Sr.Manager, Information Security Engineer

Lead the engineering and lifecycle management of technical security controls that protect the Bank’s systems, identities, applications, data, cloud services, and customer-facing capabilities.

Responsibilities

• Lead the design, engineering, implementation, and lifecycle management of technical security controls across on-premises and cloud environments.
• Manage a blended team of employees and contractors, setting engineering priorities, standards, and scalable, supportable, measurable solutions.
• Align the security tool portfolio and engineering roadmap to the NIST Cybersecurity Framework (CSF), Bank policy, risk appetite, architecture standards, and regulatory expectations.
• Build and sustain a resilient defense-in-depth control environment spanning AWS, Microsoft Azure, SaaS, endpoint, network, identity, application, and data platforms.
• Translate cybersecurity risk, policy, and architecture requirements into technical controls, engineering patterns, automation, and operational guardrails.
• Increase control effectiveness, reliability, coverage, and transparency using disciplined engineering practices and outcome-oriented metrics.
• Develop security engineering talent and establish clear accountability across employees, contractors, vendors, and technology partners.
• Own the security engineering strategy, operating model, multi-year roadmap, backlog, budget inputs, workforce plan, vendor relationships, and delivery commitments.
• Balance strategic initiatives, control maintenance, technical debt, and urgent risk reduction through prioritization and governance.
• Maintain traceability from risks and requirements to control design, implementation, evidence, ownership, and measurement across the portfolio.
• Partner with Security Architecture, Security Operations, Threat and Incident Response, IAM, Security Advisory and Analytics, IT Risk and Compliance, Enterprise Architecture, Infrastructure, Cloud, Network, and Application teams.
• Support control owners and engineering teams with development, documentation, implementation, testing, and continuous improvement of technical controls (preventive, detective, responsive, recovery).
• Provide engineering leadership for security technologies including endpoint and workload protection, identity and privileged access, cloud security, network security, monitoring and logging, data protection, vulnerability management, application security, and security automation.
• Direct security engineering for AWS and Microsoft Azure, covering secure configuration baselines, native security services, identity and access controls, logging/monitoring, encryption and key management, network segmentation, and automated policy enforcement.
• Define standards for security tool selection, architecture, configuration, integration, lifecycle management, resilience, supportability, and decommissioning.
• Establish engineering quality practices such as peer review, change control, infrastructure as code, testing, documentation, release readiness, rollback planning, and operational handoff.
• Develop and maintain technical standards, baseline security configurations, reference architectures, procedures, engineering runbooks, control narratives, and evidence for governance, risk, and audit/regulatory review.
• Create metrics and dashboards for control coverage, control health/effectiveness, delivery progress, reliability, automation, technical debt, risk reduction, and service performance.
• Provide concise reporting to security and technology leadership on roadmap progress, material risks, exceptions, dependencies, resource constraints, and control performance.
• Coordinate engineering analysis for security incidents, investigations, vulnerability remediation, audit findings, risk acceptances, and penetration testing support.
• Ensure security requirements are incorporated early in technology planning and design reviews to support business objectives and customer needs.
• Provide technical escalation and decision support for complex security tooling and coordinate off-hours support when required for critical incidents or significant production changes.
• Perform other duties as assigned.

Requirements

• Bachelor’s degree in cybersecurity, information technology, engineering, computer science, or a related discipline, or equivalent relevant experience.
• Typically 8+ years of progressive experience in cybersecurity, security engineering, cloud security, infrastructure engineering, or related fields, including leadership of technical teams and complex initiatives.
• Experience managing a blended workforce of employees, contractors, consultants, and technology vendors.
• Hands-on or leadership experience designing, implementing, and operating security controls in AWS and Microsoft Azure environments.
• Experience aligning security capabilities/controls to NIST CSF and translating risk, policy, or regulatory requirements into implementable technical solutions.
• Experience developing security metrics, control-health reporting, executive dashboards, and evidence for risk, audit, or regulatory processes.
• Financial services or other regulated-industry experience preferred.
• Industry certification preferred: CISSP, CISM, CCSP, GIAC, AWS Security Specialty, or Microsoft cybersecurity certification.
• Strong knowledge of security architecture and engineering principles, including defense in depth, zero trust, cloud shared-responsibility, secure configuration, and secure system lifecycle practices.
• Working knowledge of AWS/Azure security services, cloud identity, workload protection, logging, monitoring, encryption and key/secrets management, network security, and policy automation.
• Familiarity with security platforms/capabilities: SIEM, EDR/XDR, CSPM/CNAPP, vulnerability management, PAM, IAM, DLP, CASB/SSE, WAF, email security, certificate management, secrets management, SAST/DAST/SCA, and breach-and-attack simulation.
• Ability to evaluate technical control design/effectiveness, identify root causes and dependencies, and build remediation roadmaps.
• Ability to develop measures distinguishing activity, service performance, control coverage, control health, risk exposure, and business outcomes.
• Automation and scripting experience; preferred exposure to APIs, infrastructure as code, CI/CD pipelines, and DevSecOps practices.
• Strong program, portfolio, vendor, financial, and workforce management skills.
• Excellent communication skills across written/verbal/presentation/visualization, plus negotiation and stakeholder management.
• Sound judgment, attention to detail, personal accountability, and ability to lead through ambiguity, competing priorities, incidents, and change.

Technologies

• NIST Cybersecurity Framework (CSF)
• AWS, Microsoft Azure, SaaS
• SIEM, EDR/XDR, CSPM/CNAPP
• PAM, IAM, DLP, CASB/SSE, WAF
• SAST/DAST/SCA
• DevSecOps, CI/CD pipelines, infrastructure as code
• Endpoint, network, identity, application, data, email security
• Certificate and secrets management
• Breach-and-attack simulation

Location

• Chicago, IL (hybrid)

Salary

• USD 151,025 - 265,525 per year

Benefits

• Retirement program (401k and Pension)
• Medical, dental and vision insurance
• Lifestyle Spending Account
• Competitive PTO plan
• 11 paid holidays per year
• Highly competitive compensation and bonus package
• Comprehensive benefits program