About Northern Trust
As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.
Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.
With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.
The Director, Platform Security Engineering and Operations is a people leader responsible for defining and leading the strategy, governance, and execution of Northern Trust’s enterprise security platforms. This role sets direction for the team, establishes priorities, develops engineering and operations talent, and ensures delivery of secure, resilient and audit-ready platform outcomes. The Director must be able to guide technical strategy, remove execution barriers, influence cross-functional partners and translate complex security engineering work into clear risk, control and business outcomes for senior stakeholders.
What You'll Do
Lead Security Platform Engineering Teams
Lead, coach and develop a team of security engineering individual contributors responsible for enterprise security platforms.
Set technical and operational direction for security tools spanning zero-trust, SASE/SSE, network, vulnerability and exposure management, AI guardrails, and SaaS.
Establish engineering standards, implementation patterns, operating models and runbook expectations that enable consistent execution across the team.
Define team goals, maturity models and performance metrics that measure delivery, assurance, compliance and measurable risk reduction.
Coordinate cross-functional security initiatives across engineering, infrastructure, application, risk, audit and operations teams.
Key Deliverables
Lead the team accountable for designing, engineering, coordinating and operating: Intrusion prevention(IPS) across next-gen firewalls
Vulnerability scanning platforms and unified vulnerability management(UVM) layer
Enterprise SASE / SSE security platforms
Secure web gateway, CASB, and cloud access protection
SaaS application protection and monitoring
Secure remote access and internet traffic inspection
Browser isolation and modern web threat prevention
AI gateway controls that govern how users and applications consume LLMs and AI services
ServiceNow integrations (Vulnerability Response, ITSM, CMDB)
Own team outcomes for platform health, upgrades, capacity, resilience, lifecycle management, vendor management and escalation across the stack.
Define, review and communicate metrics on coverage, control effectiveness, SLA adherence, tool health, team throughput and measurable risk reduction.
Ensure audit and regulatory support is delivered with strong evidence quality, traceability, repeatable operations and clear ownership across PCI-DSS, SOX, GLBA, OCC/FFIEC and related expectations.
Review and approve engineering, operations and executive-ready documentation used by security engineering, operations, risk and audit stakeholders.
Lead prioritization, investment recommendations, capability evaluations, proofs of concept and tool rationalization decisions based on risk reduction, operational fit, cost and control outcomes.
What You'll Bring
15+ years of experience in information technology, cybersecurity, cloud, infrastructure, network security or platform engineering, with +5 years of demonstrated leadership of enterprise-scale security teams or major security engineering programs.
Proven people leadership capability: setting direction, developing talent, assigning work, managing priorities, coaching senior…