Senior Security Leader: Secure SDLC & Vulnerability Programs

Mashreq Bank PSC; Pakistan; On-site; PKR 3,000,000 - 8,000,000; Full time

Job summary

Mashreq Bank PSC in Pakistan seeks a Senior Manager of Information Security to lead secure SDLC initiatives, manage vulnerability, and drive strategic security programs across the enterprise. The role requires building and mentoring high-performing security teams, coordinating with senior stakeholders, and ensuring compliance with NIST standards and OWASP guidelines.

Candidates should have 8–12 years in information security, advanced certifications, and proven experience in large-scale security

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, or related field.
• 8–12 years of extensive information security experience with leadership roles.
• Two advanced security certifications such as CISSP, CISM, CISA, GCED, CeH, or Azure Security.
• Proven experience developing and managing secure SDLC processes and large-scale security programs.
• Deep understanding of vulnerability management, penetration testing methodologies, and application security assessments (SAST, DAST, IAST).
• Strong knowledge of security frameworks and compliance requirements including NIST 800-53, NIST CSF and OWASP.

Responsibilities

• Strategically lead and manage vulnerability management and application security programs across the organization.
• Oversee integration of security within the SDLC with development and operations teams for secure deployment.
• Be an expert in DevSecOps, integrating security practices with automation and compliance tools.
• Plan and coordinate annual penetration testing across all applications.
• Lead and mentor a team of security professionals to foster excellence and proactive security awareness.
• Conduct IT compliance assessments and reviews against standards such as NIST 800-53 and NIST CSF.
• Certify and approve platforms post-security reviews to ensure secure systems.
• Monitor threat landscape and develop strategic mitigation plans with reporting mechanisms.
• Evaluate and implement advanced security solutions to keep infrastructure robust.
• Collaborate with executives to develop comprehensive information security strategies aligned with goals.
• Communicate with stakeholders to ensure transparency and alignment in security initiatives.
• Prepare and present detailed security reports and recommendations to senior management and governance committees.

Skills

Security leadership

SDLC security

Vulnerability management

Team leadership

DevSecOps

Education

Bachelor's/Master's in CS/InfoSec

Job description

Mashreq Bank PSC in Pakistan seeks a Senior Manager of Information Security to lead secure SDLC initiatives, manage vulnerability, and drive strategic security programs across the enterprise. The role requires building and mentoring high-performing security teams, coordinating with senior stakeholders, and ensuring compliance with NIST standards and OWASP guidelines.

Candidates should have 8–12 years in information security, advanced certifications, and proven experience in large-scale security