Principal, Cyber Sec Eng - DLP/Data Protection
Listed on 2026-10-10
-
IT/Tech
Cybersecurity, Information Security & Data Protection
As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure:
Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.
Summary
Principal Cyber Security Engineer responsible for leading the secure enablement, technical direction, control guidance, and execution oversight for Data Protection Engineering.
The role has primary accountability for Data Loss Prevention (DLP), encryption-related data protection, and external data transfer controls, including ongoing data center bypass work.
This position also provides technical leadership for exception handling automation, Zscaler policy redesign, Database Activity Monitoring (DAM), and the migration from Symantec DLP to Microsoft Purview, including the Symantec exit strategy.
Key Responsibilities- Own the technical vision and control strategy for DLP and encryption data protection, not just feature implementation.
- Lead secure enablement and control oversight for DLP engineering and external data transfer controls, including data center bypass capabilities.
- Drive automation of exception handling and establish repeatable governance workflows.
- Lead the redesign and optimization of Zscaler data protection and security policies.
- Provide technical direction for Database Activity Monitoring (DAM) initiatives.
- Lead the migration from Symantec DLP to Microsoft Purview and define a controlled, supportable Symantec exit strategy.
- Define durable and repeatable security patterns that can be adopted by engineering, technology, and business teams.
- Partner with Security, Compliance, Privacy, Microsoft 365, and Risk stakeholders to align controls with enterprise requirements.
- Design, implement, and operate enterprise DLP-related controls spanning information protection, labeling, endpoint, cloud, identity, and governance capabilities.
- Develop and maintain the enterprise information protection and labeling strategy.
- Engineer and operate DLP and Endpoint DLP controls, including AI-specific data protection scenarios.
- Implement and enhance Insider Risk Management and Communication Compliance controls.
- Advance Data Lifecycle Management capabilities, including retention enforcement.
- Support Data Security Posture Management (DSPM), including exposure detection and oversharing remediation.
- Configure, deploy, troubleshoot, and operate controls across Active Directory and Microsoft Entra .
- Support production changes through disciplined change management, testing, approved deployment windows, and post-change validation.
- Anticipate data protection and emerging AI risks and translate them into preventive and detective controls.
- Serve as the escalation point and design authority for complex or ambiguous AI and data protection security decisions.
- Strong hands-on experience with Zscaler and Microsoft Purview DLP.
- Deep knowledge of Data Loss Prevention, data classification, information protection, encryption, and enterprise data protection principles.
- Experience with enterprise DLP platforms and Azure security capabilities, including Azure Information Protection (AIP), Microsoft Information Protection (MIP), and Microsoft…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).