Principal Cyber Sec Engineer, DLP / Data Protection

Northern Trust

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Chicago, IL
Salary
$137,400–$233,600 / yr
Employment
Full-time
Posted
3 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $183k
This role $186k
$124k most similar roles pay here $245k

This role pays more than 57% of similar roles. Most pay $152,131–$213,750 — the shaded band above. At the midpoint, this role pays about $186k versus about $183k for comparable roles.

Based on 240 similar postings.

Employer

About Northern Trust

Northern Trust is a leading provider of wealth management, asset servicing, asset management, and banking services to corporations, institutions, and high-net-worth individuals. Industry: Financial Services & Asset Management

Northern Trust currently has 58 open roles on FindRole.

Listed pay typically runs $114,500–$194,700 across 45 roles with salary data.

Most-posted roles

View all roles at Northern Trust

At a glance

TL;DR · Principal Cyber Sec Engineer, DLP / Data Protection

Principal, Cyber Sec Eng - DLP / Data Protection serves as a senior technical leader within the Data Protection Engineering team. This role is responsible for the technical vision, control strategy, and execution oversight for Data Loss Prevention (DLP), encryption-related protections, and external data transfer controls. The individual will lead critical initiatives including the migration from Symantec DLP to Microsoft Purview, Zscaler policy redesigns, Database Activity Monitoring, and automated exception handling. Key responsibilities involve designing enterprise information protection labels, managing insider risk, and addressing AI-specific data risks. Required expertise includes hands-on experience with Zscaler, Microsoft Purview, Azure security capabilities like AIP and MIP, and network security concepts such as firewalls and traffic analysis. The role solves complex data protection challenges within a highly regulated environment to ensure robust information governance and secure data lifecycle management.

What you'll do

  • Own the technical vision and control strategy for Data Loss Prevention (DLP) and encryption data protection.
  • Lead the migration from Symantec DLP to Microsoft Purview and manage the associated exit strategy.
  • Design, implement, and operate enterprise DLP controls across endpoint, cloud, identity, and governance capabilities.
  • Redesign and optimize Zscaler data protection and security policies.
  • Provide technical direction for Database Activity Monitoring (DAM) initiatives.
  • Automate exception handling processes and establish repeatable governance workflows.
  • Develop and maintain the enterprise information protection and labeling strategy.
  • Translate emerging AI risks into proactive preventive and detective security controls.

What we're looking for

  • Extensive experience in Cyber Security, Data Protection Engineering, or a closely related discipline.
  • Strong hands-on experience with Zscaler and Microsoft Purview DLP.
  • Deep knowledge of data loss prevention, data classification, information protection, encryption, and enterprise data protection principles.
  • Experience with Azure security capabilities including AIP, MIP, and Microsoft Defender for Cloud Apps.
  • Strong understanding of network security concepts such as proxies, firewalls, traffic analysis, and external data transfer paths.
  • Experience working in a highly regulated enterprise environment.
  • Experience supporting control alignment with FFIEC, PCI-DSS, and SOX expectations (preferred).
  • Work Authorization.

More like this

Similar roles

Principal Engineer, Cybersecurity - Data Loss Prevention

T-Mobile

Frisco, TX +2 60 days ago $127,800–$230,700
Microsoft Purview Zscaler Island Browser Cybersecurity Data Loss Prevention AI Security Machine Learning Security Engineering Threat Modeling Security Automation Vulnerability Testing CISSP CISM CRISC
7+ yrs exp

Lead Cyber Sec Engineer

Northern Trust

Chicago, IL 67 days ago
Zscaler Data Loss Prevention (DLP) Azure Security AIP MIP MCAS Network Security Firewalls CASB Security Automation Scripting PCI-DSS SOX FFIEC
5+ yrs exp

Senior Lead Cyber Sec Engineer

Northern Trust

Chicago, IL 67 days ago
SecuPi Data Activity Monitoring (DAM) Microsoft Purview Zscaler Azure Kubernetes Service (AKS) Java Docker REST APIs JSON XML Microsoft Sentinel ServiceNow Splunk Git CI/CD DevSecOps Kafka Event Hub Encryption SaaS
9+ yrs exp

Lead Cyber Security Engineer

Northern Trust

Chicago, IL 63 days ago
Zscaler DLP Microsoft Purview Broadcom Layer7 API Gateway API Security CASB Endpoint DLP Azure SIEM Kubernetes CI/CD DevOps Linux Unix MySQL SSL/TLS DNS Firewall YAML
7+ yrs exp