Senior Cyber Security Engineer, Data Protection & DLP

Northern Trust; Chicago (IL); On-site; USD 137,000 - 234,000; Full time

Benefits offered by this job

401k plan

Pension benefits

Discretionary bonus

Job summary

Northern Trust is seeking a Principal Cyber Security Engineer to lead Data Protection Engineering, including DLP, encryption, and external data transfer controls. The role focuses on establishing technical strategy, governance, and secure cross-team collaboration.

You will drive automation for exception handling, oversee Zscaler policy redesign, and guide the Symantec-to-Purview migration, ensuring a controlled exit from legacy systems while maintaining enterprise risk posture.

Qualifications

• Extensive experience in Cyber Security, Data Protection Engineering, or a closely related discipline.
• Experience in a highly regulated enterprise environment.
• Experience supporting control alignment with FFIEC, PCI-DSS, and SOX expectations is preferred.
• Experience leading large-scale DLP platform migrations, policy redesigns, or legacy technology exit strategies is preferred.

Responsibilities

• Own the technical vision and control strategy for DLP and encryption data protection, not just feature implementation.
• Lead secure enablement and control oversight for DLP engineering and external data transfer controls, including data center bypass capabilities.
• Drive automation of exception handling and establish repeatable governance workflows.
• Lead the redesign and optimization of Zscaler data protection and security policies.
• Provide technical direction for Database Activity Monitoring (DAM) initiatives.
• Lead the migration from Symantec DLP to Microsoft Purview and define a controlled, supportable Symantec exit strategy.
• Define durable and repeatable security patterns that can be adopted by engineering, technology, and business teams.
• Partner with Security, Compliance, Privacy, Microsoft 365, and Risk stakeholders to align controls with enterprise requirements.

Skills

Zscaler DLP

Purview DLP

Data protection

Data classification

Encryption

Azure security

DLP migration

Stakeholder mgmt

Tools

Azure Information Protection

Microsoft Information Protection

Defender for Cloud Apps

Active Directory

Microsoft Entra ID

Job description

Northern Trust is seeking a Principal Cyber Security Engineer to lead Data Protection Engineering, including DLP, encryption, and external data transfer controls. The role focuses on establishing technical strategy, governance, and secure cross-team collaboration.

You will drive automation for exception handling, oversee Zscaler policy redesign, and guide the Symantec-to-Purview migration, ensuring a controlled exit from legacy systems while maintaining enterprise risk posture.