Principal, Security Engineering and Operations

Description

The company is a global provider of wealth management, asset servicing, asset management and banking services. It was founded in 1889, has more than 135 years of financial experience and over 24,000 partners, and serves individuals, families, corporations and institutions worldwide.

This is a senior individual contributor and technical lead role for shaping, engineering and running the company's enterprise security platforms. You will set technical direction, define engineering patterns and mentor engineers, while keeping the platforms reliable, producing strong audit evidence and following the controls a regulated financial institution requires.

The work ranges from executive-level risk discussions and architecture decisions to detailed technical troubleshooting.

Responsibilities

• Act as the technical authority on security platform engineering choices and how they are governed day to day.
• Design, build and run security tools covering zero trust, SASE/SSE, networks, vulnerability and exposure management, AI guardrails and SaaS.
• Write engineering patterns, implementation standards and runbooks so business units and technology teams apply them consistently.
• Create maturity models and metrics that show levels of assurance and compliance.
• Drive security initiatives that span engineering, infrastructure and application teams.
• Design, engineer, coordinate and operate intrusion prevention across next-generation firewalls.
• Build and run vulnerability scanning platforms and the unified vulnerability management layer.
• Own the enterprise SASE and SSE security platforms.
• Run secure web gateway, CASB and cloud access protection.
• Protect and monitor SaaS applications.
• Secure remote access and inspect internet traffic.
• Operate browser isolation and modern web threat prevention.
• Control how users and applications consume LLMs and AI services through AI gateway controls.
• Manage ServiceNow integrations for Vulnerability Response, ITSM and CMDB.
• Take technical ownership of platform health, upgrades, capacity, resilience, lifecycle management and vendor escalations across the stack.
• Define and publish metrics on coverage, control effectiveness, SLA adherence, tool health, control performance and measurable risk reduction.
• Make sure controls produce quality evidence, traceability and repeatable operation to support audits and regulatory exams (PCI-DSS, SOX, GLBA, OCC/FFIEC).
• Write runbooks and executive-level documents that engineering, operations, risk and audit teams can use.
• Evaluate new capabilities, proofs of concept and tool rationalization, and recommend options based on risk reduction, operational fit, cost and control outcomes.

Requirements

• Typically 15+ years in IT, cybersecurity, cloud, infrastructure, network security or platform engineering, with proven ownership of enterprise-scale security platforms.
• A record of leading as a senior technical lead: setting direction, influencing without direct authority, mentoring engineers and balancing security, reliability, usability and compliance.
• Deep hands-on experience with at least one SSE/SASE platform, including ZTNA, secure web gateway policy, segmentation, connector architecture and operating model design.
• Working knowledge of IPS and next-generation firewall platforms, including signature tuning.
• Strong networking fundamentals: TCP/IP, routing, DNS, TLS/PKI, proxies, tunneling (IPsec/GRE) and segmentation.
• Experience with vulnerability management tools.
• Familiarity with identity integration: SAML/OIDC, Entra ID and conditional access.
• Scripting and API skills in Python, PowerShell and REST/JSON.
• Experience connecting security tools with ServiceNow, SIEM platforms and enterprise reporting workflows.
• Strong communication: briefing senior stakeholders, documenting technical decisions, supporting audit inquiries and aligning teams you do not manage.
• Experience in a regulated environment covering control evidence, operational resilience, risk acceptance, issue management and audit and regulatory response.
• Exposure to AI and LLM security controls, such as AI gateways, prompt-injection defenses, OWASP Top 10 for LLM Applications and MITRE ATLAS.
• ServiceNow Vulnerability Response or USEM implementation experience.
• Low-code automation or Terraform/IaC.
• Prior work in financial services, banking, asset servicing, wealth management or another highly regulated industry.
• You must have the right to work in Ireland when you apply and for the whole of your employment.
• The company cannot provide employment permit sponsorship for this role. This covers Critical Skills Employment Permits, General Employment Permits, Intra-Company Transfer Employment Permits, Stamp 1G permissions and other employment permits under Irish immigration frameworks.

Conditions

The company is committed to an inclusive workplace.

Benefits

• A flexible, collaborative work culture backed by a long record of financial strength and stability.
• Internal moves are encouraged and senior leaders are accessible.
• Philanthropy is central to the company's history and culture, and employees worldwide give their time and talent to their communities.