Network Security Manager

Network Security Manager

We believe that we make a difference every day. To do that, we need committed and engaged employees. Our people are accountable for delivering world-class service and they are passionate about making the world a safer and more secure place. Our teams operate with integrity and respect for one another fueled by an entrepreneurial spirit. We are building a high-performance organization through investing in our people with great development and growth opportunities.

Do you want to have an impact every day by making people safe - and bringing them peace of mind? Interested in being part of a dedicated, passionate team which believes that security is a human right? Looking to join a company where innovation and technology are at the heart of its solutions?

What we look for

A security leader with a strong technical background and an ownership mindset, able to build and run a team, influence stakeholders at all levels and prioritize in a dynamic environment. An effective communicator and confident team player with a genuine passion to make things happen. If you are ready to take on a wide range of responsibilities and are committed to seeking out new ways to make a difference, this role is for you.

Job purpose

We are creating a new global team, Network Security Services, within Information Security, and we are looking for its Manager, based in Madrid (Spain) and reporting to the InfoSec South-Platform Manager. You will build and lead the team, with full accountability for the roadmap, architecture, engineering and operations of the technologies that protect our corporate networks from unauthorized access and disruption, enabling reliable connectivity for the business to operate.

You will own the Network Access Control, secure access (APS/SASE), Web Application Firewall, and DDoS protection services, making sure we have a global network strategy, a consistent set of firewall rules and a global DDoS strategy that protect our services. You will identify gaps against the target security architecture and manage stakeholders across Technology, IT Operations and the business units to close them. The strategy of the team is driven by Security Architecture.

Scope of the team

In scope

- Network Access Control: Ensure only allowed devices connect to the corporate network (NAC).

- Secure access (APS/SASE): Secure access for users and sites through our APS/SASE platform.

- WAF: Ensure web applications are securely protected from threats while maintaining availability and a seamless user experience.

- Product ownership: Full accountability for current and new products in these areas: roadmap, architecture, engineering and operations.

- Firewall Defense: Ensure IT-managed firewalls are configured according to the security architecture and policies, identifying gaps and working with IT to remediate them..

- DDoS: Ensure a global DDoS strategy that protects our services.

Out of scope (owned by IT)

- Routing and switching level; firewalls at operation level; load balancers; DNS; IAM of the tools managed by IT.

Current technologies include Forescout (NAC), Prisma Access (APS/SASE), Imperva (WAF) and Palo Alto and Fortinet (firewalls).

Main Responsibilities

- Build, lead, coach and develop the Network Security Services team (security engineers and operations), defining roles, objectives and a growth path for each member.

- Define and own the roadmap of the network security services, aligned with the Security Architecture strategy and the business objectives.

- Be accountable for the architecture, engineering and day-to-day operations of NAC, APS/SASE, WAF,  and DDoS services, ensuring availability, performance and security posture.

- Identify gaps in the current network security posture, prioritize them by risk and drive remediation plans with the relevant stakeholders.

- Work closely with Security Architecture & Engineering, the Regional InfoSec team, Detection & Response (SOC) and IT Operations / Networking to define clear boundaries, interfaces and shared processes.

- Manage technology vendors and partners (contracts, SLAs, renewals, roadmaps, budget) and evaluate new technologies, including the use of AI agents in security tooling.

- Define and track KPIs and KRIs of the services and report on them to different levels and stakeholders.

- Ensure compliance of the services with security policies, standards and regulations, and support internal, external and third-party audits by providing evidence and following up on findings.

- Promote a SecDevOps mindset: automation, infrastructure/policy as code and continuous improvement of the capabilities of the team.

- Act as escalation point for network security incidents and requests, working with all InfoSec Group functions to remediate and solve.

Required Qualifications

Minimum qualifications

- Bachelor’s degree in Computer Science, Information Systems or a related discipline.

- At least 8 years of experience in network security engineering and/or operations, including at least 3 years leading technical teams or services.

- Strong technical expertise in at least two of the following: NAC (Forescout or similar), SASE/ZTNA (Prisma Access or similar), WAF (Imperva or similar), next-generation firewalls (Palo Alto, Fortinet) and DDoS protection.

- Solid knowledge of network architecture and segmentation (routing, switching, load balancing, DNS) to work effectively with IT Networking.

- Proven experience managing stakeholders, vendors and budgets, and influencing decisions across technology and business teams.

- Experience defining roadmaps and translating architecture into delivered engineering and operations.

- Ability to define and track KPIs/KRIs and to report to different levels of the organization.

- Ability to support audits (internal, external and third-party), compile evidence and organize audit responses.

- Knowledge of relevant frameworks and regulations (NIST, ISO 27001, PCI DSS, SOC 2, GDPR, CIS, ITIL).

- Fluent written and verbal communication skills in English.

- Travel availability.

Preferred qualifications / Personal Characteristics

- Knowledge of cloud security (AWS or Azure) and cloud network security controls.

- Experience with automation and infrastructure as code (SecDevOps mindset) and demonstrated AI skills applied to security operations.

- Knowledge of identity and access management and its relation to network access and zero trust models.

- Professional certifications such as CISSP, CISM, CCSP or vendor certifications (Palo Alto, Fortinet, Forescout, Imperva).

- Strong ownership mindset, adaptability and a pragmatic approach developed through hard won experience working in infosec departments.