Vista previa de la oferta
Data Protection - Data Discovery & Remediation Senior Lead
lead · Risk & Compliance
About Northern Trust
As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.
Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.
With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.
This role is part of the Information Security & Data Protection organisation, aligning to Global Information Technology. We operate within a complex landscape driven by client expectations and the vastness/variety that comes with operating in countries across the globe.
The role is for a Data Protection - Data Discovery & Remediation Senior Lead accountable for driving control compliance with policies, standards and targeting prioritized applications/solutions/architectures to reduce risk.
The primary candidate has technical knowledge and experience in Information Security domain involving application security and security risk consultancy focusing on data security within multi-cloud environments, SaaS solutions and on-premise application suites
Key Responsibilities:
- Offer guidance, best practices, and support across businesses to drive awareness and understanding of the technology risk and controls framework and challenges to compliance with it.
- Develops and administers the solutions and detective controls that meet system expectations relative to scalability, performance, fault tolerance, usability, and data integrity.
- Delivers solutions that meet end user expectations relative to performance, usability and security for the Data Protection Engineering and Architecture function.
- Determining operational feasibility by evaluating, analyzing, problem definition, requirements, solution development, and proposing solutions.
- Collaborating with Enterprise Architecture organization as needed.
- Reviewing documentation, processes or procedures, and recommends where automation or improvements can be implemented.
- Operating independently; has in-depth knowledge of business unit/function; accomplishes engineering and organization mission by completing related results as needed.
- Lead Application risk reviews and assessments, identifying threats, communicating with Application teams and stakeholders to define risk treatment activities.
- Act as an InfoSec subject matter expert, primarily focused on cloud application security across the Bank’s core technology within Azure & AWS cloud platforms.
- Maintain specialist knowledge in assigned security processes, systems or frameworks
- Represent Information Security with Business stakeholders as a trusted advisor, finding pragmatic and cost-effective security solutions that efficiently support customer needs.
The ideal candidate should have a fair amount of the following skills and experience:
- Experience within Security & Technology experience across a broad range of architectures. Security Architecture experience with hands on experience designing and delivering technology solutions.
- Experience in the area of technology risk. Successful candidate is likely to have held roles such as Security Risk Consultant, Risk Consultant, Information or IT Security Risk Manager, IT Audit Manager, IT Incident Manager or Security Analyst.
- Extensive experience with cloud technology including, hybrid environments, security from the start design (SSDLC)
- Experience conducting architecture reviews to find and evaluate application and infrastructure security risks using Threat Modelling methodologies (e.g. STRIDE)
- Extensive experience in developing and implementing detective controls using Regular Expressions etc.
- Relevant technical qualifications such as CRISC, CISM, CISA, CISSP, AWS Certified Security etc;
- Relevant business experience/qualifications/knowledge: Expertise established in assessing and articulating technology and/or security risk in the context of various other operational risks and challenges facing the organization.
- Information Security subject matter expert in multiple cloud technology areas such as M365, Azure (Identity, Security and Compliance), BigID, Defender, Azure DevOps, Azure IaaS, SaaS, and on premise application suites (Oracle, Windows, Linux) etc.
- Solid, practical and demonstrable experience of information security (technical and non technical aspects), ideally with an understanding of privacy & Data Management;
- Able to influence decision making to surface and mitigate issues and risks across a wide range of stakeholders;
- Positive, collaborative and builds and maintains effective relationship with others
- Pragmatic, and effectively balances risk and control requirements with commercial drivers;
- Ability to articulate and document security requirements and risks so that they are accurate, auditable and understandable;
- Ability to solve problems creatively and effectively
- Plan, organise and prioritise tasks and projects effectively
Work Authorization
Applicants must have the right to work in Ireland at the time of application and for the duration of employment.
Please note that Northern Trust is unable to provide employment permit sponsorship for this role. This includes Critical Skills Employment Permits, General Employment Permits, Intra-Company Transfer Employment Permits, Stamp 1G permissions, and other employment permits under Irish immigration frameworks.
Working with Us
As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.
Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.
Reasonable Accommodation
Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com, or alternatively you can discuss your individual requirements with the recruiter you are working with.