Sr Principal, Tech Program Manager - Cybersecurity Portfolio Lead

Northern Trust; Chicago (IL); On-site; USD 137,000 - 240,000; Full time

Job summary

Northern Trust is seeking a Cybersecurity Portfolio Lead to provide strategic leadership, governance, and execution oversight across a portfolio of cybersecurity capabilities, including Application Security, Data Protection, and SaaS Security. The role partners with senior executives to translate strategy into roadmaps and drive risk-reducing outcomes.

The position requires executive presence, strong financial management, and the ability to communicate status and recommendations to the Global

Qualifications

• Experience leading strategic cybersecurity programs and cross-functional initiatives.

Responsibilities

• Define approach with senior leadership, drive execution, manage risk and resources.
• Lead Project Managers and matrixed staff across enterprise priority initiatives.
• Oversee portfolio program management for a Cybersecurity Tower with aligned outcomes.
• Resolve highly complex problems using advanced critical thinking.
• Apply industry knowledge to achieve program goals and optimize investments.
• Negotiate with senior leaders across the business.

Skills

Leadership

Program management

Stakeholder management

Communication skills

Change management

Financial management

PMP certification

Education

MBA or relevant advanced degree

Tools

SAST

DAST

SCA

Job description

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.

Northern Trust seeks a Cybersecurity Portfolio Lead to provide strategic leadership, governance, and execution oversight for a portfolio of cybersecurity capabilities spanning Application Security (e.g. API Security, Secure Software Development practices, etc.), Data Protection, and SaaS Security. The role is accountable for translating cybersecurity strategy into actionable roadmaps, driving execution of programs, and ensuring delivery of measurable risk reduction outcomes across technology and business domains. Reporting directly to the Head of Cybersecurity Program Delivery, this leader will partner closely with the Head of Application Security to prioritize investments, manage cross-functional dependencies, govern portfolio performance, and accelerate remediation of security risks. The position requires executive presence, strong financial and operational management capabilities, and the ability to communicate program status, risk posture, and strategic recommendations to senior executives, including the Global CISO and executive governance forums.

Major Duties

Program Delivery

• Work with senior leadership/sponsors to define approach, drive execution, manage risk, and ensure proper resources and prioritization.
• Lead team of Project Managers and other matrixed staff supporting inter-connected, complex programs that are enterprise priority initiatives.
• Oversee portfolio program management for one of our Cybersecurity Towers, ensuring alignment of program outcomes with strategic objectives.
• Direct the resolution of highly complex problems by applying advanced critical thinking.
• Apply industry knowledge, commercial awareness and experience directing enterprise-impacting delivery to achieve program goals.
• Negotiate with senior leaders across the business.

Stakeholder Management

• Identify stakeholders who will be affected by programs and projects aligned to the portfolio, including those who may influence its delivery.
• Understand stakeholder expectations and assess level of interest, influence, and potential impact on the programs and projects.
• Develop and implement a plan to engage stakeholders throughout the program, including regular communication and consultation to keep them informed and involved.
• Ensure clear, consistent, and timely communication with stakeholders to keep them informed about project progress, changes, and any issues that arise.
• Build and maintain positive relationships with stakeholders, managing any conflicts or issues that arise, and working to gain their support for the project.
• Monitor and manage stakeholder satisfaction throughout the project, and work to address any issues or concerns that arise.
• Manage changes in stakeholder expectations or requirements and ensure they are reflected in program plans and deliverables.

Change / Risk Management

• Partner with Organizational Change Management (OCM) at the Technology and Enterprise level to ensure change readiness and adoption.
• Display a balanced, cross-functional perspective, liaising with the business to ensure efficiency, effectiveness, and productive outcomes for the program.
• Ensure adherence to technology Change Management processes and procedures.
• Implement and lead a robust program-level change control process to address impacts to scope, schedule, or resources.

Financial Management

• developing and/or managing capital and expense budgets.
• analyzing and managing budget variance.
• facilitating annual budget planning.
• optimizing spend.
• submitting timely monthly forecasts.

Staff Management

• Determine staffing needs with the team, make hiring and termination decisions, handle salary administration, and ensures resources are available to accomplish priorities.
• Provide leadership and guidance to full-time and contractor staff, fostering an environment that encourages employee participation, teamwork, and collaboration.
• Responsible for performance management and career development.

Knowledge, Skills & Experience Required

• Experience in Cybersecurity, Regulatory, or Audit-related projects with requisite understanding of terminology, expectations, and sensitivity of information
• Experience leading strategic programs within the Application Security domain (Secure Software Development Lifecycle (SSDLC), SAST, DAST, Secrets Management) as well as one or more of the following: Data Protection, API Security, SaaS Security.
• Working knowledge of modern software development practices, including CI/CD pipelines, DevSecOps, cloud-native architectures, and software supply chain security.
• Familiarity with security scanning technologies and vulnerability management workflows, including SAST, DAST, Software Composition Analysis (SCA), secrets detection, container scanning, and infrastructure-as-code security.
• Demonstrated success in leading enterprise-wide strategic initiatives within a leadership role, managing teams and large-scale projects or programs
• Superior Communication skills - able to articulate ideas and information verbally and in writing for varying audiences
• Initiative – takes initiative at suggesting improvements and anticipates the needs of leadership, program stakeholders and team members
• Organizational Skills – able to handle multiple simultaneous work deliverables and prioritize them accordingly
• Delivery Mindset – carries a delivery mindset with a bias for action, curiosity to learn, challenge, and enhance processes.
• Expert Analytical Skills – able to assemble data and analyze patterns, trends and draw conclusions and recommendations; rely on data to guide decisions
• Financial Management experience managing large program budgets between $5M to $20M dollars and comprised of internal and external labor
• Knowledge of global financial institutions with complex organizational structures and regulatory requirements
• Knowledge of and experience working in software delivery lifecycle methodologies (e.g., Agile/ Scrum, Waterfall, etc.)
• Experience in demand & capacity management
• A College or University degree; MBA or relevant advance degree a plus.
• Current or prior PMP Certification is desired.

Salary Range

$137,400 - 240,400 USD

Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.

Work Authorization

Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).

Working with Us

As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve. Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.

Reasonable Accommodation

Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [e-mail], or alternatively you can discuss your individual requirements with the recruiter you are working with.