高级经理，端点安全与网络管理
Senior Manager, Endpoint Security & Network Management
拥有75年的经验，我们的重点是帮助最弱势的儿童克服贫困，体验充实的生活。我们帮助所有背景的儿童，即使在最危险的地方，都受到基督教信仰的启发。
加入我们的31,000多名员工，在近100个国家工作，分享改变弱势儿童人生故事的喜悦！
关键职责：
重要信息：
- 所有简历必须用英文提交。
- 该职位面向亚太地区任何国家以及世界宣明会国际合法注册运营的其他邻近国家的本地候选人开放。
职位目的：
高级经理 – 网络安全与身份管理负责全球技术服务中心（GTS）中的支柱二，对世界宣明会国际的网络基础设施和身份服务的全球安全、性能和完整性负责。该支柱涵盖两个相互关联的领域：网络工程和身份与访问管理（IAM）——这两者都是WVI零信任安全策略和以AWS为主的云环境的基础。
这是一个人员管理职位，直接负责一个小型专业团队：网络工程师、网络技术设计主管、IAM工程师以及端点技术设计主管。端点技术设计主管仍属于支柱二，作为端点安全架构和零信任对齐的设计权威——端点工程师向支柱三（数字办公与企业平台）汇报，并不是该职位的直接下属。IAM项目经理是一个临时的矩阵角色，由项目管理办公室（PMO）间接管理，不构成该职位的永久直接下属结构。
与首席信息安全官（CISO）、I&O负责人和IAM计划紧密合作，该职位推动以安全为先的网络设计和身份治理方法——保护数字访问，实现办公室和现场环境的弹性连接，并提升云和本地平台的身份控制。
关键能力：
- 以人为本的领导力 —— 有意识地培养团队成员；根据个人和当前情况调整方法。
- 以安全为先的思维 —— 建立一种安全责任分散而非集中于一个人的文化。
- 网络与身份融合 —— 理解在零信任模型中，这两个领域是不可分割的。
- 考虑现场的设计 —— 懂得技术决策对现场工作人员有实际影响。
查看英文原文
With 75 years of experience, our focus is on helping the most vulnerable children overcome poverty and experience fullness of life. We help children of all backgrounds, even in the most dangerous places, inspired by our Christian faith.
Come join our 31,000+ staff working in nearly 100 countries and share the joy of transforming vulnerable children’s life stories!
Key Responsibilities:
IMPORTANT INFORMATION:
- All CVs should be submitted in English.
- This position is open to local candidates based in any country within the Asia-Pacific region and other eligible neighbouring countries where World Vision International is legally registered to operate.
JOB PURPOSE:
The Senior Manager – Network Security & Identity leads Pillar 2 within Global Technology Services (GTS), accountable for the global security, performance, and integrity of network infrastructure and identity services across World Vision International. The pillar owns two interconnected disciplines: network engineering and identity & access management (IAM) — both foundational to WVI's Zero Trust security posture and its AWS-primary cloud environment.
This is a people management role with direct responsibility for a small, specialist team: Network Engineers, the Network Tech Design Lead, IAM Engineers, and the Endpoint Tech Design Lead. The Endpoint Tech Design Lead remains in P2 as design authority for endpoint security architecture and Zero Trust alignment — endpoint engineers report into P3 (Digital Workplace & Enterprise Platform) and are not direct reports of this role. The IAM Project Manager is a temporary matrix role, dotted-line from PMO, and does not form part of this role's permanent direct report structure.
Working closely with the CISO, Head of I&O, and the IAM Programme, this role drives a security-first approach to network design and identity governance — protecting digital access, enabling resilient connectivity across office and field environments, and maturing identity controls across cloud and on-premises platforms.
Key Competencies:
- People-first leadership — develops team members deliberately; adjusts approach to the individual and the moment.
- Security-first mindset — builds a culture where security ownership is distributed, not centralised in one person.
- Network and identity convergence — understands that in a Zero Trust model, these two disciplines are inseparable.
- Field-conscious design — knows that technical decisions have real consequences for staff in difficult operating environments.
- Collaborative influence — leads through partnership across pillars and programme teams, not territorial ownership.
- Operational discipline — maintains service quality, governance standards, and stakeholder communication under pressure.
KEY RESPONSIBILITIES:
People Leadership
- Directly manage Network Engineers, the Network Tech Design Lead, IAM Engineers, and the Endpoint Tech Design Lead — setting clear expectations, supporting development, and conducting regular performance conversations.
- Match your leadership approach to each team member's experience and confidence: provide direction where needed, delegate and trust where earned.
- Build technical depth and T-shaped skills across the team, aligned to WVI's evolving cloud-native and Zero Trust environment.
- Coordinate with the IAM Project Manager (temporary project role, matrix from PMO) on delivery priorities, without line management responsibility for that position.
