Description

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world's most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.

The function of the Sr Director, Authentication (IAA) and Client Identity and Access Management (CIAM) role will be to define and implement a management framework for the enterprise authentication and authorization security systems of Northern Trust as well as all client identity systems and lifecycle management. The role will report to the Global Head of Identity and Access Management (IAM), ensuring formulation and execution of strategic roadmaps related to 1st line of defense IAM governance practices. The role will also be responsible for Workforce and client governance policies, standards and control adherence and serve as principal partner in strengthening and maintaining productive alliances with 2nd and 3rd line of defense challenge teams. Additionally, this position will manage a team that will align with business, technology, information security and other corporate teams to establish and strengthen adoption of identity practices, standards and controls. As a primary IAM and CIAM leader, the selected candidate will partner with enterprise architecture, engineering, operations and program teams to ensure that the IAA and CIAM strategies and roadmaps are in alignment with other IAM capabilities and towers of work.

MAJOR DUTIES

• Oversee Design and implement the strategic technology and operational objectives for the Access Management and CIAM towers of the Northern Trust (NT) IAM Organization
• Serve as a people manager for the IAA & CIAM functions, aligning its capabilities to business technology team and department future objectives
• Represent the IAM organization's client identity lifecycle, workforce and client authentication, and workforce and client authorization capabilities and provides guidance to the business units as well as to technology, risk and audit teams
• Own the IAA and CIAM least privilege principles as well as practices associated with overall authentication and authorization.
• Lead Authentication & Authorization for the workforce, clients and the cloud(s); partnership with IAM Architecture, Engineering and Operations
• Lead enforcement of IAA & CIAM standards development, best practices and controls across NT, whether applications and platforms are centrally or decentralized managed
• Lead client identity, authentication and authorization metrics and analytics collection and reporting to all levels of NT leadership
• Partner with business aligned technology teams to onboard all business critical applications and platforms to the IAM IAA & CIAM suite of tools
• Demonstrate advanced proficiency in Okta, Azure App Gateway, Zuul Gateway, Azure CIEM, Azure Entra, Active Directory, Plain ID, Oracle Entitlement Server, Venafi, Oracle Unified Directory, LDAP, PKI, Pivotal Cloud Foundry, Spring Boot, Spring Security, TerraForm, PING Access, Ping Federate, Okta Threat Insights, Azure DevOps, SCRUM, Java Development and Architecture
• Manage major incident response procedures specific to privileged access incidents for CIAM and IAA
• Lead team responsible for continuous monitoring mechanisms for enterprise authentication and authorization
• Responsible for IAA & CIAM related communications and business aligned IAM progress reporting
• Responsible for enterprise level training of access management principles, practices, standards and controls
• Responsible for IAA & CIAM related audit and regulator responses and deliverables
• Responsible for advanced IAA and CIAM functions, including cloud based Role Based Access design, multifactor enablement, client and workforce self-service, and implementation of Oracle Unified Directory migration to Okta Unified directory, implementation of Azure based CIEM.

LEADERSHIP KNOWLEDGE / SKILLS

• Strong team management skills. Conducts performance management and career development processes, and staffing and disciplinary actions.
  • Leads resource planning and metrics
  • Develops periodic goals, organizes the work, sets short-term priorities, monitors all activities, and ensures timely and accurate completion of the work.
  • Operates independently; has in-depth knowledge of business unit / function
  • As an IAM subject area expert, provides comprehensive, in-depth consulting and leadership to team and partners at a high technical level
  • Carries out activities that are large in scope, cross-functional and technically difficult
  • Role is balanced between high level operational execution and development, and execution of strategic direction of business function activities
  • Responsible for direct interaction with different committees and/or management
  • Strategic in developing, implementing and administering programs within functional areas
• Manages the offshore development and onshore support functions for IAM platforms and applications

QUALIFICATIONS

• Broad understanding of identity and access management, with expert knowledge in Client based authentication and authorization as well as certificate management, PKI, workforce authentication and authorization, cloud identity entitlement management, API security, and OWASP protections
• Understanding of identity related regulatory requirements for all global regions
• Strong aptitude to develop and maintain internal and external business relationships and to leverage those relationships in pursuit of day-to-day goals and responsibilities
• Excellent consultative skills
• Excellent oral and written communication skills are required
• In-depth Functional / Industry Knowledge is required
• Knowledge of information security, network management, operating systems, software development, database systems and information technology concepts needed to effectively manage the group
• Analytical and problem solving skills are required
• Leadership and organizational skills are required to develop periodic goals and to manage and motivate team members towards the goals set
• A College or University degree and/or relevant proven work experience is required
• 20+ years in Financial Services organizations preferred

Salary Range:
$195,415 - 342,095 USD

Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.

Working with Us:

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.

Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.

We'd love to learn more about how your interests and experience could be a fit with one of the world's most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater

Reasonable accommodation

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com .

We hope you're excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.

Apply today and talk to us about your flexible working requirements and together we can achieve greater.