App Security Manager — SSDLC & Risk Mitigation Leader

ThePakEdu; Karachi Division; On-site; PKR 1,674,000 - 2,232,000; Full time

Job summary

National Bank of Pakistan is seeking a Manager Application Security (AVP) to lead the Application Security Unit. The role focuses on driving app security initiatives, governance, and secure coding practices to mitigate vulnerabilities across enterprise systems, APIs, and cloud environments.

The ideal candidate will have 6+ years in IT/security, strong knowledge of OWASP, NIST CSF, ISO 27001, PCI SSF, and offensive security tools, and demonstrate teamwork under tight deadlines.

Qualifications

• Minimum Graduation in Computer Science and/or Computer Engineering and/or Cybersecurity and/or Information Technology.
• Master's in Information Security or relevant professional certifications preferred (PJPT, OSCP, GPEN, OSWE, CWRT, OSEP).

Responsibilities

• Implement and continuously enhance the organization's Application Security Program in alignment with business objectives and regulatory requirements.
• Develop, implement, and maintain Application Security governance, policies, standards, procedures and secure coding practices across the organization.
• Drive adoption and enforcement of Secure Software Development Lifecycle (SSDLC) across all development, deployment and DevOps initiatives.

Skills

OS & networks

Cloud platforms

Security testing

Education

Bachelor in CS/CE/IT/Cybersecurity

Master's in Information Security or professional certs (PJPT/OSCP/GPEN/OSWE/OSEP)

Tools

OWASP Top 10

NIST Cybersecurity Framework

ISO/IEC 27001

PCI SSF

Job description

National Bank of Pakistan is seeking a Manager Application Security (AVP) to lead the Application Security Unit. The role focuses on driving app security initiatives, governance, and secure coding practices to mitigate vulnerabilities across enterprise systems, APIs, and cloud environments.

The ideal candidate will have 6+ years in IT/security, strong knowledge of OWASP, NIST CSF, ISO 27001, PCI SSF, and offensive security tools, and demonstrate teamwork under tight deadlines.