Principal Information Security Engineer, ITC

This role serves as a trusted security advisor to Nike technology teams and business partners. It sits primarily within the Application Security Consulting team, working with peers in Corporate Information Security and partnering with internal groups and GT domains across Nike. The position reports into the Director, Information Security Engineering Consulting, ITC.

• Serve as a trusted security advisor to Nike technology teams and business partners.
• Assess solutions and identify risks within Nike ecosystems.
• Assess controls for highly sensitive Nike data alongside various stakeholders.
• Provide critical input and guidance to ensure Nike applications, solutions, and business processes align with the Nike Information Security Program, considering key priorities, the threat landscape, and Nike's risk appetite.
• Work closely with Nike business and technical teams to produce secure solutions at the speed of business.
• Assist technology and business teams in prioritising security-related work.
• Drive reports to Nike leadership on reducing threats, risks, or challenges.
• Support and consult stakeholders across vulnerability management, cloud governance, and secure software life cycle practices.
• Conduct risk assessment and vulnerability management, policy and strategy development, security consulting, security awareness training, reporting and communication, and monitoring current security trends.
• Drive innovation across processes and day-to-day consulting tasks, and manage and educate smaller teams or junior team members.

• Bachelor's degree in Computer Science or Business Information Management, or equivalent work experience.
• 12+ years of experience in information security, training, or information technology disciplines.
• Minimum 3+ years of hands-on experience in AI security, including assessing the security posture of AI/ML systems and products, identifying risks, and recommending security improvements across relevant tools, platforms, and processes.
• Proven experience leading teams of technologists and driving innovation through the adoption and enhancement of security tools, processes, frameworks, and best practices to improve organisational security outcomes.
• Strong information security knowledge.
• Extremely strong written and verbal communication skills.
• Recognised ability to drive communications across all areas and levels of the business.
• Technical knowledge and confidence in leading communications with both highly technical and non-highly technical audiences.
• Ability to adjust communication style and approach, from strategic leadership to highly technical audiences.
• Ability to increase comprehension of complex business initiatives and inspire the use of excellent analytical and problem-solving skills across business and technology partners.
• Ability to pull a diverse group of individuals with different goals together and inspire productive discussions that drive alignment and deliver strategic results.
• Analytical and problem-solving skills, including excellent abilities, with the ability to assist and drive others to identify solutions for complex problems.
• Ability to establish cross-functional personal networks within Nike.
• Ability to enhance others' understanding of various information security standards, regulations, and protocols.
• Drives strategic utilisation of cloud security.

• Security certifications such as CISSP, CSSLP, CCSP, CISM, or CRISC are preferred; equivalent knowledge will be considered.