Lead, Security Architecture

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.  

Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Title: Lead Security Architecture

Overview:

Responsible for creating security blueprints (guidelines) that will be used as patterns for the implementation of security designs. Responsible for developing and administering blueprints and guideline documents throughout the lifecycle of relevant solutions and technologies. Partner with enterprise architecture, cloud, information security, and application teams to ensure appropriate security blueprints are available to meet the business requirements.

Description/Major Duties:

• Responsible for understanding the business requirements that need the development of security guidelines and patterns
• Partner with relevant teams and develop security blueprints and patterns
• Help with the automation of the processes that can effectively use the security patterns
• Ensure security blueprints are current and updated to reflect relevant changes in technology stack
• Ensure security blueprints are clearly defined and easily accessible to the application teams
• Measure the effectiveness of security blueprints, pattens, and guidelines
• Partner with application, enterprise architecture, and cloud team members to understand the challenges and update documents/processes accordingly to assist
• Ensure security blue prints are aligned with standards, policies, and well known frameworks (NIST, zero-trust etc.)
• Align with information security function leads for the development of guidelines and patterns
• Ensure blueprints, patterns, and guidelines are well aligned with Information Security strategy
• Make the best use of newer technologies (e.g. AI) that can help optimize the process
• Adopt secure by design practices as security blue prints are developed

Qualifications

• Bachelor's degree and experience in information security, or an equivalent combination of education and work experience.
• Excellent consultative and communication skills, and the ability to work effectively with client, partner, and IT management and staff.
• Six years of industry experience with at least four years in main stream Information Security role is preferred
• CISSP, CISM, CSSP, or Security+ certification preferred
• Strong collaboration skills and analytical ability
• Deep knowledge of application or infrastructure systems architecture, usually having experience with multiple system technologies.

Knowledge :

• Excellent oral and written communication skills are required
• In-depth information security/industry knowledge is required
• Must be highly flexible and adaptable to change
• In-depth knowledge of various cybersecurity frameworks, standards, and SSDLC
• Ability to establish security guidelines/patterns related to cloud, hybrid, and on-prem systems and work with various tech teams to assist with the implementation as needed
• Must be very organized and collaborative
• Very good understanding of zero-trust architecture, Identity, Authentication and Authorization, Data protection, and working experience with relevant tools/technologies
• Knowledge of AI, scripting, automation, and programing languages is a plus
• Must have knowledge related to cloud technologies
• Knowledge of fundamental networking technologies is required
• Understanding of network protocols, authentication, and authorization technologies is required
• Understanding of major operating systems, endpoint security, API security, containers, and network security is required