Sr.Manager, Information Security Engineer

The Federal Home Loan Bank of Chicago is seeking a senior security engineering leader to guide the design, engineering, implementation, and ongoing lifecycle management of technical security controls across the Bank’s environment. This hybrid role in Chicago supports the protection of systems, identities, applications, data, cloud services, and customer-facing capabilities while aligning engineering priorities to established standards, risk expectations, and regulatory needs.

As Senior Manager, Information Security Engineering, you will connect technical execution to the NIST Cybersecurity Framework (CSF), Bank policy, risk appetite, architecture standards, and measurable outcomes.

• Lead the end-to-end engineering of technical security controls that safeguard systems, identities, applications, data, cloud services, and customer-facing capabilities.
• Manage a blended team of employees and contractors, set engineering priorities and standards, and convert security requirements into scalable and supportable solutions.
• Align the security tool portfolio and engineering roadmap to NIST CSF, Bank policy, risk appetite, architecture standards, and applicable regulatory expectations.
• Build and maintain a defense-in-depth control environment spanning on-premises and cloud platforms including AWS and Microsoft Azure
  , along with SaaS, endpoint, network, identity, application, and data platforms.
• Translate cybersecurity risk, policy, and architecture requirements into practical technical controls, engineering patterns, automation, and operational guardrails.
• Improve control effectiveness, reliability, coverage, and transparency using disciplined engineering practices and outcome-oriented metrics.
• Develop security engineering talent by setting clear accountability across employees, contractors, vendors, and technology partners.
• Drive risk reduction and regulatory readiness through modern capabilities, automation, and governance aligned with industry and regulatory standards.
• Own security engineering strategy and execution, including a multi-year roadmap, backlog, budget inputs, workforce plan, vendor relationships, and delivery commitments.
• Maintain traceability from risks and requirements to control design, implementation, evidence, ownership, and measurement aligned to NIST CSF functions and categories.
• Partner with teams across Security Architecture, Security Operations, Threat and Incident Response, Identity and Access Management, Security Advisory and Analytics, IT Risk and Compliance, Enterprise Architecture, Infrastructure, Cloud, Network, and Application.
• Support incidents, investigations, vulnerability remediation, audit findings, risk acceptances, and penetration testing by coordinating engineering analysis and corrective actions.
• Provide engineering leadership across security technologies covering endpoint and workload protection, identity and privileged access, cloud security, network security, monitoring and logging, data protection, vulnerability management, application security, and security automation.
• Direct security engineering for AWS and Microsoft Azure, including secure configuration baselines, native security services, identity and access controls, logging and monitoring, encryption and key management, network segmentation, and automated policy enforcement.
• Establish standards for security tool selection, configuration, integration, lifecycle management, resilience, supportability, and decommissioning, including overlap and gap identification.
• Define engineering quality practices such as peer review, change control, infrastructure as code, testing, documentation, release readiness, rollback planning, and handoff to operational support.
• Create metrics and dashboards to measure…