IT Security Engineer Jobs in Illinois
IT Security Engineer jobs in Illinois are in strong and consistent demand, concentrated in financial services, healthcare, insurance, and enterprise technology firms, with openings at every level from entry-level analyst track to senior architect. Chicago anchors the market as one of the most active hiring metros in the country for this role, with Naperville and Schaumburg adding significant suburban volume through large corporate campuses. Well-established employers such as Allstate, Discover Financial Services, and Rush University Medical Center maintain ongoing security engineering teams across Illinois. Compliance-driven security, cloud security architecture, and identity and access management are among the most consistently requested specialties. Find a role that fits below and apply directly.
Find IT Security Engineer JobsOverview
Showing 4 of 9+ IT Security Engineer jobs
Job Summary
This position supports SAP Security, Access Management, and IT General Controls on SAP S/4HANA. The role executes SAP-specific ITGCs, ensuring monthly and quarterly controls are performed accurately, on time, and with the evidence required to withstand internal and external audit scrutiny. As a functional expert in the domain, the Sr. Analyst partners with analysts and vendor partners and supports the maturation of the controls program as it expands to other SAP products.
Essential Duties and Responsibilities
SAP Security & Access Management
- Manage SAP role design, provisioning, and de-provisioning aligned to business roles and least-privilege principles.
- Design and maintain the SoD ruleset within our current toolset (e.g., Fastpath); own SoD analysis, mitigation, and remediation across SAP applications.
- Own Firefighter (Emergency Access) governance — request, approval, monitoring, and log review.
- Support integration of SAP security events with the enterprise SIEM.
SAP ITGC Ownership and Execution
- Serve as the control owner and executor for SAP-specific ITGCs, including quarterly User Access Review, monthly Termination Review, monthly Privileged User Access Monitoring, monthly Firefighter Log Review, monthly Critical/Administrative Access Review, quarterly SAP Standard Accounts Review, quarterly Role Review, quarterly Audit Log Review, and quarterly Client Open Changes Review.
- Ensure control execution is timely, within the correct review period, with proper reviewer approval, evidence retention, and documentation to support audit and SOX requirements.
- Maintain and improve control templates to ensure accuracy of formulas, scoping, and reviewer instructions; standardize and version-control templates across execution cycles.
- Track and remediate SOX/ITGC findings from internal and external audit; ensure remediation is systemic rather than reactive.
- Partner with Internal Audit and external auditors on requests, walkthroughs, IPE (Information Produced by the Entity) validation, and evidence review.
- Support the expansion of controls coverage to other SAP products (e.g., SAP Ariba, SuccessFactors) as they come into audit scope over time.
Collaboration and Delivery
- Direct and validate work performed by external AMS partners, ensuring quality and alignment with the broader SAP architecture.
- Collaborate with business stakeholders, cross-functional teams, and vendors to ensure successful project delivery and ongoing system support.
Minimum Qualifications
- 7+ years of hands-on SAP Security experience with strong SAP role design, provisioning, and access-management depth.
- Experience with SAP GRC (Access Control 12.0) is a strong plus.
- Demonstrated hands-on experience owning and executing SAP-specific ITGCs at the control-owner level — not just supporting audit teams. Direct experience with User Access Reviews, Termination Reviews, Firefighter Log Reviews, Change Management, and Audit Log Reviews required.
- Track record of remediating SOX/ITGC audit findings systemically — closing recurring issues rather than patching them each cycle.
- Experience with control evidence retention, IPE validation, reviewer sign-off standards, and defending controls in front of external auditors.
- Working knowledge of Fastpath (preferred) or comparable tools such as CSI, Pathlock for automated control monitoring, access reviews, and SoD analysis.
- Experience with controls execution for other SAP products such as SAP Ariba and SuccessFactors is a huge plus — these products will be added to the control scope over time.
- Demonstrated ability to lead — mentoring junior team members, setting standards, and directing internal and external contributors on security and controls work.
- Strong communication, stakeholder management, and change management skills; ability to lead through influence across all organizational levels.
