IT Security Specialist

Senior IT Security Specialist

We are seeking a Senior Specialist – IT Security to join our team at Marsh. This role will be based in Mexico City. This is a hybrid role that has a requirement of working at least three days a week in the office. As a Senior Specialist – IT Security, you will join the Security Architecture team within Marsh’s Network & Security Infrastructure (NSI) organization. This role focuses on the governance, review, and approval of firewall security controls across a global enterprise environment. The position emphasizes control assurance, policy compliance, and thoughtful analysis of security controls, rather than day‑to‑day firewall operations.

We will count on you to:

• Review and approve firewall change requests submitted through formal change management processes.
• Assess firewall changes and existing rules for alignment with internal security requirements, architectural standards, and least privilege principles.
• Identify non compliant or higher risk changes and support resolution through established risk acceptance processes.
• Perform periodic and targeted reviews of deployed firewall rules to validate ongoing compliance.
• Analyze complex and layered rule sets, including understanding historical changes and prior design decisions.
• Provide security oversight for enterprise firewall environments, including Palo Alto Networks, cloud native firewalls, and Kubernetes based platforms.
• Maintain documentation and evidence to support governance, audit, and control assurance activities.
• Partner with network, cloud, and platform teams to provide clear, practical security guidance.
• Contribute to improvements in firewall governance processes through standardization and supporting tools.

What you need to have:

• 3–4 years of experience in IT security, network security, or a related discipline.
• Experience reviewing, assessing, or governing firewall rules in enterprise environments.
• Strong understanding of network security concepts, segmentation, and access control.
• Experience working within formal change management or ITSM processes.
• Strong analytical skills with a high level of attention to detail.
• Ability to investigate and interpret complex configurations and layered historical changes.
• Effective communication skills and a strong internal client service orientation.

What makes you stand out:

• Broad security awareness across network, cloud, and platform security domains.