Sr Manager, Security Operations Center - North America

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

The NA SOC Manager is responsible for leading a team of cybersecurity professionals to monitor, detect, and respond to security threats. This role requires a strategic leader with hands-on technical expertise and a deep understanding of cybersecurity best practices.

Key Responsibilities:

SOC Leadership & Strategy:

• Lead and manage SOC operations to ensure 24/7 monitoring and incident response.
• Develop and implement SOC processes, workflows, and response playbooks.
• Align SOC strategy with organizational security goals and regulatory requirements.

Threat Detection & Incident Response:

• Oversee detection, investigation, and resolution of security incidents.
• Establish and refine metrics to measure SOC effectiveness (MTTD, MTTR, etc.).
• Lead post-incident analysis and continuous improvement initiatives.

Team Management:

• Recruit, train, mentor, and retain SOC analysts.
• Foster a culture of accountability, collaboration, and professional growth.
• Create a shift schedule and ensure adequate coverage.

Technology & Tools:

• Evaluate and deploy tools such as SIEM, EDR and IDS/IPS platforms.
• Ensure integration of threat intelligence feeds for proactive defense.

Compliance & Reporting:

• Ensure SOC operations comply with regulatory controls.
• Provide regular reports and insights to senior leadership and stakeholders.
• Liaise with auditors and external partners as needed.

Collaboration:

• Work closely with IT and other security engineering teams to enforce security controls.
• Coordinate with external incident response teams during significant events.
• Build relationships with law enforcement and industry-specific threat-sharing groups.

Key Skills and Qualifications:

Technical Skills:

• Cybersecurity Tools: Proficiency in SIEM (e.g., Sentinel, Splunk), EDR (e.g., Defender, CrowdStrike).
• Incident Handling: Expertise in malware analysis, forensics, and incident response.
• Threat Intelligence: Knowledge of threat hunting and leveraging CTI frameworks (e.g., MITRE ATT&CK).
• Network Security: Understanding of firewalls, VPNs, IDS/IPS, and network monitoring.
• Cloud Security: Familiarity with securing Azure or AWS environments.

Leadership & Soft Skills:

• Team Leadership: Proven experience managing and scaling SOC teams.
• Strategic Planning: Ability to develop long-term SOC operational strategies.
• Communication: Strong presentation skills for technical and non-technical audiences.
• Crisis Management: Calm under pressure with excellent decision-making skills.

Experience:

• 5+ years in cybersecurity roles, with at least 2–4 years in a SOC leadership position.
• Experience in handling high-severity incidents and complex security operations.
• Knowledge of compliance requirements like GDPR, CCPA, HIPAA, etc.

Working with Us:

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.

Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.

We’d love