Senior IT Security Specialist - Firewall Governance

About the role

Marsh is looking for a Senior IT Security Specialist to join its Security Architecture team within the Network & Security Infrastructure (NSI) organization, based in Mexico City. The role focuses on the governance, review and approval of firewall security controls across a global enterprise environment, emphasizing control assurance and policy compliance rather than day-to-day firewall operations. It is a hybrid position with at least three days a week in the office.

Key responsibilities

• Review and approve firewall change requests submitted through formal change management processes.
• Assess firewall changes and existing rules against internal security requirements, architectural standards and least privilege principles.
• Identify non-compliant or higher-risk changes and support resolution through established risk acceptance processes.
• Perform periodic and targeted reviews of deployed firewall rules to validate ongoing compliance.
• Analyze complex, layered rule sets, including historical changes and prior design decisions.
• Provide security oversight for enterprise firewall environments, including Palo Alto Networks, cloud-native firewalls and Kubernetes-based platforms.
• Maintain documentation and evidence supporting governance, audit and control assurance activities.
• Partner with network, cloud and platform teams to give clear, practical security guidance.
• Contribute to improving firewall governance through standardization and supporting tools.

Required profile

• 3-4 years of experience in IT security, network security or a related discipline.
• Experience reviewing, assessing or governing firewall rules in enterprise environments.
• Experience working within formal change management or ITSM processes.
• Strong analytical skills, attention to detail and effective communication with a client-service orientation.

Required skills

• Strong understanding of network security, segmentation and access control.
• Ability to investigate and interpret complex configurations and layered historical changes.
• Nice to have: broad security awareness across network, cloud and platform domains; experience supporting security assessments, control reviews or audits; familiarity with scripting, APIs or AI-assisted tools; certifications such as CISSP, PCNSE or cloud security certifications (AWS, Azure, GCP).

What we offer

• Professional development opportunities and interesting work.
• A vibrant, inclusive culture and a range of career opportunities.
• Benefits and rewards designed to enhance well-being.