Sr Lead, Cyber Sec Eng

Northern Trust • Chicago, IL

1d • Remote

About The Position

Senior Lead Cyber Security Engineer responsible for designing, implementing, and managing enterprise data protection and data security controls, including SecuPi Data Activity Monitoring (DAM), Microsoft Purview Information Protection, Data Loss Prevention (DLP), CASB, and Zscaler data security capabilities. This role leads strategic initiatives focused on data visibility, monitoring, classification, protection, encryption, and secure application integration across cloud and on-premises environments.

Requirements

• Hands-on experience with Microsoft Purview Information Protection, Data Loss Prevention (DLP), Data Lifecycle Management, and Compliance capabilities.
• Experience implementing and managing Zscaler Data Protection, CASB, SSE, and Zero Trust security controls.
• Strong understanding of data classification, labeling, governance, privacy, and regulatory compliance requirements.
• Experience designing enterprise data-centric security architectures across cloud and hybrid environments.
• Familiarity with integrating DLP, DAM, and cloud security platforms with Microsoft Sentinel, Splunk, or comparable SIEM solutions.
• Understanding of DevSecOps and secure SDLC
• Strong Azure cloud knowledge (Functions, APIM, Event Hub, Key Vault)
• 9+ years in Cyber Security / Data Protection Engineering
• Bachelor’s degree or equivalent experience
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).

Nice To Haves

• Event-driven architecture (Kafka, Event Hub)
• Kubernetes/cloud-native exposure
• Experience with SIEM and analytics tools
• Knowledge of governance and compliance frameworks
• Certifications (CISSP, CISM, cloud) preferred

Responsibilities

• Lead implementation of SecuPi (DAM) controls and data-level encryption
• Lead implementation and optimization of Microsoft Purview DLP, Information Protection, Endpoint DLP, CASB, and Zscaler data protection controls.
• Define and enforce enterprise data protection policies, including data classification, labeling, monitoring, and loss prevention controls.
• Drive the adoption of Zero Trust and data-centric security principles across applications, databases, cloud platforms, and end-user environments.
• Partner with compliance, risk, and business stakeholders to align data protection controls with regulatory and governance requirements.
• Drive integration of SecuPi with enterprise applications, especially in Azure
• Design and enforce data security policies and monitoring use cases
• Design and implement enterprise data protection architectures leveraging SecuPi DAM, Microsoft Purview, and Zscaler platforms.
• Develop security use cases and monitoring strategies for sensitive data access, movement, and policy violations.
• Support integration of data security platforms with SIEM, cloud, and enterprise security ecosystems.
• Collaborate with architecture and enterprise teams
• Define scalable and secure engineering solutions
• Support full lifecycle (design to deployment and support)
• Ensure security, scalability, and performance requirements

Benefits

• retirement benefits (401k and pension)
• health and welfare benefits (medical, dental, vision, spending accounts and disability)
• paid time off
• parental and caregiver leave
• life & accident insurance
• other voluntary and well-being benefits
• discretionary bonus program that may include an equity component

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree