Data Protection - Senior Lead, Data Discovery & Remediation

Tasks

• Lead and manage support across teams to ensure the security of the environment.
• Understand and interpret security capabilities, and deliver a layered security solution that can support business objectives.
• Define technical and policy solutions that align with the company's strategy and capabilities to achieve these goals across the service.
• Ensure that the capabilities align with the key standards and governance objectives specified for this role.
• Provide security solutions to support technology enablers and infrastructure platforms, as well as security for data platform engineering and architecture teams.
• Keep an eye on technical and architectural risks.
• Design, develop, and implement monitoring and alerting solutions for operational security to enable effective security practices and operations.
• Proactively monitor and optimize endpoint security.
• Work according to a defined schedule for long-term projects and plans.
• Lead an engineer, use assessments, review changes, and interact with application security teams to ensure that effective technical controls are implemented and tested.
• Ensuring a consistent level of responsibility for information security with business partners; identifying pragmatic and effective medium-term security solutions; and conducting information security reviews and audits.
• Empower incident response and case management capabilities and security teams with a wide range of deliverables.
• Develop and manage incident response processes and operational plans properly and effectively.
• Ability to understand and address security requirements and risks, as well as other analysts and communications professionals.
• Ability to write programs and standard procedures.

Requirements

• At least 10 years of experience in information security and engineering.
• At least 5 years of experience as a data protection engineer, with prior expertise in data protection and extensive experience in data classification.
• A degree in computer science or a related STEM field.
• Experience conducting architectural reviews to identify and assess application and infrastructure security risks using the threat modeling methodology is a plus.
• Extensive experience in the development and implementation of security solutions using regular expressions (RegEx).
• Proven technical certifications such as CISSP, CCSP, CCRA, and CISA (ISO 27001) are preferred. Plus: certifications such as Certified Ethical Hacker, Security+, and Certified Ethical Hacker, etc.
• Proven experience in managing governance processes to ensure that standards and compliance requirements are met globally, including the development or maintenance of policies and procedures as well as related technology audits; the ability to work within the context of the business, the company, and the regulatory environment; and the ability to communicate with various groups within the organization.
• Familiarity with leading SOC SIEM toolsets (e.g., Microsoft Sentinel, Splunk, Rapid7, Tenable, FireEye, Nessus) or experience with similar enterprise security toolsets (e.g., Security Onion, Cyberdyne, Cisco Secure Network, Tripwire, etc.), as well as experience with Endpoint Detection and Response (EDR).
• Ability to possess communication skills and to establish and maintain effective relationships with stakeholders.
• Plus: rigorous and positive thinking, as well as proactive action.
• At the time of application, the applicant must be authorized to work in Ireland for the duration of the employment.

We offer

• As a Northern Trust partner, you'll be part of a flexible and collaborative work culture that places a strong emphasis on fostering teamwork and learning