- Foster a team culture of security ownership, continuous learning, and cross-pillar collaboration.
Network Engineering & Security
- Own the global network strategy — architecture, segmentation, performance, and resilience — across office and field environments.
- Oversee firewall configuration, VPN management, Zero Trust network access (ZTNA), and secure remote connectivity.
- Lead global network operations: performance monitoring, capacity planning, and incident response.
- Define and enforce network security standards in alignment with WVI's GTD Governance framework and CIS Controls v8.
- Coordinate network support to regional and field office IT teams, including low-bandwidth and remote operating contexts.
Identity & Access Management
- Lead IAM engineering delivery within P2, supporting the WVI SDF IAM Programme and the Deloitte engagement commencing September 2026.
- Oversee IAM engineers responsible for Entra ID, AWS identity services, privileged access management (PAM), and MFA enforcement.
- Drive Zero Trust identity principles: least privilege, continuous verification, and risk-based access controls.
- Partner with the IAM Programme Manager and Enterprise Architect (GTD) to ensure engineering delivery aligns with IAM strategy, policy, and the WVI ADS.
- Govern third-party and vendor identity access — including Vendor Sandbox OU controls for Deloitte, LTIMindtree, and other external partners.
Endpoint Security Architecture (Design Authority)
- Manage the Endpoint Tech Design Lead as a direct report, providing direction, development, and performance oversight.
- Maintain P2's design authority for endpoint security — ensuring endpoint standards, policies, and architecture decisions are set in P2, even though endpoint engineers sit in P3.
- Work with the Endpoint Tech Design Lead to feed endpoint security architecture into WVI's Zero Trust posture — particularly device trust, compliance signalling, and conditional access policy.
- Coordinate with the P3 Senior Manager / Lead (Digital Workplace & Enterprise Platform) to ensure endpoint engineers implement P2-defined standards consistently.
- Ensure endpoint security standards are documented and aligned to the WVI ADS and CIS Controls v8.
Operations & Governance
- Act as the senior escalation point for P2 major incidents, critical security risks, and complex operational issues.
- Oversee P2 service-level performance, compliance reporting, and vendor engagement — balancing value with managed risk.
- Apply FinOps principles to P2 operations: optimise tooling, licensing, and service costs without compromising security posture.
- Represent P2 in GTS leadership forums, security governance bodies, and the Zero Trust Steering Group.
- Champion Agile ways of working and DevSecOps practices across the P2 team, consistent with GTS-wide standards.
KNOWLEDGE/QUALIFICATIONS FOR THE ROLE:
Required Education, training, license, registration, and/or Certification
· Bachelor’s or Master’s degree in Computer Science, Engineering, or related field
Required Professional Experience
- 7 – 10 years in IT security, network engineering, or infrastructure, with at least 4 years in a senior leadership role.
- Solid working knowledge across network security and identity & access management.
- Hands-on experience with Zero Trust concepts and their application in a hybrid cloud environment.
- Experience with Microsoft security tooling: Entra ID, Defender for Identity, and conditional access.
- Familiarity with enterprise network security: firewall management, ZTNA/VPN, and network segmentation.
- Demonstrated ability to manage and develop a small technical team.
- Clear communicator — able to translate security risk for both technical and non-technical stakeholders.
- Working knowledge of CIS Controls v8, NIST CSF, or ISO 27001.
- Deep expertise across both network security and IAM, with demonstrated ownership of enterprise-scale implementations.
- Experience engaging with or supporting a large-scale IAM programme (Entra ID, PAM, MFA at enterprise scale).
- Comfortable operating at the intersection of engineering delivery and security governance — shaping policy, not just implementing it.
- Track record of cross-functional influence: working across pillars, programmes, and vendor partners to drive outcomes.
Required Language(s)
· Excellent command of spoken and written English, with the ability to communicate clearly and effectively with diverse stakeholders.
Preferred Experience, Knowledge and/or other Qualifications
- Relevant certifications: CISSP, CISM, Microsoft Security certifications, CCNP/CCIE, or equivalent.
- Experience in an INGO, NGO, or mission-driven organisation operating across multiple regions.
- Familiarity with Zscaler (SASE/ZTNA), Meraki, or Portnox in enterprise environments.
- Exposure to FinOps disciplines and technology cost governance.
- AWS networking and identity experience or certifications.
Applicant Types Accepted:
Local Applicants Only
World Vision is a Christian humanitarian organisation with a mission centred on following Jesus Christ in service to the world´s most vulnerable children. Therefore, in all locations to the fullest extent legally permissible, the successful applicant will affirm our core documents, observe conduct compatible with Christian principles, serve at a high level of professional ethics and strive to act in accordance with cultural sensitivities. Furthermore, regular attendance with team and office devotions, chapel and prayer gatherings are expected in line with policies in the World Vision host location and its departments.
Originally posted on Himalayas