Principal AI Data Protection & Copilot Security Architect

Quest Oracle Community; Chicago (IL); On-site; USD 137,000 - 234,000; Full time

Job summary

Northern Trust is seeking a Principal-level individual contributor to lead secure enablement of Microsoft 365 Copilot and enterprise AI capabilities within the Cyber Team. The role owns end-to-end strategy, architecture, and operationalization of AI-driven data protection and compliance controls across Purview, Defender, and M365 security services.

The Principal serves as the deep technical authority on AI data protection, shaping control strategy and durable safeguards at enterprise scale.

Qualifications

• Bachelor's degree or equivalent in cybersecurity, engineering, or a related field.
• Significant hands-on experience with Microsoft Purview and Defender (Cloud Apps).
• Strong background in data protection, DLP, and enterprise information security.

Responsibilities

• Act as hands-on technical lead and design authority for Copilot and enterprise AI security controls across Microsoft Purview, Defender, and M365.
• Define and evolve the AI data protection reference architecture, mapping controls to AI threat models and regulatory expectations.
• Review and harden Copilot platform configurations, including web grounding, agents, plugins, and retention models.
• Ensure controls are designed for default-secure behavior, least privilege, and fail-safe operation.
• Design, implement, and operate AI-related controls spanning information protection, DLP, insider risk management, data lifecycle, and DSPM for AI.

Skills

LLM security

Threat modeling

AI governance

Policy alignment

Incident response

Education

Bachelor's degree or equivalent in cybersecurity/engineering

Tools

Microsoft Purview

Microsoft Defender

PowerShell

Python

Power Automate

Job description

Northern Trust is seeking a Principal-level individual contributor to lead secure enablement of Microsoft 365 Copilot and enterprise AI capabilities within the Cyber Team. The role owns end-to-end strategy, architecture, and operationalization of AI-driven data protection and compliance controls across Purview, Defender, and M365 security services.

The Principal serves as the deep technical authority on AI data protection, shaping control strategy and durable safeguards at enterprise scale.