Lead Network Security Analyst

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA. When you join our organization, you will unlock an exciting and impactful career while growing your skills and advancing your profession at one of the world's leading financial services institutions.

Your Team & Role

As a Lead, Network Security Analyst within the Network Security Strategy & Analysis team, within the ISO Infrastructure Security team, you will serve as a senior individual contributor focused on assessing enterprise network security capabilities, identifying risk and technical debt, and developing actionable strategies for Zero Trust, network segmentation, network access control, and network security modernization. You will partner with Network Engineering, Network Security Operations, Infrastructure, Cloud, Identity, Architecture, and other security teams to translate analysis into prioritized roadmaps and measurable risk reduction. You will explain difficult concepts, influence stakeholders, and work on extremely complex problems where analysis of situations or data requires evaluation of risk, controls, architecture, and business impact.

This role does not own day-to-day administration or operations of network security platforms; instead, this team will use analysis to drive environmental hardening and risk reduction. Success requires technical depth, strategic thinking, strong analytical judgment, and the ability to lead work through influence across multiple teams.

Here Is What You Can Expect on a Typical Day

• Lead complex current-state analysis/assessments of network security architecture, controls, processes, and technical debt across campus, data center, cloud, and remote-access environments.

• Develop strategic recommendations, target-state architectures, transition roadmaps, and prioritized risk-reduction plans for Zero Trust networking, segmentation, NAC, ZTNA, firewall, proxy, and related capabilities.

• Analyze architecture, configuration, telemetry, asset, vulnerability, and control data to identify material risks, systemic gaps, and opportunities to harden the environment.

• Functionally lead workstreams and provide technical guidance to less-experienced team members without direct people-management responsibility.

• Partner with operational and engineering teams that own the technologies to validate findings, define remediation approaches, establish milestones, and drive agreed actions to completion.

• Participate in security architecture and design reviews, documenting requirements, assumptions, risks, compensating controls, and recommended decisions.

• Contribute to reusable reference architectures, security patterns, engineering requirements, decision frameworks, and assessment methods aligned to enterprise standards.

• Communicate complex network security risks and tradeoffs to technical teams, business stakeholders, and senior leaders using concise, evidence-based recommendations.

• Define outcome-oriented metrics and contribute to executive reporting that demonstrates risk reduction, control maturity, roadmap progress, and technical-debt retirement.

• Evaluate emerging technologies and industry practices and recommend where they should influence the network security strategy.

• Be the network security subject matter expert within the ISO Infrastructure Security Team.

The Skills & Expertise You Bring

• Bachelor of Computer Science, Engineering, Information Technology, Cybersecurity, or equivalent experience in related fields.

• Advanced network security engineering, architecture, advisory, or strategy experience in a large and complex enterprise environment.

• Ability to independently structure ambiguous problems, develop analysis plans, evaluate alternatives, and deliver clear recommendations with minimal guidance.

• Ability to functionally lead complex work, mentor others, and effectively leverage diverse ideas, experiences, and perspectives.

• Strong business insight and the ability to balance security risk, operational feasibility, customer impact, cost, and delivery constraints.

• Experience with agile delivery or program-management methods and cross-functional execution.

• Excellent problem solving, written communication, executive presentation, facilitation, and collaboration skills.

Advanced Experience and/or Expertise with Several of the Following

• Enterprise network architecture and security controls across campus, branch, data center, cloud, internet edge, and remote-access environments.

• Firewalls, secure web gateways, proxies, ZTNA, VPN, DNS security, WAF, load balancers, and network detection capabilities, including platforms such as Check Point, Cisco, and Zscaler.

• Zero Trust principles, NIST SP 800-207, identity-aware access, least privilege, continuous verification, and policy-based access models.

• Network segmentation and microsegmentation strategies, trust-zone design, application dependency analysis, and east-west traffic controls.

• NAC strategy and design, including device discovery, profiling, authentication, authorization, 802.1X, exception handling, and phased enterprise adoption.

• Security architecture reviews, threat modeling, risk assessments, control design, compensating controls, and remediation planning.

• Information Security policies, standards, procedures, engineering specifications, NIST frameworks, ISO 27000 standards, NIST 800-53, and CIS Controls.

• Security analytics using SIEM, network telemetry, configuration data, asset inventories, vulnerability data, and CMDB/IPAM sources to identify and quantify risk.

• Metrics, KRIs, KPIs, maturity assessments, business cases, and multi-year security roadmaps.

Preferred Qualifications

• CISSP, CCSP, CISM, SANS GIAC, or comparable security certification.

• Advanced network or security certifications from Cisco, Check Point, Zscaler, GIAC, or equivalent providers.

• Experience driving large-scale Zero Trust, segmentation, NAC, firewall modernization, or ZTNA transformation programs.