Preferred Qualifications
Physical and Mental Demands
While performing the duties of this job, the employee is frequently required to remain in a stationary position, move and/or position oneself, communicate, operate and/or prepare, place, position objects, tools, or controls. The employee must occasionally move packages weighing up to 10 lb. Specific vision abilities required by this job include close observation and the ability to adjust focus. The mental and physical requirements described here are representative of those that must be met by an individual, with or without reasonable accommodation, to successfully perform the essential functions of this position.
Working Environment
Work is performed in an office environment. The noise level in the work environment is usually moderate. The work environment characteristics described here are representative of those an individual encounters while performing the essential functions of this position.
Job Summary
This position supports SAP Security, Access Management, and IT General Controls on SAP S/4HANA. The role executes SAP-specific ITGCs, ensuring monthly and quarterly controls are performed accurately, on time, and with the evidence required to withstand internal and external audit scrutiny. As a functional expert in the domain, the Sr. Analyst partners with analysts and vendor partners and supports the maturation of the controls program as it expands to other SAP products.
Essential Duties and Responsibilities
SAP Security & Access Management
- Manage SAP role design, provisioning, and de-provisioning aligned to business roles and least-privilege principles.
- Design and maintain the SoD ruleset within our current toolset (e.g., Fastpath); own SoD analysis, mitigation, and remediation across SAP applications.
- Own Firefighter (Emergency Access) governance — request, approval, monitoring, and log review.
- Support integration of SAP security events with the enterprise SIEM.
SAP ITGC Ownership and Execution
- Serve as the control owner and executor for SAP-specific ITGCs, including quarterly User Access Review, monthly Termination Review, monthly Privileged User Access Monitoring, monthly Firefighter Log Review, monthly Critical/Administrative Access Review, quarterly SAP Standard Accounts Review, quarterly Role Review, quarterly Audit Log Review, and quarterly Client Open Changes Review.
- Ensure control execution is timely, within the correct review period, with proper reviewer approval, evidence retention, and documentation to support audit and SOX requirements.
- Maintain and improve control templates to ensure accuracy of formulas, scoping, and reviewer instructions; standardize and version-control templates across execution cycles.
- Track and remediate SOX/ITGC findings from internal and external audit; ensure remediation is systemic rather than reactive.
- Partner with Internal Audit and external auditors on requests, walkthroughs, IPE (Information Produced by the Entity) validation, and evidence review.
- Support the expansion of controls coverage to other SAP products (e.g., SAP Ariba, SuccessFactors) as they come into audit scope over time.
Collaboration and Delivery
- Direct and validate work performed by external AMS partners, ensuring quality and alignment with the broader SAP architecture.
- Collaborate with business stakeholders, cross-functional teams, and vendors to ensure successful project delivery and ongoing system support.
Minimum Qualifications
- 7+ years of hands-on SAP Security experience with strong SAP role design, provisioning, and access-management depth.
- Experience with SAP GRC (Access Control 12.0) is a strong plus.
- Demonstrated hands-on experience owning and executing SAP-specific ITGCs at the control-owner level — not just supporting audit teams. Direct experience with User Access Reviews, Termination Reviews, Firefighter Log Reviews, Change Management, and Audit Log Reviews required.
- Track record of remediating SOX/ITGC audit findings systemically — closing recurring issues rather than patching them each cycle.
- Experience with control evidence retention, IPE validation, reviewer sign-off standards, and defending controls in front of external auditors.
- Working knowledge of Fastpath (preferred) or comparable tools such as CSI, Pathlock for automated control monitoring, access reviews, and SoD analysis.
- Experience with controls execution for other SAP products such as SAP Ariba and SuccessFactors is a huge plus — these products will be added to the control scope over time.
- Demonstrated ability to lead — mentoring junior team members, setting standards, and directing internal and external contributors on security and controls work.
- Strong communication, stakeholder management, and change management skills; ability to lead through influence across all organizational levels.
Preferred Qualifications
Physical and Mental Demands
While performing the duties of this job, the employee is frequently required to remain in a stationary position, move and/or position oneself, communicate, operate and/or prepare, place, position objects, tools, or controls. The employee must occasionally move packages weighing up to 10 lb. Specific vision abilities required by this job include close observation and the ability to adjust focus. The mental and physical requirements described here are representative of those that must be met by an individual, with or without reasonable accommodation, to successfully perform the essential functions of this position.
