Lead, Network Security Engineering

Requisition ID: 198839

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

We are looking for a dynamic and experienced Lead Network Security Engineer to join our team. As the Lead Network Security Engineer, you will be responsible for providing technical leadership and strategic direction in the design, implementation, and management of network security solutions and platforms. You will play a pivotal role in protecting Scotiabank's network infrastructure from evolving cyber threats and ensuring the confidentiality, integrity, and availability of our systems and data.

As a Network Security Engineer under Security Engineering & Deployment, you will be responsible for working with a diverse team, leveraging industry leading technology and processes to engineer, maintain, integrate and automate security tools and infrastructure. Contribute to the overall success of the Network Security Engineering team with a global focus on Network Security supporting the achievement of the Bank's information security objectives of integrity, confidentiality/privacy, availability, and continuity.

Is the role right for you?

1. Based on industry standards and trends, define Network Security vision, strategy and operational policies. Develop and implement network security strategies and procedures to mitigate risks and enhance the overall security posture of the organization.
2. Technical ownership of Network Security Engineering initiatives from proposals to designs through to production implementation.
3. Participate in the evaluation and vendor selection process for new Network Security technologies by preparing RFPs, bid proposals, contracts, scope of work reports, and other documentation for IT projects and associated efforts.
4. Collaborate with cross-functional teams to integrate security best practices into the design and implementation of new network security technologies and initiatives.
5. Evaluate network security resiliency and performance to provide statistics reports and enhancement recommendations to executives, stakeholders and department heads.
6. Assess emerging threats and vulnerabilities and recommend proactive security measures to safeguard against potential attacks.
7. Identify technology and security gaps, develop comprehensive mitigating strategies and contingencies.
8. Collaborate with Business and other technology groups to ensure that all initiatives are appropriately assessed and reviewed in terms of risk and security compliance.
9. Leadership and technical guidance through security and threat reviews.
10. To ensure rapid recovery in the event of a disaster, the Network and Security Architect is required to coordinate the review of policies and procedures to ensure compliance with disaster recovery and contingency plans.
11. Conduct regular security assessments and audits to identify gaps in security controls and implement remediation measures as needed.
12. Research, review and actively stay informed on newly emerging technologies.
13. Serve as a subject matter expert on network security technologies, trends, and industry best practices.

Do you have the skills that will enable you to succeed in this role?

Education/Experience

1. Bachelor's degree in Computer Science, Information Technology, or related field. Advanced degree or relevant certifications (e.g., CISSP, CCNP Security, CEH) preferred.
2. 5+ years of leadership experience with demonstrated success in implementing continuous improvement and strategic initiatives.
3. 8+ years of experience in network security engineering or related role planning, designing and deploying large-scale enterprise or data-center infrastructure/technologies. With in depth knowledge of network security principles, protocols, architectures and technologies.

Professional Certification

1. Google/Azure Cloud Security Engineering, CISSP, CCSP

Technical Skills

1. In-depth working knowledge of network security principles, protocols, architectures, and technologies is essential. This includes strong working knowledge of industry leading technology providers within the below spaces: Next Generation Firewalls (NGFWs), Network Access Control (NAC), Email Security, Network Segregation and Microsegmentation, Content Delivery Network (CDN), Zero Trust Security Architecture (ZTA) and Software-Defined Perimeter (SDP), Cloud Native Security, Cloud Secure Web Gateways (SWGs), Secure Access Service Edge (SASE).
2. Familiarity with Google and Azure cloud computing platforms and understanding of cloud security best practices. Ability to implement security controls, monitor cloud environments, and address unique security challenges in the cloud.
3. Experience designing and operating secured DDoS resilient infrastructures with WAF, CDNs, SLB, security gateways and content filtering.
4. Demonstrated excellence in documenting complex enterprise level systems, processes, and proactively sharing and communicating complex technical information.
5. Excellent knowledge of information security standards and best practices.
6. Excellent knowledge in overall network security assessment, penetration testing and vulnerability management.

Abilities

1. Ability to recommend areas of operational system and process improvements.
2. Demonstrated excellence in documenting complex enterprise level systems and procedures, and proactively sharing and communicating complex technical and procedural information.
3. Sound understanding of general business conditions and practices with ability to think strategically with ability to effectively translate business requirements into effective security solutions.
4. Strong understanding of regulatory compliance requirements and industry standards related to network security (e.g., ISO 27001, NIST, PCI DSS).
5. Proficiency in conducting risk assessments, identifying vulnerabilities, and assessing the potential impact of security threats. Ability to develop risk mitigation strategies and prioritize security measures based on risk levels.
6. Ability to interact and effectively communicate technology concepts to senior business managers.

Attributes

1. Proactive and results-oriented with good time management skills, and the ability to work well under pressure and focus on multiple priorities concurrently.
2. Commitment to staying updated with the latest cybersecurity trends, technologies, and best practices. Ability to adapt to evolving security threats and technological advancements to continuously improve network security posture.
3. Excellent communication skills to convey complex technical concepts to non-technical stakeholders. Ability to engage with business leaders, IT teams, and external partners to articulate security risks, requirements, and solutions.
4. Excellent organizational, interpersonal and presentation skills.
5. Very hands-on person, who embraces new technologies and concepts.

What's in it for you?

1. Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
2. Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.
3. Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
4. Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.