Principal Information Security Engineer, ITC

WHO YOU’LL WORK WITH

Candidate will primarily be part of Application Security Consulting team and work with your peers in Corporate Information Security and partner with internal groups, GT domains  across Nike, reporting into Director, Information Security Engineering Consulting, ITC. 

WHO WE ARE LOOKING FOR

We’re looking for an Principal Application Security Consultant. This role will serve as a trusted security advisor to Nike technology teams and business partners. Provide critical input and guidance to key partners to ensure that Nike applications, solutions and business processes are aligned with Nike Information Security Program.  The focus areas for this role are Risk Reduction, Information Security by Design. The scope of work may involve Application Security, Cloud Security, Consumer and Business to Business Security.

The candidate needs to have strong Information Security knowledge, extremely strong written and verbal communication skills and be recognized for ability to drive communications across all areas and levels of the business. They should also be able to increase comprehension of complex business initiatives, inspiring the use of excellent analytical and problem-solving skills across the business and technology partners.  We are seeking a motivated self-starter who is has a track record of leading ownership of information security challenges and driving them to resolution.

•Bachelor's degree in Computer Science or Business Information Management or equivalent work experience

• 12+ years of experience in information security, training, or information technology disciplines.

• Minimum 3+ years of hands-on experience in AI security, including assessing the security posture of AI/ML systems and products, identifying risks, and recommending security improvements across relevant tools, platforms, and processes.

• Proven experience leading teams of technologists and driving innovation through the adoption and enhancement of security tools, processes, frameworks, and best practices to improve organizational security outcomes.

• Technical knowledge and confidence in leading communications with both highly technical audiences and non-highly technical audiences

• Ability to adjust communication style and approach, from strategic leadership to highly technical audiences

• Ability to pull a diverse group of individuals with different goals together and inspire productive discussions inspiring alignment, to deliver strategic results

• Analytical and problem-solving skills; assisting and driving others to identify solutions for complex problems

• Ability to establish cross functional personal networks within Nike

• Ability to enhance other’s understanding of various information security standards, regulations, and protocols

• Drives strategic utilization of Cloud Security. 

• Excellent analytical and problem-solving abilities

• Adaptability to evolving threats in the fast-paced cybersecurity landscape.

• Security certifications like CISSP, CSSLP, CCSP, CISM , CRISC are preferred but equivalent knowledge will be considered.

WHAT YOU’LL WORK ON

If this is you, you’ll be working with the Application Security Consulting team to perform these key tasks:

• Assessment of solutions and Identification of risks within the Nike eco-systems

• Assessing controls for highly sensitive Nike data along with various stake holders

• Providing critical input and guidance which aligns to Nike Information Security standards when considering key priorities, the threat landscape, and risk appetite of Nike, Inc.

• Working closely with Nike Business and Technical teams to produce secure solutions at the speed of business

• Assisting technology and business teams to prioritize security related work

• Driving reports on reducing threats, risks, or any challenges to Nike Leadership

• Support and consult various stakeholders across Vulnerability Management, Cloud Goverenance, and Secure software life cycle practices. 

• Risk Assessment & Vulnerability Management,Policy & Strategy Development, Security consulting, Security Awareness Training, Reporting & Communication and Current security trends

• Drive Innovation across processes and day-to-day consultant tasks listed above.

• Manage and educate smaller teams / or junior team members