Senior Security Assurance Lead, Secure SDLC & Risk

Mashreqbank PSC; Pakistan; In loco; PKR 4.000.000 - 8.000.000; Tempo pieno

Descrizione del lavoro

Mashreqbank PSC is seeking a dynamic Senior Manager of Information Security to lead our security initiatives, focusing on secure software development lifecycle and strategic leadership. The role demands a visionary leader who can drive security excellence while effectively managing resources and collaborating with senior stakeholders.

The candidate will strategically guide vulnerability management and application security programs, integrate security into the SDLC with DevSecOps, and oversee

Competenze

• Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, or a related field.
• 8 to 12 years of extensive experience in information security, with significant leadership experience.
• Minimum of two advanced security certifications such as CISSP, CISM, CISA, GCED, CeH, or Azure Security.
• Proven experience in developing and managing secure SDLC processes and large-scale security programs.
• Deep understanding of vulnerability management, penetration testing methodologies, and application security assessments (SAST, DAST, IAST).
• Strong knowledge of security frameworks, standards, and compliance requirements, including NIST 800-53, NIST CSF and OWASP.

Mansioni

• Strategically lead and manage vulnerability management and application security programs.
• Oversee integration of security practices within the SDLC with DevOps teams.
• Lead DevSecOps initiatives with automation and compliance tooling.
• Plan and coordinate annual penetration testing across all MBPL applications.
• Mentor and lead a team of security professionals.
• Conduct IT compliance assessments per industry standards.

Conoscenze

Strategic leadership

Team leadership

Stakeholder management

Communication

Formazione

Bachelor or Master in CS/Info Security

Strumenti

NIST 800-53

OWASP

DevSecOps tooling

Descrizione del lavoro

Mashreqbank PSC is seeking a dynamic Senior Manager of Information Security to lead our security initiatives, focusing on secure software development lifecycle and strategic leadership. The role demands a visionary leader who can drive security excellence while effectively managing resources and collaborating with senior stakeholders.

The candidate will strategically guide vulnerability management and application security programs, integrate security into the SDLC with DevSecOps, and oversee