Assistant Manager Information Security

Opportunity Information

The Role

NBP Funds is hiring an Assistant Manager Information Security at its Head Office in Karachi to carry out penetration testing, vulnerability assessments and security awareness, and support the Manager Information Security on policies and standards.

•Monitor and assess the organization's IT infrastructure to ensure it adheres to security standards and policies •Perform hands-on penetration testing of web applications, mobile applications (Android/ iOS), APIs, network infrastructure and Active Directory environments •Conduct vulnerability assessments and other relevant security testing •Identify, exploit, validate and document security vulnerabilities in accordance with industry standards and approved testing methodologies •Perform security testing aligned with OWASP Top 10, OWASP WSTG, OWASP API Security Top 10 and relevant mobile security testing standards •Analyse and prioritise vulnerabilities by severity, exploitability, business impact and exposure, and coordinate with IT, Development and vendors for timely remediation •Execute social engineering attacks, including phishing campaigns, to evaluate employee awareness and organizational defenses •Engage with vendors on third-party reported vulnerabilities and filter out false positives •Conduct security awareness training programs for employees •Assist the Manager Information Security in developing, reviewing, implementing and enforcing information security policies, procedures, standards and guidelines

Applicants General Eligibility & Requirements

Education, Experience and Skills Requirements