Sr. Director Authentication & CIAM

About Northern Trust

Northern Trust, a Fortune 500 company, is a globally recognized, award‑winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

The function of the Sr Director, Authentication (IAA) and Client Identity and Access Management (CIAM) role will be to define and implement a management framework for the enterprise authentication and authorization security systems of Northern Trust as well as all client identity systems and lifecycle management. The role will report to the Global Head of Identity and Access Management (IAM), ensuring formulation and execution of strategic roadmaps related to 1st line of defense IAM governance practices.

The role will also be responsible for Workforce and client governance policies, standards and control adherence and serve as principal partner in strengthening and maintaining productive alliances with 2nd and 3rd line of defense challenge teams. Additionally, this position will manage a team that will align with business, technology, information security and other corporate teams to establish and strengthen adoption of identity practices, standards and controls.

As a primary IAM and CIAM leader, the selected candidate will partner with enterprise architecture, engineering, operations and program teams to ensure that the IAA and CIAM strategies and roadmaps are in alignment with other IAM capabilities and towers of work.

• Oversee Design and implement the strategic technology and operational objectives for the Access Management and CIAM towers of the Northern Trust (NT) IAM Organization
• Serve as a people manager for the IAA & CIAM functions, aligning its capabilities to business technology team and department future objectives
• Represent the IAM organization’s client identity lifecycle, workforce and client authentication, and workforce and client authorization capabilities and provides guidance to the business units as well as to technology, risk and audit teams
• Own the IAA and CIAM least privilege principles as well as practices associated with overall authentication and authorization.
• Lead Authentication & Authorization for the workforce, clients and the cloud(s); partnership with IAM Architecture, Engineering and Operations
• Lead enforcement of IAA & CIAM standards development, best practices and controls across NT, whether applications and platforms are centrally or decentralized managed
• Lead client identity, authentication and authorization metrics and analytics collection and reporting to all levels of NT leadership
• Partner with business aligned technology teams to onboard all business critical applications and platforms to the IAM IAA & CIAM suite of tools
• Demonstrate advanced proficiency in Okta, Azure App Gateway, Zuul Gateway, Azure CIEM, Azure Entra, Active Directory, Plain , Oracle Entitlement Server, Venafi, Oracle Unified Directory, LDAP, PKI, Pivotal Cloud Foundry, Spring Boot, Spring Security, Terra Form, PING Access, Ping Federate, Okta Threat Insights, Azure Dev Ops, SCRUM, Java Development and Architecture
• Manage major incident response procedures specific to privileged access incidents for CIAM and IAA
• Lead team responsible for continuous monitoring mechanisms for enterprise authentication and authorization
• Responsible for IAA & CIAM related communications and business aligned IAM progress reporting
• Responsible for enterprise level training of access management principles, practices, standards and controls
• Responsible for IAA & CIAM related audit and regulator responses and deliverables
• Responsible for advanced IAA and CIAM functions, including cloud based Role Based Access design, multifactor enablement, client and workforce…