Working Environment
Work is performed in an office environment. The noise level in the work environment is usually moderate. The work environment characteristics described here are representative of those an individual encounters while performing the essential functions of this position.
See All 9 IT Security Engineer Jobs in Illinois
Find roles in Illinois that match your experience and apply in just a few clicks.
Find IT Security Engineer JobsIT Security Engineer Jobs by City in Illinois
Where Illinois roles are concentrated, by current openings.
IT Security Engineer Job Market in Illinois
A snapshot from current Illinois openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Healthcare & Medical Services
What Illinois Employers Look For
The qualifications that appear most often in IT security engineer jobs across Illinois.
- Bachelor's degree in computer science, information security, or a closely related field
- Certified Information Systems Security Professional (CISSP) or CompTIA Security+ certification strongly preferred
- Hands-on experience with SIEM platforms, endpoint detection, and network security tooling
- Proficiency in cloud security across AWS, Azure, or Google Cloud environments
- Working knowledge of regulatory frameworks including HIPAA, PCI-DSS, and NIST
- Ability to hold or obtain clearance where financial or healthcare data environments require it
IT Security Engineer Jobs in Illinois: Frequently Asked Questions
How do you become a it security engineer in Illinois?
Illinois does not issue a state license specific to it security engineers, so entry into the field runs through education and industry credentials. Most Illinois employers require at minimum a bachelor's degree in computer science, information systems, or cybersecurity. From there, earning a vendor-neutral certification such as CompTIA Security+ or a professional designation such as CISSP substantially improves candidacy. Chicago's concentration of financial services and healthcare employers means familiarity with compliance frameworks like NIST and HIPAA is treated as a baseline expectation rather than a bonus.
How much do IT security engineers make in Illinois?
IT security engineers in Illinois earn a median of about $124,180 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $78,760 for the lowest 10% to over $172,830 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire it security engineers in Illinois?
Employers hiring it security engineers in Illinois right now include Endeavor Health, Boler, and Verano, based on current listings on Migrate Mate as of September 2026. Illinois's mix of Fortune 500 headquarters, large health systems, and major insurers means demand is distributed across multiple industries rather than concentrated in a single sector.
Which Illinois cities have the most it security engineer jobs?
Chicago, Itasca, and Skokie account for the most it security engineer openings in Illinois. Chicago drives the largest share through its dense concentration of financial institutions, consulting firms, and health systems, while Naperville and Schaumburg pull in significant volume from the corporate campus corridor along the I-88 and I-90 corridors, where major technology and insurance operations are headquartered.
Are there remote it security engineer jobs in Illinois?
Yes, and more than most fields. About 80% of it security engineer openings tied to Illinois are remote or hybrid as of September 2026, reflecting how much of the role centers on monitoring dashboards, policy configuration, and cloud-based tooling that travels well. Roles focused on threat analysis, security operations center work, and cloud architecture tend to be the most remote-eligible, while positions requiring physical access to on-premises infrastructure or hardware remain largely on-site.
How can I get hired as a it security engineer in Illinois with little or no experience?
The most realistic entry path is a security analyst or IT support role at a large Illinois employer, then building toward the engineer title from the inside. Major health systems such as Northwestern Medicine and financial firms like Northern Trust run rotational IT programs and associate-level security operations positions that accept candidates without direct security experience. A CompTIA Security+ certification combined with a home lab portfolio or a capstone project from an accredited Illinois cybersecurity program signals hands-on ability when a resume lacks professional history. Adjacent roles in network administration, systems administration, and IT helpdesk are the most common lateral moves into security engineering.
Where can I find and apply to it security engineer jobs in Illinois?
You can find and apply to it security engineer jobs in Illinois on Migrate Mate, which lists current openings across Chicago, the suburbs, and the rest of the state. Find roles that fit your experience and apply directly from the listing.
See All 9 IT Security Engineer Jobs in Illinois
Find roles in Illinois that match your experience and apply in just a few clicks.
Find IT Security Engineer Jobs