Security Risk Assessment Specialist - It Auditor

110 Solutions; Karachi Division; On-site; PKR 1,400,000 - 2,000,000; Full time

Job summary

A leading IT solutions provider in Karachi is seeking a Senior Security Risk Assessment Specialist to oversee application security deliverables for a major onsite project. Candidates should have a minimum of three years in information security, along with relevant certifications like CISSP or CISM. Strong communication skills and experience with vulnerability scanning tools are preferred. This role offers an immediate opportunity with a minimum duration of six months.

Qualifications

• Minimum of three years of information security or risk management experience.
• Active participation in application risk assessment programs.
• Experience with web vulnerability scanning tools is desirable.

Responsibilities

• Conduct reviews for application projects to ensure implementation of security deliverables.
• Schedule and conduct review meetings with project managers.
• Produce summary and status reports for projects.

Skills

Information security

Risk management

Project management

Relationship management

Effective communication

Education

Professional certification (CISSP/CISM)

Tools

Web vulnerability scanning tools

Job description

We currently have an opportunity available for a senior level security risk assessment specialist / IT Auditor to work onsite for a major project. This opportunity is immediate and a minimum of six months in length. Conduct reviews for application development/enhancement projects to ensure successful implementation of security deliverables in accordance with company standards and industry best practices.

• Scheduling review meetings with project managers
• Reviewing project documentation and designs
• Conducting review meetings with project managers
• Production of summary reports for each project (to departmental standards)
• Production of status reports on projects assigned.
• Or Trainings.

Requirements & Skills

REQUIREMENTS:

• Minimum of three years of information security, IT, risk management administration or consulting experience.
• Active participation in application risk assessment or evaluation programs for application development.
• Professional certification as a CISSP and/or CISM is preferred.
• Experience with a web vulnerability scanning tool like Webinspect or Watchfire's App Scan is desirable.
• Strong relationship management skills with co‑workers, management, and clients.
• Effective organizational skills, accurate and timely completion of work, and attention to detail.
• Ability to effectively communicate both verbally and in writing.