Senior Network Security Engineer – Network Governance

Job Description

We are committed to ensuring the security and integrity of our infrastructure.

We are looking for a senior network security engineer to play a key role in the governance design and continuous improvement of network security controls across the enterprise.
This role sits at the intersection of security architecture policy risk management and operational oversight ensuring that network security is consistently implemented documented and aligned with regulatory and business requirements.

The position requires both deep technical expertise and the ability to operate at a governance and stakeholder level working closely with engineering teams risk management audit and architecture functions.

Key Responsibilities

Network Security Governance & Policy

• Define maintain and evolve network security policies standards and guidelines (e.g. firewalling segmentation remote access encryption traffic inspection).
• Translate security policies into clear technical requirements for network and security engineering teams.
• Ensure alignment with enterprise frameworks (e.g. NIST ISO 27001) regulatory requirements (e.g. DORA) and internal risk management processes.
• Act as a subject matter expert on network security governance during audits risk assessments and regulatory reviews.

Oversight of Network Security Controls

• Govern the lifecycle of network security controls including:
  • Firewalls (onprem cloud hybrid)
  • Network segmentation and zoning
  • Secure connectivity (VPN interconnects third parties)
• Review and approve designs changes and exceptions related to network security.
• Oversee firewall rule governance including recertification exception handling and risk-based reviews.
• Participate in governance boards and ensure network controls are followed.

Risk Management & Compliance

• Identify assess and document network-related risks ensuring appropriate mitigation plans and timelines.
• Support and contribute to:
  • Risk acceptance processes
  • Issues and remediation tracking
  • Audit evidence production
• Ensure findings from audits and assessments are translated into concrete actionable improvements.

Architecture & Engineering Collaboration

• Work closely with:
  • Network engineers
  • Cloud and platform teams
  • Security architects
• Support secure-by-design initiatives for new platforms cloud services and connectivity models.

Continuous Improvement & Automation

• Drive improvements in governance processes including:
  • Rule review automation
  • Control monitoring
  • Metrics and reporting (KPIs KRIs)
• Promote consistency reusability and documentation across network security controls.
• Contribute to simplification and standardisation of the network security landscape.

Mentoring & Leadership

• Act as a senior reference point for network security topics.
• Coach and guide junior engineers and peers on best practices.
• Influence stakeholders through expertise rather than authority.

Technical Expertise

• Strong experience in network security engineering in large complex environments.
• Deep understanding of:
  • Firewalls (NGFW cloud-native firewalls)
  • Network segmentation concepts
  • Secure network architectures (onprem cloud hybrid)
  • Virtual Networks (ACI)
• Familiarity with at least one major firewall vendor (e.g. Palo Alto Check Point Fortinet) and one network security policy management tools (Tufin or Algosec).

Governance & Risk

• Proven experience in security governance risk management or control ownership.
• Comfortable working with:
  • Policies and standards
  • Risk registers and remediation plans
  • Auditors and compliance teams
• Ability to balance security risk and business enablement.

Nice to Have

• Experience in regulated environments (financial services infrastructure critical services).
• Exposure to DORA SWIFT CSP or similar regulatory frameworks.
• Experience with cloud security platforms and network security automation tools.
• Certifications such as CISSP CCSP PCNSECCNP CCIE or equivalent.

Soft skills

• Customer service oriented.
• You are a very good communicator in English both verbal and written and able to discuss and defend the security interests with individuals and groups of IT (security) experts.
• You are a team player who communicates in an open respectful and constructive way with his customers and peers both verbally and in writing. You will take ownership and ensure that organizational quality standards are met.
• Attention to (good) time management with the right sense for prioritization.
• Reliable stress resistant and flexible.
• Pragmatic mindset: governance-focused without being bureaucratic.
• Ability to challenge designs constructively and influence decisions.

You will become part of a young dynamic and eager to learn team of engineers on IT Security. We are working with the latest technologies and a continuous mindset to improve.

Please note that this is a permanent position and we do not offer freelance/contract arrangement for the role.
#LI-AK1