Sr Lead, Cyber Sec Eng

Northern Trust Corp.; Chicago (IL); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

401(k) and pension benefits

Medical, dental, vision coverage

Paid time off

Discretionary bonus program

Job summary

Northern Trust Corp. seeks a Senior Lead Cyber Security Engineer to design, implement, and manage enterprise data protection controls across cloud and on‑prem environments.

You will drive SecuPi DAM, Purview DLP, labeling, monitoring, and encryption, while advancing data-centric security and Zero Trust across applications and data stores. Lead security architecture, integrate with SIEM, and partner with compliance and business teams to meet regulatory requirements.

Qualifications

• 9+ years in Cyber Security / Data Protection Engineering.
• Experience with SecuPi DAM, Purview DLP, Information Protection, and Zscaler data protection.
• Knowledge of governance, privacy, and regulatory compliance requirements.

Responsibilities

• Design and implement enterprise data protection architectures using SecuPi DAM, Purview, and Zscaler.
• Develop security use cases and monitoring strategies for data access, movement, and policy violations.
• Collaborate with compliance, risk, and business stakeholders to align protections with regulations.
• Lead initiatives and provide mentorship on secure engineering practices.

Skills

SecuPi DAM

Microsoft Purview

DLP & Information Protection

Zero Trust

Data classification

Azure cloud

SIEM integration (Splunk, Sentinel)

Security architecture

CI/CD / DevSecOps

Education

Bachelor’s degree or equivalent experience

Tools

SecuPi

Microsoft Purview

Zscaler

CASB

Job description

About Northern TrustAs a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.Role SummarySenior Lead Cyber Security Engineer responsible for designing, implementing, and managing enterprise data protection and data security controls, including SecuPi Data Activity Monitoring (DAM), Microsoft Purview Information Protection, Data Loss Prevention (DLP), CASB, and Zscaler data security capabilities. This role leads strategic initiatives focused on data visibility, monitoring, classification, protection, encryption, and secure application integration across cloud and on-premises environments.Key ResponsibilitiesLead implementation of SecuPi (DAM) controls and data-level encryptionLead implementation and optimization of Microsoft Purview DLP, Information Protection, Endpoint DLP, CASB, and Zscaler data protection controls.Define and enforce enterprise data protection policies, including data classification, labeling, monitoring, and loss prevention controls.Drive the adoption of Zero Trust and data-centric security principles across applications, databases, cloud platforms, and end-user environments.Partner with compliance, risk, and business stakeholders to align data protection controls with regulatory and governance requirements.Drive integration of SecuPi with enterprise applications, especially in AzureDesign and enforce data security policies and monitoring use casesMajor DutiesDesign and implement enterprise data protection architectures leveraging SecuPi DAM, Microsoft Purview, and Zscaler platforms.Develop security use cases and monitoring strategies for sensitive data access, movement, and policy violations.Support integration of data security platforms with SIEM, cloud, and enterprise security ecosystems.Collaborate with architecture and enterprise teamsDefine scalable and secure engineering solutionsSupport full lifecycle (design to deployment and support)Ensure security, scalability, and performance requirementsRequired Skills & ExpertiseHands-on experience with Microsoft Purview Information Protection, Data Loss Prevention (DLP), Data Lifecycle Management, and Compliance capabilities.Experience implementing and managing Zscaler Data Protection, CASB, SSE, and Zero Trust security controls.Strong understanding of data classification, labeling, governance, privacy, and regulatory compliance requirements.Experience designing enterprise data-centric security architectures across cloud and hybrid environments.Familiarity with integrating DLP, DAM, and cloud security platforms with Microsoft Sentinel, Splunk, or comparable SIEM solutions.Understanding of DevSecOps and secure SDLCStrong Azure cloud knowledge (Functions, APIM, Event Hub, Key Vault)Experience & Qualifications9+ years in Cyber Security / Data Protection EngineeringBachelor’s degree or equivalent experienceCertifications (CISSP, CISM, cloud) preferredLeadership Scope (P3 Expectations)Lead enterprise DAM initiativesWork independently with minimal supervisionProvide mentorship and technical leadershipAct as escalation point for critical issuesInfluence architecture and control strategyNice to HaveEvent-driven architecture (Kafka, Event Hub)Kubernetes/cloud-native exposureExperience with SIEM and analytics toolsKnowledge of governance and compliance frameworksSummaryThis role is key to advancing enterprise data-centric security by enabling real-time monitoring, encryption, and secure application integration using SecuPi/DAM platforms.Salary Range:Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.Work AuthorizationApplicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).Working with UsAs a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.Reasonable AccommodationNorthern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [e-mail], or alternatively you can discuss your individual requirements with the recruiter you are working with.