ISO Security Specialist

General Description

The ISO Security Specialist is responsible for maintaining the security, integrity, availability, and compliance of the organization's network security environment. This role combines hands-on security operations, governance, compliance, risk management, and technical oversight of critical network security technologies across on-premises and cloud environments.

Key Responsibilities

Manage and govern network security technologies, including:
Firewalls (NGFW)
Web Application Firewalls (WAF)
IDS/IPS
Network Access Control (NAC)
VPN and secure proxy solutions
DDoS protection platforms
Network segmentation and microsegmentation technologies
Oversee firewall governance processes, rule lifecycle management, recertifications, and connectivity requests.
Conduct security reviews, control assessments, and risk evaluations to ensure compliance with corporate standards and regulatory requirements.
Support audit readiness activities, evidence collection, regulatory examinations, and compliance initiatives (NIST, ISO 27001, SOX, NYDFS, FFIEC, etc.).
Coordinate security-related change management, CAB activities, implementations, and remediation efforts.
Monitor, investigate, and support response to security incidents, operational issues, and control deficiencies.
Collaborate with infrastructure teams, service providers, MSSPs, application owners, and business stakeholders to ensure secure implementation and operation of security controls.
Maintain security documentation, policies, procedures, governance artifacts, metrics, and management reporting.
Serve as a Subject Matter Expert (SME) for Network Security Operations and Network Defense functions.

Required Qualifications

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, Computer Engineering, Telecommunications, Network Engineering, or a related field.

3–5 years of experience in one or more of the following areas:

Network Security Operations
Cybersecurity Operations
Firewall Administration and Governance
Security Engineering
Security Monitoring and Incident Response
Information Security Risk Management
Security Compliance and Governance
Preferred Technical Expertise
Palo Alto Networks
Fortinet Security Platforms
Cisco Security Technologies
IDS/IPS Solutions
Network Access Control (NAC)
Secure Proxy Technologies
VPN Technologies
DDoS Protection Platforms
ServiceNow
JIRA
Firewall Compliance and Policy Review Tools
Microsegmentation technologies (Guardicore preferred)
Cloud Security Controls

Preferred Certifications

CISSP
SSCP
CompTIA Security+
CISM, CRISC, or CISA
Cisco CyberOps Associate or CCNP Security
Palo Alto PCNSA / PCNSE
Fortinet NSE
Microsoft Security Certifications (SC-200, SC-300, SC-100, AZ-500)
Guardicore Certified Segmentation Administrator (GCSA)ITIL Foundation

Ideal Candidate Profile

A cybersecurity professional with strong experience in Network Security Operations, firewall governance, security compliance, and operational risk management. The ideal candidate combines technical expertise with governance and audit readiness capabilities, is comfortable working in highly regulated environments, and can effectively collaborate across technical and business teams while ensuring operational excellence and security compliance.

Positioning Within the Organization

This role aligns most closely with a Senior Security Analyst / Security Specialist focused on Network Security Governance and Operations rather than a Security Architect or pure Security Engineering position. It is particularly well-suited for professionals with experience in firewall governance, security operations, compliance management, and enterprise network defense.

Important: The candidate must provide evidence of academic preparation or courses related to the job posting, if necessary.

Our hybrid work model benefit applies to certain positions and is subject to changes based on the organizational needs.

Applicants must be authorized to work for any employer in the United States. This position is not open to applicants who need visa sponsorship or transfer of visa sponsorship at this time.

ABOUT US

Popular is Puerto Rico’s leading financial institution and have been evolving since it was founded over a century ago. From a small bank it has developed into a large corporation that offer a wide variety of services and financial solutions to our customers, with presence in the United States, the Caribbean and Latin America.

As employees, we are dedicated to making our customers dreams come true by offering financial solutions in each stage of their life. Our extensive trajectory demonstrates the resiliency and determination of our employees to innovate, reach for the right solutions and strongly support the communities we serve; therefore, we value their diverse skills, experiences and backgrounds.

We reaffirm our commitment to always offer essential financial services and solutions for our customers and communities, including during emergency situations and/or natural disasters. Popular’s employees are considered essential workers, whose role is critical in the continuity of these important services even under such circumstances. By applying to this position, you acknowledge that Popular may require your services during and immediately after any such events.

If you have a disability or need more information about requesting an accommodation, please contact us at asesorialaboral@popular.com. This email inbox is monitored for such types of requests only. All information you provide will be kept confidential and will be used only to the extent required to provide needed exemptions or reasonable accommodations. Any other correspondence will not receive a response.

Are you ready for a rewarding career?

Popular is an Equal Opportunity Employer, including Disability/Vets
Learn more about us at www.popular.com and keep updated with our latest job postings at www.jobs.popular.com.
Connect with us!
LinkedIn | Facebook | Twitter | Instagram

If you are a California resident, please click here to learn more about your privacy rights.