Assistant Manager Information Security

Key Responsibilities:

1. Evaluates risks and develops security standards, procedures, and controls to manage risks

2)Improves security positioning through process improvement, policy, automation, and the continuous evolution of capabilities

3)Implements processes such as GRC (Governance Risk & Compliance) to automate and continuously monitor Information Security controls, exceptions, risk, testing. Develops reporting metrics, dashboards and evidence artifacts

4. Operate a hands-on role involving penetration testing and vulnerability assessment activities of complex applications, operating systems, wired and wireless networks, and mobile applications/devices

5. Develop, maintain security testing plans automate penetration and other security testing on networks, systems and applications

6. Assist with third-party IT vulnerability assessments and Penetration testing and also remediate the vulnerabilities with the communication to concern departments and their owners

7. Act as a source of direction, training, and guidance for less experienced staff

8. Documents and reports control failures and gaps to stakeholders

9. Provides remediation guidance and prepares management reports to track remediation activities

10. Consult with application developers, systems administrators, and management to demonstrate security testing results, explain the threat presented by the results, and consult on remediation

11. Deliver the annual penetration testing schedule and conducting awareness campaigns to ensure proper budgeting by business lines for annual tests

Education and Experience:

• Bachelors in computer science, information security, or related field

• 5 years of Experience in information security, technology governance, VAPT or IT Security

Work Location: In person