. 5+ years of relevant experience is expected.

Qualifications

• 5+ years of experience as a Business Analyst in Data Protection, Cybersecurity, Risk, or Compliance domains.
• Strong understanding of data protection principles, DLP policies, and information security fundamentals.
• Experience with Symantec DLP, Microsoft Purview, Zscaler, or equivalent data security tools.
• Proven experience in test case creation, execution, and validation of security policies.
• Strong analytical, problem-solving, and documentation skills.
• Excellent communication and stakeholder management skills.

Responsibilities

• Collaborate with stakeholders to gather, analyze, and document business and security requirements.
• Support implementation and enhancement of data protection solutions such as Symantec DLP, Microsoft Purview, Zscaler DLP, or similar tools.
• Develop and execute business test cases to validate data protection policies and controls.
• Work across cross-functional teams to improve processes, productivity, and security outcomes.
• Assist in mapping data protection requirements to governance frameworks and compliance obligations.
• Validate solution designs and ensure effective deployment aligned to business needs.
• Monitor and report key metrics to measure effectiveness of data protection controls.
• Support audit readiness through documentation, evidence collection, and control validation.
• Partner with Cyber Security Engineering teams to support enterprise data protection initiatives.

Skills

Data Protection

Cybersecurity

Requirements Analysis

Documentation

Stakeholder Management

Regulatory Compliance

Testing

Tools

Symantec DLP

Microsoft Purview

Zscaler

Job description

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Role Overview

We are seeking a detail-oriented Business Analyst with experience in Data Protection and Cybersecurity to support enterprise initiatives focused on data security, governance, compliance, and data protection programs. This role will partner with business and technical teams to translate requirements into effective security solutions, ensuring alignment with regulatory and organizational standards.

Experience

5+ years

Key Responsibilities

• Collaborate with stakeholders to gather, analyze, and document business and security requirements.
• Support implementation and enhancement of data protection solutions such as Symantec DLP, Microsoft Purview, Zscaler DLP, or similar tools.
• Develop and execute business test cases to validate data protection policies and controls.
• Work across cross-functional teams to improve processes, productivity, and security outcomes.
• Assist in mapping data protection requirements to governance frameworks and compliance obligations.
• Validate solution designs and ensure effective deployment aligned to business needs.
• Monitor and report key metrics to measure effectiveness of data protection controls.
• Support audit readiness through documentation, evidence collection, and control validation.
• Partner with Cyber Security Engineering teams to support enterprise data protection initiatives.

Required Qualifications

• 5+ years of experience as a Business Analyst in Data Protection, Cybersecurity, Risk, or Compliance domains.
• Strong understanding of data protection principles, DLP policies, and information security fundamentals.
• Experience with Symantec DLP, Microsoft Purview, Zscaler, or equivalent data security tools.
• Proven experience in test case creation, execution, and validation of security policies.
• Strong analytical, problem-solving, and documentation skills.
• Excellent communication and stakeholder management skills.

Preferred Qualifications

• Familiarity with encryption technologies and secure data handling practices.
• Knowledge of data classification, data governance frameworks, and regulatory requirements.
• Exposure to cloud security and SaaS application risk management.
• Experience working in a regulated enterprise environment such as financial services.

Key Competencies

• Requirement Analysis & Documentation
• Data Protection & Security Awareness
• Testing & Validation Expertise