Head of Cyber Data Governance & Strategy

Key Responsibilities

Cyber Data Strategy and Leadership

• Define and execute the cybersecurity data, analytics, governance, metrics, and reporting strategy and multi-year roadmap.
• Advise the CISO and Head of the Office of the CISO on data, reporting, automation, and platform strategy.
• Establish clear services, standards, controls, accountabilities, and performance measures for the function.
• Partner across Cybersecurity, Enterprise Data, Architecture, Technology, Risk, Finance, and Procurement to align priorities and represent cybersecurity in enterprise planning forums.

Cybersecurity Lakehouse & Metrics Program

• Lead the design, implementation, and operationalization of the multi-year Cybersecurity Lakehouse & Metrics Program.
• Manage the approximately $4 million investment, including roadmap, budget, resources, vendors, risks, dependencies, and benefits realization.
• Coordinate delivery across cybersecurity, technology, data, architecture, and third-party partners.
• Deliver scalable, secure, reusable capabilities and transition the program to a sustainable operating model.

Data Platform, Architecture, and Engineering

• Oversee the architecture and operation of cloud-based cybersecurity lakehouse, warehouse, storage, and analytics capabilities.
• Guide the use of platforms such as Databricks, Snowflake, Microsoft Fabric, Azure Data Lake, or comparable technologies.
• Establish reusable standards for ingestion, transformation, data modeling, data products, analytics, and AI-enabled workflows.
• Ensure platforms and pipelines are secure, resilient, scalable, observable, cost-effective, and supportable.
• Implement structured intake, prioritization, documentation, testing, reconciliation, monitoring, and production support for new data sources and use cases.

Cyber Data Governance

• Establish the cybersecurity data governance framework covering ownership, stewardship, quality, lineage, metadata, classification, access, retention, and lifecycle management.
• Define accountability for cyber data and data products across the Office of the CISO.
• Maintain an approved data and metrics catalog with definitions, calculations, sources, owners, thresholds, frequency, and lineage.
• Establish certification, quality monitoring, issue remediation, and exception-management processes for trusted data products and executive metrics.
• Lead governance forums and ensure executive and regulatory reporting is traceable to authoritative sources and approved calculations.

Executive Metrics and Reporting

• Lead centralized cyber metrics and reporting for the CISO, executives, board and management committees, risk forums, and regulators.
• Deliver Power BI and other intelligence products that translate cyber risk, control, operational, financial, workforce, vendor, and portfolio data into decision-ready insights.
• Automate data collection, validation, calculation, visualization, and commentary while maintaining review, approval, evidence, and change controls.
• Partner with Finance, Workforce Management, Procurement, Vendor Management, and Portfolio Management to align definitions and authoritative data.

Identity Intelligence, AI, and Automation

• Develop identity intelligence capabilities that combine identity, entitlement, access, asset, organizational, risk, and security data.
• Enable reusable analytics that correlate identity, vulnerability, control, finding, incident, threat, application, and business context.
• Define and prioritize AI and automation use cases across data, reporting, architecture, engineering, governance, and control workflows.
• Establish appropriate security, testing, human oversight, explainability, data quality, auditability, and change controls for AI-enabled capabilities.

Team and Operating Model Leadership

• Build and lead a multidisciplinary team spanning data architecture, engineering, governance, analytics, reporting, and automation.
• Define roles, skills, performance expectations, career paths, capacity plans, and a balanced workforce model.
• Establish a federated network of cyber data owners, subject matter experts, and liaisons accountable for requirements, quality, validation, and issue resolution.
• Manage strategic technology, consulting, and implementation partners with clear deliverables, controls, performance measures, and knowledge-transfer expectations.
• Build strong cross-functional relationships and communicate progress, risks, decisions, and outcomes to executive stakeholders.

Required Qualifications

• Bachelor's degree in Computer Science, Information Systems, Data Management, Analytics, Engineering, Cybersecurity, Business, Finance, or a related field.
• Progressive leadership experience across data strategy, governance, architecture, engineering, analytics, executive reporting, cybersecurity, or technology transformation.
• Demonstrated success leading complex, multi-year, enterprise-scale data or technology programs with significant capital investment.
• Strong program management experience, including roadmaps, budgets, resources, risks, dependencies, vendors, and executive communications.
• Experience building or operating cloud-based lakehouse, warehouse, data engineering, and analytics platforms using technologies such as Databricks, Snowflake, Microsoft Fabric, or Azure Data Lake.
• Strong knowledge of ingestion, ETL/ELT, APIs, pipelines, orchestration, modeling, metadata, lineage, data quality, monitoring, and production support.
• Experience delivering executive metrics, KPIs, KRIs, dashboards, and reporting using Power BI or comparable tools.
• Experience applying AI or automation to data, analytics, reporting, or operational workflows and leading multidisciplinary data teams.
• Strong executive presence and ability to translate complex technical, risk, operational, and financial information into clear insights and influence across organizational boundaries.

Preferred Qualifications

• Advanced degree in a related discipline.
• Experience in financial services or another highly regulated industry.
• Experience establishing a data, analytics, governance, reporting, or automation Center of Excellence.
• Knowledge of cybersecurity metrics, identity intelligence, security analytics, and frameworks such as NIST, ISO/IEC 27001, COBIT, or FAIR.
• Relevant program management, data, cloud, architecture, analytics, cybersecurity, or governance certifications.

Salary Range

$137,400 - 240,400 USD

Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.

Work Authorization

Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).

Working with Us

As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.

Philanthropy is deeply rooted in Northern Trust's history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.