Assistant Manager Information Security – Risk Management & Compliance

About the role

The organization is expanding its Security GRC program and seeks an Assistant Manager to lead risk management and compliance initiatives. You will design and implement security controls, oversee vulnerability assessments, and ensure alignment with global standards such as ISO, CIS and NIST.

Key responsibilities

• Analyze and recommend security controls for systems, web and mobile applications.
• Design security strategy phases to meet risk compliance objectives within set deadlines.
• Plan, execute and oversee vulnerability audits, penetration tests, forensic IT audits and related investigations.
• Feed findings into projects to continuously improve the organization’s overall IT security posture.
• Collaborate cross‑functionally to ensure governance goals, information lifecycle standards and best practices for both physical and electronic information.
• Support relationships with internal and external auditors and regulators.
• Lead business risk assessments, internal/external vulnerability assessments and annual security assessment plans, driving remediation and validation.

Required profile

• Bachelor’s degree in Computer Science, Engineering or a related field.
• Minimum of 7 years of overall technology experience, with a focus on security testing and risk management.

Required skills

• Network Penetration Testing, OWASP Top 10, Android/iOS application assessment, API testing.
• Red Teaming, Adversary Simulation, Source Code/SAST Review, NIST SP 800‑115.
• Penetration testing reporting (executive summaries, technical findings, CVSS scoring, remediation recommendations).
• Proficiency with security tools: Burp Suite, Nmap, Metasploit, Nessus/Tenable, Qualys, Wireshark, Kali Linux, OWASP ZAP, Nikto, SQLMap.
• Scripting for automation and validation.