Application Security Lead - Threat & Risk Management

easypaisa digital bank; Islamabad; On-site; PKR 1,800,000 - 2,400,000; Full time

Job summary

easypaisa is Pakistan’s first digital bank, delivering secure financial solutions across the country. We are seeking an experienced security professional to oversee the secure deployment of servers, applications, containers and databases, guiding the team in addressing security gaps and managing the Information Security Risk Register with a focus on Application Security.

You will assist the Head of Application Security, GRC or CISO in prioritizing risks, preparing MIS reports, and coordinating

Qualifications

• Minimum bachelor’s in computer science (CS/IS or Engineering) from a reputable institute.
• 5+ years hands-on experience in Server, Application Vulnerability Scanning and Penetration Testing.
• Certifications relevant to Position will be preferred.
• 2-3 years hands-on experience in Application Security, Server, Vulnerability Scanning and Penetration Testing.

Responsibilities

• Oversee secure deployment of servers, applications, containers and databases.
• Guide developers and systems administrators on securing the environment.
• Perform vulnerability assessments and penetration testing for various apps and servers.
• Review third-party integrations and ensure security requirements are met.
• Maintain a tracker of assessments and follow up on fixes and timelines.
• Prepare reports for stakeholders highlighting risks and mitigations.
• Develop metrics for secure development and data loss prevention.
• Participate in security awareness programs and risk assessments.

Skills

Server security

Vulnerability scanning

Penetration testing

Security guidance

Education

Bachelor's in CS/IS/Engineering

Tools

SmartSheet

Job description

easypaisa is Pakistan’s first digital bank, delivering secure financial solutions across the country. We are seeking an experienced security professional to oversee the secure deployment of servers, applications, containers and databases, guiding the team in addressing security gaps and managing the Information Security Risk Register with a focus on Application Security.

You will assist the Head of Application Security, GRC or CISO in prioritizing risks, preparing MIS reports, and coordinating