Principal Information Security Engineer

We're looking for a Principal Application Security Consultant. This role will serve as a trusted security advisor to Nike technology teams and business partners. Provide critical input and guidance to key partners to ensure that Nike applications, solutions and business processes are aligned with the Nike Information Security Program. The focus areas for this role are Risk Reduction and Information Security by Design. The scope of work may involve Application Security, Cloud Security, Consumer and Business-to-Business Security.

The candidate needs to have strong Information Security knowledge, extremely strong written and verbal communication skills and be recognised for the ability to drive communications across all areas and levels of the business. They should also be able to increase comprehension of complex business initiatives, inspiring the use of excellent analytical and problem-solving skills across the business and technology partners. We are seeking a motivated self-starter who has a track record of leading ownership of information security challenges and driving them to resolution.

Responsibilities:

• Assessment of solutions and Identification of risks within the Nike ecosystems.
• Assessing controls for highly sensitive Nike data along with various stakeholders.
• Providing critical input and guidance that aligns to Nike Information Security standards when considering key priorities, the threat landscape, and risk appetite of Nike, Inc.
• Working closely with Nike Business and Technical teams to produce secure solutions at the speed of business.
• Assisting technology and business teams to prioritise security-related work.
• Driving reports on reducing threats, risks, or any challenges to Nike Leadership.
• Support and consult various stakeholders across Vulnerability Management, Cloud Governance, and Secure software life cycle practices.
• Risk Assessment and Vulnerability Management, Policy and Strategy Development, Security consulting, Security Awareness Training, Reporting & Communication and Current security trends.
• Drive Innovation across processes and day-to-day consultant tasks listed above.
• Manage and educate smaller teams / or junior team members.

Requirements:

• Bachelor's degree in Computer Science or Business Information Management or equivalent work experience.
• 12+ years of experience in information security, training, or information technology disciplines.
• Minimum 3+ years of hands-on experience in AI security, including assessing the security posture of AI/ML systems and products, identifying risks, and recommending security improvements across relevant tools, platforms, and processes.
• Proven experience leading teams of technologists and driving innovation through the adoption and enhancement of security tools, processes, frameworks, and best practices to improve organizational security outcomes.
• Technical knowledge and confidence in leading communications with both highly technical audiences and non-highly technical audiences.
• Ability to adjust communication style and approach, from strategic leadership to highly technical audiences.
• Ability to pull a diverse group of individuals with different goals together and inspire productive discussions, inspiring alignment, to deliver strategic results.
• Analytical and problem-solving skills; assisting and driving others to identify solutions for complex problems.
• Ability to establish cross-functional personal networks within Nike.
• Ability to enhance others' understanding of various information security standards, regulations, and protocols.
• Drives strategic utilisation of Cloud Security.
• Excellent analytical and problem-solving abilities.
• Adaptability to evolving threats in the fast-paced cybersecurity landscape.
• Security certifications like CISSP, CSSLP, CCSP, CISM, CRISC are preferred, but equivalent knowledge will be considered.