Lead Cyber Sec Eng – Business Analyst

Role Overview

Experience

Key Responsibilities

• Collaborate with stakeholders to gather, analyze, and document business and security requirements.
• Support implementation and enhancement of data protection solutions such as Symantec DLP, Microsoft Purview, Zscaler DLP, or similar tools.
• Develop and execute business test cases to validate data protection policies and controls.
• Work across cross-functional teams to improve processes, productivity, and security outcomes.
• Assist in mapping data protection requirements to governance frameworks and compliance obligations.
• Validate solution designs and ensure effective deployment aligned to business needs.
• Monitor and report key metrics to measure effectiveness of data protection controls.
• Support audit readiness through documentation, evidence collection, and control validation.
• Partner with Cyber Security Engineering teams to support enterprise data protection initiatives.

Required Qualifications

• 5+ years of experience as a Business Analyst in Data Protection, Cybersecurity, Risk, or Compliance domains.
• Strong understanding of data protection principles, DLP policies, and information security fundamentals.
• Experience with Symantec DLP, Microsoft Purview, Zscaler, or equivalent data security tools.
• Proven experience in test case creation, execution, and validation of security policies.
• Strong analytical, problem-solving, and documentation skills.
• Excellent communication and stakeholder management skills.
• 5+ years
• Familiarity with encryption technologies and secure data handling practices.
• Knowledge of data classification, data governance frameworks, and regulatory requirements.
• Exposure to cloud security and SaaS application risk management.
• Experience working in a regulated enterprise environment such as financial services.
• Key Competencies
• Requirement Analysis & Documentation
• Data Protection & Security Awareness
• Testing & Validation Expertise
• Stakeholder Collaboration
• Risk and Compliance Mindset
• P3 Role Expectations
• Lead medium-to-large initiatives supporting Data Protection and Cyber Security programs.
• Work independently with minimal supervision while coordinating with stakeholders.
• Provide guidance and support during testing, implementation, and operational activities.
• Contribute to continuous improvement, governance, and compliance efforts.
• Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.
• Work Authorization
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).
• Working with Us
• As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.
• Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.
• Reasonable Accommodation
• Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [email protected], or alternatively you can discuss your individual requirements with the recruiter you are working with.
• Key Responsibilities
• Collaborate with stakeholders to gather, analyze, and document business and security requirements.
• Support implementation and enhancement of data protection solutions such as Symantec DLP, Microsoft Purview, Zscaler DLP, or similar tools.
• Develop and execute business test cases to validate data protection policies and controls.
• Work across cross-functional teams to improve processes, productivity, and security outcomes.
• Assist in mapping data protection requirements to governance frameworks and compliance obligations.
• Validate solution designs and ensure effective deployment aligned to business needs.
• Monitor and report key metrics to measure effectiveness of data protection controls.
• Support audit readiness through documentation, evidence collection, and control validation.
• Partner with Cyber Security Engineering teams to support enterprise data protection initiatives.

Preferred Qualifications

• Familiarity with encryption technologies and secure data handling practices.
• Knowledge of data classification, data governance frameworks, and regulatory requirements.
• Exposure to cloud security and SaaS application risk management.
• Experience working in a regulated enterprise environment such as financial services.

Key Competencies

P3 Role Expectations