Assistant Manager (Penetration Testing)

Risk Associates Pvt. Ltd.; Karachi Division; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

Risk Associates Pvt. Ltd. in Pakistan seeks an Assistant Manager to lead end-to-end penetration testing and red team engagements for national and international clients.

You will oversee resource planning, project delivery, and practice management across Banking, Oil & Gas, Telecom, and Government sectors, applying PCI-DSS, SWIFT, NIST CSF, and ISO/IEC 27001 standards. Strong leadership and stakeholder communication are essential for executive reports.

Qualifications

• Hands-on experience in vulnerability assessment and penetration testing (VAPT).
• Knowledge of PCI-DSS, SWIFT, NIST CSF, ISO/IEC 27001.
• Expertise with security tools and developing custom scripts.
• Experience leading IT security consulting teams and projects.
• Strong written and verbal communication for executive reports.
• Bachelor's degree in IT/CS/Info Security.
• 4–6 years of experience.
• Required: OSCP, CRTP, GPEN, or LPT. Preferred: CRTA, CEH.

Responsibilities

• Lead end-to-end penetration testing and red teaming engagements.
• Oversee resource planning, project delivery, and practice management.
• Conduct assessments against global standards and frameworks.
• Develop technical roadmaps and future-state defences for clients.
• Engage with technical and executive stakeholders across industries.

Skills

VAPT expertise

Attack vectors

Stakeholder comms

Team leadership

Executive reporting

Education

Bachelor's degree in IT/CS/Info Security

Tools

Burp Suite

Metasploit

Nessus

Kali Linux

Job description

• Lead end-to-end Penetration Testing (Network, Web App, Mobile, API) and Red Teaming engagements.
• Oversee resource planning, project delivery, and practice management for clients across Banking, Oil & Gas, Telecom, and Government sectors.
• Conduct technical assessments against global standards and frameworks (SWIFT CSP, PCI-DSS, NIST, SAMA CSF).
• Evaluate current security postures, envision future-state defences, and provide technical implementation roadmaps for clients.
• Maintain professional engagement with technical and executive stakeholders, managing multiple assignments across diverse industries.

Eligibility Criteria

• Hands-on experience in vulnerability assessment and penetration testing (VAPT) and deep knowledge of attack vectors.
• Proficiency in applying technical security controls related to PCI-DSS, SWIFT, NIST CSF, and ISO/IEC 27001.
• Mastery of industry-standard security tools (Burp Suite, Metasploit, Nessus, Kali Linux) and the ability to develop custom scripts/programs for assessments.
• Experience in IT security consulting as a Team Lead or Manager, with a proven track record of managing technical teams and complex projects.
• Exceptional oral and written communication skills, with the ability to translate technical findings into actionable executive reports.
• Bachelor's degree in IT, Computer Science, or Information Security from a reputable university.
• 04 - 06 years of experience.
• Professional Certifications
  • Required: OSCP, CRTP, GPEN, or LPT.
  • Preferred: CRTA, CEH.
  • Preference will be given to candidates with specialized experience in SWIFT and PCI-DSS technical audits.

Assistant Manager in our Offensive Security Department, you will lead the planning, execution, and management of advanced cybersecurity consulting assignments for our national and international clients. You will work in a client-facing capacity to proactively identify, exploit, and remediate security vulnerabilities.

Together Towards Secure Digital Frontier