AM Information Security - Risk Management & Compliance

Zong 5G; Islamabad; On-site; PKR 1,800,000 - 2,400,000; Full time

Job summary

Zong 5G is seeking an Assistant Manager Information Security - Risk Management & Compliance in Islamabad to lead our growing GRC program. You will plan security enhancements, risk assessments, and ensure compliance with global standards (ISO, CIS, NIST), coordinating with auditors.

You will analyze controls, supervise vulnerability and penetration testing, advise on security solutions, and work with cross-functional teams to meet governance goals and protect information assets.

Qualifications

• 7+ years of technology experience.
• Experience with Security GRC, risk management, and compliance.
• Bachelor's degree in CS Engineering required.

Responsibilities

• Analyze and recommend security controls for systems and apps.
• Oversee vulnerability audits, pen tests, and forensic IT audits.
• Advise on security solutions to improve network security architecture.
• Collaborate across teams to meet governance and data lifecycle standards.
• Support internal and external auditors and regulators.
• Plan and execute annual security assessment and remediation.

Skills

Team Building

Communication

Initiative

Education

Bachelors in CS Engineering

Tools

Burp Suite

Nmap

Metasploit

Nessus/Tenable

Qualys

Wireshark

Kali Linux

OWASP ZAP

Nikto

SQLMap Scripting

Job description

Department & Function: Information Security

Position: Assistant Manager Information Security - Risk Management & Compliance

Location: Islamabad

Reporting to: Sr. Manager Information Security - Governance & Architecture

Job Type: Permanent

Job Purpose:

Responsible for our growing Security GRC program that has the ability to quickly ramp up on Security requirements needed in order to achieve implement Policies & Security controls in line with Global Standards. i.e. ISO, CIS & NIST etc. Plans security enhancements, Vulnerability Assessments, Penetration Testing, Risk Assessments and solutions for preventive and reactive measures.

Job Responsibilities:

• Analyze & recommend security controls for systems, web applications, Mobile Applications etc Designing security strategy phases needed to achieve information Risk compliance objectives against a deadline.
• Oversight, planning and execution of any required vulnerability audits, penetration tests or forensic IT audits or related investigations need to ensure that any findings are fed into projects improving organizations overall IT Security.
• Advise for best security solution according to different threats to overall improve the security architecture of network.
• Cross-functional collaboration and capability development to ensure governance goals, information management lifecycle standards and best practices, for both physical and electronic information is reached.
• Support business relationship with the internal & external security auditors and regulators.
• Assists internal teams to ensure successful programs that align with security control program.
• Plan Business Risk Assessment / internal external vulnerability assessment /PT of critical existing business applications
• Planning and execution of Annual security assessment plan, identification and resolution of weaknesses.

Eligibility Criteria (Education, Knowledge, Experience and Skills):

Education:

• Bachelors (Computer Science – Engineering)

Work Experience:

• 7 Years Overall Technology Experience

Skills – Generic:

• Team Building
• Written / verbal communication Skills
• Initiative taking

Skills – Job Specific:

Network Penetration Testing – OWASP Top 10 – Android/iOS application assessment and API testing API Penetration Testing – Red Teaming & Adversary Simulation – Source Code / SAST Review – i, NIST SP 800-115 Penetration Testing Reporting – executive summaries, technical findings, CVSS scoring, evidence and remediation recommendations Retesting & Remediation Validation Security Tools: Burp Suite, Nmap, Metasploit, Nessus/Tenable, Qualys, Wireshark, Kali Linux, OWASP ZAP, Nikto, SQLMap Scripting.