Security GRC Manager: Risk, Compliance & Audit Readiness

Zong 5G; Islamabad; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

Zong 5G in Islamabad seeks an Assistant Manager Information Security - Risk Management & Compliance to lead the Security GRC program, aligning policies and controls with ISO, CIS and NIST standards, and to plan security enhancements.

You will manage vulnerability assessments, audits, risk assessments and audits, and remediation with cross-functional teams, reporting to the Sr. Manager Information Security - Governance & Architecture, and supporting regulators and internal auditors.

Qualifications

• Bachelor's degree in Computer Science or Engineering.
• 7 years overall technology experience.

Responsibilities

• Analyze and recommend security controls for systems, apps, and networks to meet risk/compliance objectives.
• Coordinate vulnerability audits, penetration tests, and forensic IT investigations and feed findings into projects.
• Advise on best security solutions to improve network security architecture.
• Collaborate across functions to meet governance goals and information lifecycle standards.
• Support internal and external security auditors and regulators.
• Assist internal teams to align programs with the security control framework.
• Plan business risk assessments and annual security assessment plans; identify weaknesses and remediate.

Skills

Penetration Testing

OWASP Top 10

Android/iOS Testing

API Testing

Red Teaming

Adversary Simulation

Source Code Review

SAST Review

Education

Bachelor's degree in Computer Science or Engineering

Tools

Burp Suite

Nessus/Tenable

Nmap

Metasploit

Qualys

Wireshark

Kali Linux

OWASP ZAP

SQLMap

Job description

Zong 5G in Islamabad seeks an Assistant Manager Information Security - Risk Management & Compliance to lead the Security GRC program, aligning policies and controls with ISO, CIS and NIST standards, and to plan security enhancements.

You will manage vulnerability assessments, audits, risk assessments and audits, and remediation with cross-functional teams, reporting to the Sr. Manager Information Security - Governance & Architecture, and supporting regulators and internal auditors.