Lead, Security Architecture - Blueprints / Guidelines

Northern Trust - Naperville, IL

Full-time - Senior

Naperville, IL

10,001+ employees

Real Estate

About the position

The Lead, Security Architecture position at Northern Trust is responsible for creating security blueprints and guidelines that serve as patterns for implementing security designs. This role involves developing and administering solutions that align with system expectations regarding scalability, performance, fault tolerance, usability, and data integrity within the Information Security Operations and Architecture function. The position also focuses on delivering solutions that meet end-user expectations for performance, usability, and security.

Responsibilities

• Creates quality deliverables including class diagrams, data models, data dictionaries, and detailed process flow diagrams.
• Evaluates functionality and technologies in the Enterprise Security Applications portfolio and recommends strategies for growth, maintenance, or sunset.
• Participates in all technical aspects of designing, implementing, and tracking internal and external application and infrastructure vulnerability scans.
• Operates independently with in-depth knowledge of the business unit/function.
• Provides comprehensive, in-depth consulting and leadership to team and partners at a high technical level as a subject area expert.
• Carries out activities that are large in scope, cross-functional, and technically difficult.
• Balances high-level operational execution and development with the execution of strategic direction of business function activities.
• Conducts preliminary analysis of new technologies, vulnerability findings, or security incidents.
• Responsible for direct interaction with different committees and/or management.
• Strategically develops, implements, and administers programs within functional areas.

Requirements

• Bachelor's degree in a relevant field or equivalent proven work experience in Information Security.
• Industry certifications such as CISSP, CISM, CISA, or GIAC are preferred.
• In-depth knowledge of various cybersecurity frameworks, standards, and SSDLC.
• Excellent oral and written communication skills.
• Ability to establish security guidelines/patterns related to cloud, hybrid, and on-prem systems.
• Knowledge of scripting languages and cloud technologies.
• Understanding of fundamental networking technologies and major operating systems.
• In-depth information security/industry knowledge.

Nice-to-haves

• Experience with zero-trust architecture and relevant tools/technologies.
• Highly flexible and adaptable to change.
• Very organized and collaborative.

Benefits

• Flexible and collaborative work culture.
• Opportunities for movement within the organization.
• Access to senior leaders.
• Commitment to assisting communities served.