Senior Lead, Security Engineering and Operations

Description

The company provides wealth management, asset servicing, asset management and banking services to individuals, families, corporations and institutions worldwide. It is listed on Nasdaq, has operated since 1889, has more than 135 years of financial experience and employs over 24,000 people.

This is a senior individual contributor role in security engineering, focused on building and running enterprise security platforms. You will combine hands-on delivery with technical ownership of capabilities that must be reliable, auditable and scalable. The work includes architecture discussions, implementation planning, operational support and deep troubleshooting, alongside engineering, infrastructure, application and risk teams.

Responsibilities

• Shape security platform engineering choices and the operational governance around them.
• Engineer and run tools covering zero-trust, SASE/SSE, network security, vulnerability and exposure management, AI guardrails and SaaS.
• Build engineering patterns, implementation standards and runbooks that teams across business units and technology can adopt consistently.
• Create maturity models and metrics to measure assurance and compliance.
• Work with engineering, infrastructure and application teams on cross-functional security projects.
• Key deliverable: design, engineer, coordinate and operate the following:
• Intrusion prevention across next-generation firewalls
• Vulnerability scanning platforms and the unified vulnerability management layer
• Enterprise SASE and SSE security platforms
• Secure web gateway, CASB and cloud access protection
• SaaS application protection and monitoring
• Secure remote access and internet traffic inspection
• Browser isolation and modern web threat prevention
• AI gateway controls that govern how users and applications use LLMs and AI services
• ServiceNow integrations for vulnerability response, ITSM and CMDB
• Drive technical outcomes for platform health, upgrades, capacity, resilience, lifecycle management and vendor escalations across the stack.
• Define and publish metrics on coverage, control effectiveness, SLA adherence, tool health, control performance and measurable risk reduction.
• Ensure controls support audits and regulatory exams (PCI-DSS, SOX, GLBA, OCC/FFIEC) with strong evidence, traceability and repeatable operation.
• Write runbooks and executive-level documentation for engineering, operations, risk and audit teams.
• Assess new capabilities, proofs of concept and tool rationalization options, recommending based on risk reduction, operational fit, cost and control outcomes.

Requirements

• Typically 12+ years in IT, cybersecurity, cloud, infrastructure, network security or platform engineering, with hands-on work on enterprise-scale security platforms.
• Able to act as a senior technical contributor, balancing security, reliability, usability and compliance while helping the team agree on technical decisions.
• Deep hands-on experience with at least one SSE or SASE platform, covering ZTNA, secure web gateway policy, segmentation, connector architecture and operating model design.
• Working knowledge of IPS and next-generation firewall platforms, including signature tuning.
• Strong networking fundamentals: TCP/IP, routing, DNS, TLS/PKI, proxies, tunneling (IPsec/GRE) and segmentation.
• Experience with vulnerability management tools.
• Familiarity with identity integration: SAML/OIDC, Entra ID and conditional access.
• Scripting and API skills in Python, PowerShell and REST/JSON.
• Experience connecting security tools with ServiceNow, SIEM platforms and enterprise reporting.
• Strong communication: documenting technical decisions, answering audit questions and working with engineering, operations, risk and audit.
• Experience in a regulated environment handling control evidence, operational resilience, risk acceptance, issue management and audit or regulatory responses.
• Exposure to AI and LLM security controls: AI gateways, prompt-injection defenses, OWASP Top 10 for LLM Applications and MITRE ATLAS.
• ServiceNow Vulnerability Response or USEM implementation experience.
• Low-code automation or Terraform/IaC.

Conditions

You must have the right to work in Ireland when you apply and for the whole of your employment.

The company is unable to provide employment permit sponsorship for this role, including Critical Skills, General Employment, Intra-Company Transfer and Stamp 1G permissions, or any other permit under Irish immigration frameworks.

Benefits

• A flexible, collaborative work culture backed by a strong record of financial strength and stability.
• Internal moves are encouraged and senior leaders are accessible.
• The company is committed to an inclusive workplace.
• Philanthropy is part of the company's history and culture, and employees give their time and skills to communities worldwide.