Lead, Network Security Analyst

Are you interested in building capabilities that enable the organization with innovation speed agility scalability and efficiency The Global Technology team takes great pride in our culture where digital transformation is built into our DNA. When you join our organization you will unlock an exciting and impactful career while growing your skills and advancing your profession at one of the worlds leading financial services institutions.

Your Team & Role

As a Lead Network Security Analyst within the Network Security Strategy & Analysis team within the ISO Infrastructure Security team you will serve as a senior individual contributor focused on assessing enterprise network security capabilities identifying risk and technical debt and developing actionable strategies for Zero Trust network segmentation network access control and network security modernization. You will partner with Network Engineering Network Security Operations Infrastructure Cloud Identity Architecture and other security teams to translate analysis into prioritized roadmaps and measurable risk reduction. You will explain difficult concepts influence stakeholders and work on extremely complex problems where analysis of situations or data requires evaluation of risk controls architecture and business impact.

This role does not own day-to-day administration or operations of network security platforms; instead this team will use analysis to drive environmental hardening and risk reduction. Success requires technical depth strategic thinking strong analytical judgment and the ability to lead work through influence across multiple teams.

Here Is What You Can Expect on a Typical Day

• Lead complex current-state analysis/assessments of network security architecture controls processes and technical debt across campus data center cloud and remote-access environments.

• Develop strategic recommendations target-state architectures transition roadmaps and prioritized risk-reduction plans for Zero Trust networking segmentation NAC ZTNA firewall proxy and related capabilities.

• Analyze architecture configuration telemetry asset vulnerability and control data to identify material risks systemic gaps and opportunities to harden the environment.

• Functionally lead workstreams and provide technical guidance to less-experienced team members without direct people-management responsibility.

• Partner with operational and engineering teams that own the technologies to validate findings define remediation approaches establish milestones and drive agreed actions to completion.

• Participate in security architecture and design reviews documenting requirements assumptions risks compensating controls and recommended decisions.

• Contribute to reusable reference architectures security patterns engineering requirements decision frameworks and assessment methods aligned to enterprise standards.

• Communicate complex network security risks and tradeoffs to technical teams business stakeholders and senior leaders using concise evidence-based recommendations.

• Define outcome-oriented metrics and contribute to executive reporting that demonstrates risk reduction control maturity roadmap progress and technical-debt retirement.

• Evaluate emerging technologies and industry practices and recommend where they should influence the network security strategy.

• Be the network security subject matter expert within the ISO Infrastructure Security Team.

The Skills & Expertise You Bring

• Bachelor of Computer Science Engineering Information Technology Cybersecurity or equivalent experience in related fields.

• Advanced network security engineering architecture advisory or strategy experience in a large and complex enterprise environment.

• Ability to independently structure ambiguous problems develop analysis plans evaluate alternatives and deliver clear recommendations with minimal guidance.

• Ability to functionally lead complex work mentor others and effectively leverage diverse ideas experiences and perspectives.

• Strong business insight and the ability to balance security risk operational feasibility customer impact cost and delivery constraints.

• Experience with agile delivery or program-management methods and cross-functional execution.

• Excellent problem solving written communication executive presentation facilitation and collaboration skills.

Advanced Experience and/or Expertise with Several of the Following

• Enterprise network architecture and security controls across campus branch data center cloud internet edge and remote-access environments.

• Firewalls secure web gateways proxies ZTNA VPN DNS security WAF load balancers and network detection capabilities including platforms such as Check Point Cisco and Zscaler.

• Zero Trust principles NIST SP 800-207 identity-aware access least privilege continuous verification and policy-based access models.

• Network segmentation and microsegmentation strategies trust-zone design application dependency analysis and east-west traffic controls.

• NAC strategy and design including device discovery profiling authentication authorization 802.1X exception handling and phased enterprise adoption.

• Security architecture reviews threat modeling risk assessments control design compensating controls and remediation planning.

• Information Security policies standards procedures engineering specifications NIST frameworks ISO 27000 standards NIST 800-53 and CIS Controls.

• Security analytics using SIEM network telemetry configuration data asset inventories vulnerability data and CMDB/IPAM sources to identify and quantify risk.

• Metrics KRIs KPIs maturity assessments business cases and multi-year security roadmaps.

Preferred Qualifications

• CISSP CCSP CISM SANS GIAC or comparable security certification.

• Advanced network or security certifications from Cisco Check Point Zscaler GIAC or equivalent providers.

• Experience driving large-scale Zero Trust segmentation NAC firewall modernization or ZTNA transformation programs.