Director, Network Security Team Lead

Director, Network Security Team Lead

Country: United States of America

The Network Security Team Lead role is part of the Santander US Infrastructure Security tower and the overall Information Security Operating Model. The role will report to the Santander US head of Infrastructure Security. It will be responsible for the following: 

• Overseeing all US entities and ensuring the team delivers on defined scope and capabilities of the Network Security Tower inclusive of oversight of configurations and their compliance against corporate standards of Firewalls, Proxy, Intrusion Prevention System (IPS), VPN, Web Application Firewall, and Network Access Control (NAC), for OnPrem and Cloud environments.
• Identifying gaps/risks and managing through to remediation within reasonable times.
• Maintaining and governing documents aligned with Industry best practices (including policy, standards, hardening guides). 
• Provide oversight and governance of vendors and services providers ensuring quality, compliance, and adherence to SLAs and security requirements.
• Implementing book-of-work projects and initiatives within scope, on-time, and within budget.   
• Establishing and maintaining appropriate governance forums and escalation paths.
• Utilizing/defining metrics and reporting to manage operational activities and risk.

 

Required Skills:

• 15+ years of direct Information Security and Network/Infrastructure experience.
• Expert knowledge relating to network and network security concepts, methods, tools, and architectures.
• Demonstrated experience of leadership and team management.
• Ability to work with multi-region stakeholders.
• Comfortable working with executive and technical leadership around the company to inform on cyber threats and discreetly handle sensitive matters.
• Demonstrated experience working with key Information Security frameworks including NIST CSF, NIST 800-53, CIS Critical Security Controls, COBIT, COSO and ISO standards.
• Knowledge of regulatory requirements including SOX and GLBA 501(b).
• Expertise in Identifying, monitoring, and defining the requirements of the overall security of network systems.
• Expertise in planning, engineering, and monitoring security controls for the protection of network systems. 
• Experience configuring and implementing intrusion detection/prevention systems and firewalls.
• Ability to evaluate and develop policies and standards to keep a network secure and ensure adherence to these.
• Technical expertise relating to TCP/IP protocol analysis, system hardening, networking components and infrastructure.
• Experience auditing technology systems and processes to identify risk and gaps.
• Understanding of the importance of inter-team collaboration in breaking down silos and achieving business results; ability to lead employees from various functions to communicate, coordinate work across divisions, and collaborate in solving problems as one team.
• Understanding of the importance of "big picture" thinking and planning and ability to apply organizational acumen to identify and maintain focus on key success factors for the organization.
• Show understanding of technological trends and developments in information security, risk management, web architectures, and cloud computing.
• Ability to maintain and implement best practices within Information Security
• Ability to drive execution of aggressive goals through effective planning, prioritization, resource management and follow through.
• Ability to manage multiple, ongoing initiatives.
• Demonstrated ability to frame security and risk-related concepts to both technical and nontechnical audiences.
• Understanding of web-related terminologies and software such as web applications, web related protocols, service-oriented architectures, and web services.
• Ability to partner with examiners and auditors on technology examinations gathering information and responding to findings.

Education:

• Bachelor's Degree or equivalent work experience
• Certifications: CCIE Security, CISSP, CISM (or other equivalent).

Diversity & EEO Statements: At Santander, we value and respect differences in our workforce and strive to increase the diver