Network Security Manager

Verisure; Pozuelo de Alarcón; On-site; EUR 100,000 - 140,000; Full time

Job summary

Verisure Innovation in Madrid is creating a Global Network Security Services team within Information Security. You will build and lead the team with full accountability for NAC, APS/SASE, WAF and DDoS services, shaping the security roadmap and operations.

You will own strategy, vendor/budget management, SecDevOps practices and collaborate with Security Architecture, SOC and IT Operations to ensure secure, reliable connectivity and robust security posture for the organization.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems or a related discipline.
• Fluent written and verbal English.
• Strong technical expertise in NAC, SASE/ZTNA, WAF, NGFWs and DDoS protection.
• Experience in leading technical teams and managing stakeholders/budgets.

Responsibilities

• Build, lead, coach and develop the Network Security Services team, defining roles, objectives and growth paths.
• Define and own the roadmap of the network security services, aligned with Security Architecture and business objectives.
• Be accountable for architecture, engineering and day-to-day operations of NAC, APS/SASE, WAF, and DDoS services.
• Identify gaps in the network security posture and drive remediation with stakeholders.
• Collaborate with Security Architecture, SOC, IT Operations/Networking to define boundaries and processes.
• Manage technology vendors, budgets, roadmaps and evaluate new technologies including AI in security tooling.
• Define and track KPIs/KRIs and report to stakeholders; ensure compliance with policies and audits.
• Promote SecDevOps mindset: automation and infrastructure/policy as code; continuous improvement.
• Act as escalation point for network security incidents and requests.

Skills

Security leadership

NAC knowledge

SASE knowledge

WAF knowledge

DDoS protection

English communication

Education

Bachelor’s degree in Computer Science/Information Systems or related discipline

Job description

We believe that we make a difference every day. To do that, we need committed and engaged employees. Our people are accountable for delivering world-class service and they are passionate about making the world a safer and more secure place. Our teams operate with integrity and respect for one another fueled by an entrepreneurial spirit. We are building a high-performance organization through investing in our people with great development and growth opportunities.

Do you want to have an impact every day by making people safe - and bringing them peace of mind? Interested in being part of a dedicated, passionate team which believes that security is a human right? Looking to join a company where innovation and technology are at the heart of its solutions?

What We Look For

A security leader with a strong technical background and an ownership mindset, able to build and run a team, influence stakeholders at all levels and prioritize in a dynamic environment. An effective communicator and confident team player with a genuine passion to make things happen. If you are ready to take on a wide range of responsibilities and are committed to seeking out new ways to make a difference, this role is for you.

Job Purpose

We are creating a new global team, Network Security Services, within Information Security, and we are looking for its Manager, based in Madrid (Spain) and reporting to the InfoSec South-Platform Manager. You will build and lead the team, with full accountability for the roadmap, architecture, engineering and operations of the technologies that protect our corporate networks from unauthorized access and disruption, enabling reliable connectivity for the business to operate.

You will own the Network Access Control, secure access (APS/SASE), Web Application Firewall, and DDoS protection services, making sure we have a global network strategy, a consistent set of firewall rules and a global DDoS strategy that protect our services. You will identify gaps against the target security architecture and manage stakeholders across Technology, IT Operations and the business units to close them. The strategy of the team is driven by Security Architecture.

Scope of the team

In scope

• Network Access Control: Ensure only allowed devices connect to the corporate network (NAC).
• Secure access (APS/SASE): Secure access for users and sites through our APS/SASE platform.
• WAF: Ensure web applications are securely protected from threats while maintaining availability and a seamless user experience.
• Product ownership: Full accountability for current and new products in these areas: roadmap, architecture, engineering and operations.
• Firewall Defense: Ensure IT-managed firewalls are configured according to the security architecture and policies, identifying gaps and working with IT to remediate them..
• DDoS: Ensure a global DDoS strategy that protects our services.

Out of scope (owned by IT)

• Routing and switching level; firewalls at operation level; load balancers; DNS; IAM of the tools managed by IT.

Current technologies include Forescout (NAC), Prisma Access (APS/SASE), Imperva (WAF) and Palo Alto and Fortinet (firewalls).

Main Responsibilities

• Build, lead, coach and develop the Network Security Services team (security engineers and operations), defining roles, objectives and a growth path for each member.
• Define and own the roadmap of the network security services, aligned with the Security Architecture strategy and the business objectives.
• Be accountable for the architecture, engineering and day-to-day operations of NAC, APS/SASE, WAF, and DDoS services, ensuring availability, performance and security posture.
• Identify gaps in the current network security posture, prioritize them by risk and drive remediation plans with the relevant stakeholders.
• Work closely with Security Architecture & Engineering, the Regional InfoSec team, Detection & Response (SOC) and IT Operations / Networking to define clear boundaries, interfaces and shared processes.
• Manage technology vendors and partners (contracts, SLAs, renewals, roadmaps, budget) and evaluate new technologies, including the use of AI agents in security tooling.
• Define and track KPIs and KRIs of the services and report on them to different levels and stakeholders.
• Ensure compliance of the services with security policies, standards and regulations, and support internal, external and third-party audits by providing evidence and following up on findings.
• Promote a SecDevOps mindset: automation, infrastructure/policy as code and continuous improvement of the capabilities of the team.
• Act as escalation point for network security incidents and requests, working with all InfoSec Group functions to remediate and solve.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems or a related discipline.
• At least 8 years of experience in network security engineering and/or operations, including at least 3 years leading technical teams or services.
• Strong technical expertise in at least two of the following: NAC (Forescout or similar), SASE/ZTNA (Prisma Access or similar), WAF (Imperva or similar), next-generation firewalls (Palo Alto, Fortinet) and DDoS protection.
• Solid knowledge of network architecture and segmentation (routing, switching, load balancing, DNS) to work effectively with IT Networking.
• Proven experience managing stakeholders, vendors and budgets, and influencing decisions across technology and business teams.
• Experience defining roadmaps and translating architecture into delivered engineering and operations.
• Ability to define and track KPIs/KRIs and to report to different levels of the organization.
• Ability to support audits (internal, external and third-party), compile evidence and organize audit responses.
• Knowledge of relevant frameworks and regulations (NIST, ISO 27001, PCI DSS, SOC 2, GDPR, CIS, ITIL).
• Fluent written and verbal communication skills in English.
• Travel availability.

Preferred Qualifications / Personal Characteristics

• Knowledge of cloud security (AWS or Azure) and cloud network security controls.
• Experience with automation and infrastructure as code (SecDevOps mindset) and demonstrated AI skills applied to security operations.
• Knowledge of identity and access management and its relation to network access and zero trust models.
• Professional certifications such as CISSP, CISM, CCSP or vendor certifications (Palo Alto, Fortinet, Forescout, Imperva).
• Strong ownership mindset, adaptability and a pragmatic approach developed through hard won experience working in infosec departments.

Verisure Innovation is an equal-opportunity employer and welcomes applicants from diverse backgrounds. We are an international company with offices and colleagues in multiple countries.

If you have questions regarding this position, please reach out to our Group TA Specialist, Esther Hurtado, [e-mail]

We reject all forms of discrimination and bias, and we believe in access to opportunities for everyone, regardless of gender, age, disability status, race, sexual orientation or any other status.