Senior Zscaler DLP Architect & Security Lead

ntrs; Chicago (IL); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible work options

Comprehensive benefits

Job summary

Northern Trust in Chicago is seeking a Lead Cyber Security Engineer to design, implement, and manage enterprise Zscaler-based data protection controls with a focus on DLP across complex environments.

You will lead engineering initiatives, provide advanced (L3) support, and ensure scalable, secure implementation while partnering with security stakeholders to define and enforce data protection requirements.

Qualifications

• 5+ years of experience in Cyber Security or Data Protection Engineering
• Bachelor's degree or equivalent experience
• Certifications such as CISSP, CISM, CISA, or SANS preferred
• Strong troubleshooting, analytical, and communication skills

Responsibilities

• Lead design and implementation of Zscaler DLP policies
• Drive end-to-end DLP lifecycle (requirements, design, build, testing, deployment)
• Partner with stakeholders to enforce data protection requirements
• Monitor, investigate, and respond to DLP alerts and exfiltration events
• Provide L3 troubleshooting and support for DLP and Zscaler issues
• Drive automation and optimization across controls
• Act as SME and technical lead for engineering efforts

Skills

Zscaler DLP

Data loss prevention

Network security

Azure security (AIP, MIP, MCAS)

DLP tools

Troubleshooting

Communication skills

Regulated environments

Education

Bachelor's degree or equivalent experience

Certifications such as CISSP, CISM, CISA, or SANS preferred

Tools

Azure security (AIP, MIP, MCAS)

Enterprise DLP tools

Job description

Northern Trust in Chicago is seeking a Lead Cyber Security Engineer to design, implement, and manage enterprise Zscaler-based data protection controls with a focus on DLP across complex environments.

You will lead engineering initiatives, provide advanced (L3) support, and ensure scalable, secure implementation while partnering with security stakeholders to define and enforce data protection requirements.