Our client, MCB, is seeking a Security Hardening Manager based in Lahore. In this role, you will be responsible for developing and enforcing security configuration policies and standards that enhance the overall security posture of the organization. You will collaborate closely with various departments and stakeholders to ensure that security hardening strategies align with business goals and regulatory requirements. This position requires strong leadership and project management skills to guide a dedicated team and efficiently manage resources while implementing security solutions and risk mitigation measures.
Key Responsibilities
- Develop, implement, and maintain system hardening policies and procedures across operating systems, networks, POS systems, ATMs, and databases to ensure robust security configurations.
- Lead and manage a team of two security specialists to carry out security hardening initiatives, maintaining high protection standards throughout the organization’s infrastructure.
- Oversee security configuration tasks in compliance with established frameworks such as CIS Benchmarks, DISA STIGs, and zero-trust architecture principles.
- Conduct thorough risk analyses and vulnerability assessments to identify potential threats and recommend mitigation strategies aligned with industry best practices and regulatory mandates.
- Ensure compliance with regulatory standards including PCI DSS, SWIFT CSCF, ISO 27001, and relevant banking regulations by managing continuous monitoring and auditing processes.
- Collaborate with cross-functional teams including IT, network operations, and compliance departments to integrate security hardening measures seamlessly into broader technology and business initiatives.
- Prepare detailed risk analysis and security reports for senior management and key stakeholders to support informed decision-making and highlight potential risks.
- Oversee endpoint security management to ensure all connected devices comply with stringent security policies and configuration standards.
- Stay current with emerging security threats, vulnerabilities, and industry trends to continuously improve security hardening methodologies and tools.
- Drive continuous improvement of the security architecture by leveraging relevant certifications and expertise to enhance protective measures and promote a culture of security awareness.
- Lead projects related to the deployment of new security technologies and controls, managing timelines, deliverables, and resources to ensure successful implementation.
- Mentor and develop team members by providing guidance, training, and performance feedback, fostering professional growth within the security hardening domain.
Required Qualifications
- Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field.
- Relevant certifications such as CASP+, CCNP Security, OCP Database Security, or equivalent, demonstrating strong technical expertise and a proactive approach to security leadership.
- Proven experience in managing security hardening initiatives and leading small teams.
- Strong knowledge of security frameworks and regulatory compliance standards applicable to the banking sector.
- Excellent analytical skills for conducting risk assessments and vulnerability management.
- Effective communication skills to collaborate with diverse teams and present findings to senior management.
Preferred Qualifications and Benefits
While specific benefits are not detailed, the role offers an opportunity to work in a dynamic environment within a leading financial institution, contributing to critical security initiatives. Candidates with additional certifications or experience in advanced security technologies and project management will be highly valued.
This position is ideal for a security professional who is passionate about strengthening organizational defenses through strategic hardening measures and leadership.