Network Segmentation Owner

Description

The consultant will act as a Network Segmentation Single Point of Contact (SPOC) within the DORA MSI Network Segmentation programme and serve as the primary interface between the programme and Application Owners (AOs), Application Providers (APs), and Application Teams.

Key responsibilities

• Drive stakeholder engagement and alignment to ensure successful adoption and implementation of network segmentation controls across assigned applications and services.
• Communicate DORA regulatory requirements, programme objectives, implementation timelines, and expected business outcomes to relevant stakeholders.
• Coordinate the identification, documentation, validation, and analysis of application communication flows, dependencies, and connectivity requirements needed for segmentation design and implementation.
• Facilitate workshops and working sessions with business and technical stakeholders to validate application connectivity, business requirements, and implementation readiness.
• Collaborate closely with Network Engineers, Security Architects, Infrastructure Teams, Risk Management, and Application Teams to define and implement segmentation solutions.
• Coordinate the development and execution of application-specific segmentation plans, including milestones, implementation activities, dependencies, risk mitigation actions, and stakeholder approvals.
• Monitor delivery progress, risks, issues, dependencies, and compliance status, ensuring timely escalation of blockers impacting implementation.
• Support preparation and review of Solution Design Documents (SDDs), firewall rule changes, network segmentation rulesets, governance artefacts, and implementation documentation.
• Ensure adherence to cyber security standards, network segmentation principles, change management requirements, operational resilience objectives, and DORA regulatory expectations.
• Provide regular status reporting on implementation progress, risk reduction achievements, outstanding issues, and delivery metrics to programme governance forums and senior stakeholders.

Must-have knowledge and experience

• Minimum 5+ years of experience in IT project delivery, cyber security programmes, infrastructure transformation, network security, or operational resilience initiatives within a large enterprise environment.
• Strong stakeholder management and communication skills with proven ability to engage senior business stakeholders, Application Owners, technical teams, and external partners.
• Experience leading complex cross-functional initiatives involving multiple stakeholders, dependencies, and governance requirements.
• Strong understanding of network security concepts, including: Network Segmentation, Firewall technologies, Network communication flows, Application connectivity, Least Privilege principles, Security Zones and Trust Boundaries
• Experience facilitating workshops, requirements gathering sessions, and delivery planning activities.
• Ability to analyze technical and business requirements and translate them into actionable implementation plans.
• Experience managing risks, issues, dependencies, and delivery reporting in large-scale regulatory or transformation programmes.
• Strong written communication skills, including preparation of governance materials, implementation plans, and executive-level status reporting.
• Ability to work independently, drive activities proactively, and coordinate multiple workstreams simultaneously.

Nice-to-have knowledge and experience

• Experience working in the financial services or banking sector.
• Knowledge of Digital Operational Resilience Act (DORA) requirements and operational resilience frameworks.
• Experience with cyber security transformation programmes, Zero Trust initiatives, or network modernisation projects.
• Understanding of enterprise architecture, application architecture, infrastructure services, and cloud networking concepts.
• Familiarity with network traffic analysis, application dependency mapping, and connectivity discovery tools.
• Experience working with firewall governance, security policy management, and change approval processes.
• Knowledge of risk management, information security governance, and regulatory compliance frameworks.
• Experience working in large, geographically distributed organisations with complex application landscapes.
• Relevant certifications such as CISSP, CISM, CCSP, TOGAF, ITIL, PRINCE2, PMP, or equivalent.

Start date

2026-11-03

End date

2026-12-31

Location: Sweden or finland