Principal Information Security Engineer

The full Principal Information Security Engineer job description{target="_blank" rel="noopener noreferrer"} contains more information about this position. Principal Objective Supports the Company's Information Security Program by engineering, architecting, maintaining, and improving security technologies, identity and access controls, monitoring capabilities, and defensive security processes. The Principal Information Security Engineer partners with Information Technology, Identity and Access Management, Risk, Compliance, application owners, business units, and third-party service providers to protect Company systems, data, customers, and employees. Education: - Bachelor's degree in Information Security, Computer Science, Information Technology, Cybersecurity, or related field preferred. - Equivalent combination of education, technical certifications, and relevant experience may be considered. - Security certifications such as CISSP, CISM, CCSP, GIAC, Security+, Microsoft Security certifications, or related credentials preferred. Experience: - 7+ years of experience in information security, cybersecurity engineering, security operations, infrastructure security, identity security, or related technology roles. - 3+ years of experience supporting security technologies in a regulated financial institution, banking environment, or similarly regulated industry preferred. - Experience with Microsoft Entra ID, Active Directory, privileged access management, email security tools, endpoint security tools, cloud security, network security, data security, security automation, SIEM/logging. - Experience securing AI, Generative AI, Machine Learning, Agentic AI, or similar AI ecosystems. Experience implementing security controls for AI systems, including data loss prevention (DLP), access controls, encryption, prompt security, model protection, vendor security reviews, and monitoring for AI-related threats and misuse. Skills & Knowledge: - Strong understanding of information security principles, defense-in-depth, identity and access management, incident response, secure configuration, and security monitoring. - Working knowledge of banking security expectations, risk management practices, audit evidence requirements, and regulatory frameworks such as FFIEC, GLBA, NIST Cybersecurity Framework, and related industry guidance. - Strong technical troubleshooting skills with the ability to analyze security events, system behavior, logs, vulnerabilities, and control exceptions. - Ability to translate technical security issues into clear business risk language for IT, business, risk, audit, and executive stakeholders. - Strong written and verbal communication skills, including the ability to develop standards, procedures, summaries, diagrams, and control evidence. - Strong organizational skills with the ability to manage multiple priorities, document work clearly, meet deadlines, and drive issues to resolution. - High degree of professionalism, discretion, integrity, and sound judgment when handling sensitive information and security incidents. - Proficient in Microsoft Office Suite and collaboration platforms.