Jobs › Northern Trust

Lead Cyber Sec Eng – Business Analyst

Northern Trust · Chicago, IL · $99,600–$169,200 a year · Full time

Posted Aug 3, 2026 · We last checked this listing on Oct 6, 2026

Apply at Northern Trust

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about a data protection or cybersecurity project where you were the business analyst. What did your documents look like?

What they are checking: Concrete BA experience with security work, such as requirements, process flows and acceptance criteria.

Tell me about a time you found a gap between what was requested and what the business truly needed.

What they are checking: Whether they dig past the stated ask to the underlying problem before solutions are built.

What would you do

How do you gather requirements for a data protection solution when the business wants convenience and security wants control?

What they are checking: Whether they can surface both sides' real needs and write requirements that a security team can actually build.

A stakeholder keeps changing requirements after the engineers have started building. What do you do?

What they are checking: Managing scope through change control and clear sign-off without damaging the relationship.

Engineering says a requirement can't be met with the current tool. How do you handle it with the business owner?

What they are checking: Brokering trade-offs honestly and offering alternatives rather than hiding technical limits.

About the work

How would you explain DLP, encryption and data classification to a business stakeholder who has never thought about them?

What they are checking: Ability to translate security concepts into plain language that non-technical partners understand and support.

What regulations or standards would shape data protection requirements at a global bank?

What they are checking: Awareness of privacy laws, banking regulations and internal policy, and how they become specific requirements.

How do you write a requirement for a DLP rule so engineers and testers both know when it's done?

What they are checking: Writing testable, specific requirements with clear conditions, actions and exceptions.

How would you map where sensitive data lives in a business process before choosing controls?

What they are checking: Data flow and inventory skills that ground governance decisions in where data actually moves.

How do you measure whether a data protection program is meeting its compliance goals?

What they are checking: Knowing useful governance metrics like coverage, incidents, exceptions and policy adoption.

Practice this interview out loud.

Offer builds a real interview for this exact role at Northern Trust from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Northern Trust.

About Northern Trust As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service. Role Overview We are seeking a detail-oriented Business Analyst with experience in Data Protection and Cybersecurity to support enterprise initiatives focused on data security, governance, compliance, and data protection programs. This role will partner with business and technical teams to translate requirements into effective security solutions, ensuring alignment with regulatory and organizational standards. Experience 5+ years Key Responsibilities • Collaborate with stakeholders to gather, analyze, and document business and security requirements. • Support implementation and enhancement of data protection solutions such as Symantec DLP, Microsoft Purview, Zscaler DLP, or similar tools. • Develop and execute business test cases to validate data protection policies and controls. • Work across cross-functional teams to improve processes, productivity, and security outcomes. • Assist in mapping data protection requirements to governance frameworks and compliance obligations. • Validate solution designs and ensure effective deployment aligned to business needs. • Monitor and report key metrics to measure effectiveness of data protection controls. • Support audit readiness through documentation, evidence collection, and control validation. • Partner with Cyber Security Engineering teams to support enterprise data protection initiatives. Required Qualifications • 5+ years of experience as a Business Analyst in Data Protection, Cybersecurity, Risk, or Compliance domains. • Strong understanding of data protection principles, DLP policies, and information security fundamentals. • Experience with Symantec DLP, Microsoft Purview, Zscaler, or equivalent data security tools. • Proven experience in test case creation, execution, and validation of security policies. • Strong analytical, problem-solving, and documentation skills. • Excellent communication and stakeholder management skills. Preferred Qualifications • Familiarity with encryption technologies and secure data handling practices. • Knowledge of data classification, data governance frameworks, and regulatory requirements. • Exposure to cloud security and SaaS application risk management. • Experience working in a regulated enterprise environment such as financial services. Key Competencies • Requirement Analysis & Documentation • Data Protection & Security Awareness • Testing & Validation Expertise • Stakeholder Collaboration • Risk and Compliance Mindset P3 Role Expectations • Lead medium-to-large initiatives supporting Data Protection and Cyber Security programs. • Work independently with minimal supervision while coordinating with stakeholders. • Provide guidance and support during testing, implementation, and operational activities. • Contribute to continuous improvement, governance, and compliance efforts. Salary Range: $99,600 - 169,200 USD Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component. Work Authorization Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa). Working with Us As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve. Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities. Reasonable Accommodation Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com , or alternatively you can discuss your individual requirements with the recruiter you are working with.

Apply at Northern Trust