Principal Information Security Engineer, ITC

About the role

Nike is hiring a Principal Information Security Engineer (Application Security Consulting) for its ITC unit. The candidate joins the Application Security Consulting team, works with peers in Corporate Information Security and partners with internal groups and GT domains across Nike, reporting to the Director, Information Security Engineering Consulting, ITC. The role advises technology teams and business partners so that applications, solutions and business processes follow the Nike Information Security Program, with a focus on risk reduction and information security by design.

Key responsibilities

• Assess solutions and identify risks within the Nike ecosystem, and assess controls for highly sensitive Nike data with stakeholders
• Provide guidance that aligns with Nike Information Security standards, considering priorities, the threat landscape and risk appetite
• Work with business and technical teams to build secure solutions at the speed of business and help them prioritize security work
• Drive reports on threats, risks and challenges to Nike leadership
• Support and advise on vulnerability management, cloud governance, secure software lifecycle, policy and strategy, security awareness training, reporting and communication
• Manage and educate smaller teams or junior team members

Required profile

• Bachelor's degree in Computer Science or Business Information Management, or equivalent experience
• 12+ years of experience in information security, training or information technology
• 3+ years of hands-on AI security, including assessing the security posture of AI/ML systems and recommending improvements
• Proven experience leading teams of technologists and driving innovation through security tools, processes and best practices
• Track record of owning information security challenges and driving them to resolution

Required skills

• Strong information security knowledge and ability to communicate with both technical and non-technical audiences
• Analytical and problem-solving skills, with adaptability to evolving threats
• Preferred certifications: CISSP, CSSLP, CCSP, CISM, CRISC (equivalent knowledge considered)