Assistant Manager – Information Security Risk Management & Compliance

About the role

The role leads the growing Security GRC program, ensuring that security policies and controls align with global standards such as ISO, CIS and NIST. You will design and implement risk‑based security strategies for systems, web and mobile applications, and support the organization in meeting compliance deadlines.

Key responsibilities

• Analyze, recommend and implement security controls for various platforms, designing phased strategies to meet risk‑compliance objectives.
• Plan, oversee and execute vulnerability assessments, penetration tests, forensic IT audits and ensure findings are integrated into improvement projects.
• Advise on optimal security solutions to strengthen network architecture against emerging threats.
• Collaborate cross‑functionally to uphold governance goals, information lifecycle standards and best practices for both physical and electronic data.
• Maintain relationships with internal and external auditors and regulators, supporting audit readiness.
• Lead business risk assessments, internal/external vulnerability assessments and penetration testing of critical applications.
• Develop and execute an annual security assessment plan, identifying and remediating weaknesses.

Required profile

• Bachelor’s degree in Computer Science or Engineering.
• Minimum 7 years of overall technology experience, with a focus on information security.
• Strong team‑building, written and verbal communication, and initiative‑taking abilities.

Required skills

• Network Penetration Testing, OWASP Top 10, Android/iOS application assessment, API testing.
• Red Teaming, Adversary Simulation, Source Code Review, Static Application Security Testing (SAST).
• NIST SP 800‑115, Penetration Testing Reporting, CVSS scoring, remediation validation.
• Tools: Burp Suite, Nmap, Metasploit, Nessus/Tenable, Qualys, Wireshark, Kali Linux, OWASP ZAP, Nikto, SQLMap.