Sr Lead - IAM Privileged Access Engineering

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure:
Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

The Identity & Access Management (IAM) Privileged Access Management (PAM) Lead is responsible for the strategy, governance, engineering, operational oversight, and continuous enhancement of Northern Trust's privileged access management capabilities. This role partners with Cyber Security Engineering, Infrastructure Services, Application Development, Risk Management, Audit, Compliance, and Business Technology teams to reduce cyber risk associated with privileged accounts, administrative access, elevated entitlements, and non-human identities.

The successful candidate will lead the adoption, optimization, and governance of Cyber Ark PAM capabilities while supporting the broader IAM strategy across workforce, privileged, and machine identities. The role is accountable for ensuring privileged access controls align with regulatory expectations, internal security standards, least privilege principles, and industry frameworks including NIST, FFIEC, and financial services best practices. Cyber Ark serves as Northern Trust's approved PAM solution for privileged credential management, session monitoring, governance, and audit reporting.

Serve as a subject matter expert for the Cyber Ark platform, including:

• Privileged Access Manager (PAM)
• Privileged Session Manager (PSM)
• Central Policy Manager (CPM)
• Application Access Manager (AAM/Secrets Management)
• Endpoint Privilege Management (EPM)
• Privileged Threat Analytics (PTA)

Drive platform upgrades, integrations, onboarding, and operational maturity activities. Develop and maintain standards for privileged account lifecycle management through Cyber Ark controls. Partner with engineering teams to integrate Cyber Ark with critical infrastructure, cloud platforms, applications, databases, and automation tooling.

Ensure privileged access controls satisfy Northern Trust security policies, audit requirements, and regulatory obligations. Lead control design and continuous monitoring efforts for privileged identities across workforce and non-human populations. Evaluate privileged access risks, control gaps, policy exceptions, and remediation plans. Support RCSA, audit evidence collection, and regulatory examination activities impacting privileged access management. Implement detective controls and monitoring capabilities for privileged account activities and administrative sessions.

Develop automation and integration capabilities supporting privileged account provisioning, credential rotation, access review, and secrets management. Drive API-based integrations between Cyber Ark, IGA platforms, ticketing systems, cloud environments, and enterprise applications. Support modernization initiatives involving machine identity management, cloud privilege management, and privileged authorization models. Partner with IAM engineering teams to enhance scalability, reliability, and…