ISO Security Specialist

About the role

The ISO Security Specialist maintains the security, integrity, availability, and compliance of Popular's network security environment across on‑premises and cloud platforms. This hybrid position blends hands‑on security operations with governance, risk management, and audit readiness.

Key responsibilities

• Manage and govern network security technologies such as NGFW firewalls, WAF, IDS/IPS, NAC, VPN, secure proxy, DDoS protection, and micro‑segmentation platforms.
• Oversee firewall governance processes, rule lifecycle management, recertifications, and connectivity requests.
• Conduct security reviews, control assessments, and risk evaluations to ensure compliance with standards like NIST, ISO 27001, SOX, NYDFS, and FFIEC.
• Support audit readiness, evidence collection, and regulatory examinations.
• Coordinate security‑related change management, CAB activities, implementations, and remediation efforts.
• Monitor, investigate, and respond to security incidents, operational issues, and control deficiencies.

Required profile

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field.
• 3–5 years of experience in network security operations, firewall administration, security engineering, or security compliance.
• Preferred certifications such as CISSP, SSCP, CISM, CRISC, Palo Alto PCNSE, Fortinet NSE, or ITIL Foundation.

Required skills

• Hands‑on experience with Palo Alto Networks, Fortinet, Cisco security technologies, and Guardicore micro‑segmentation.
• Proficiency in IDS/IPS, NAC, VPN, secure proxy, DDoS protection, and cloud security controls.
• Familiarity with ServiceNow, JIRA, and firewall compliance/policy review tools.