Senior Programme Manager (Information Security Analyst)

Punjab Information Technology Board

Lahore , Pakistan

Apply Now

Posted Yesterday 2 views Report Job

This role involves conducting comprehensive security assessments, audits, and incident investigations to identify vulnerabilities and mitigate risks across various IT environments. The candidate will be responsible for implementing and managing security controls such as firewalls, IDS/IPS, and endpoint protection solutions, ensuring adherence to industry standards and regulatory requirements. They will develop and maintain security policies, procedures, and documentation while keeping abreast of emerging threats and technological advancements. Collaboration with IT teams is essential to promote best practices, deliver employee security awareness training, and contribute to disaster recovery planning efforts.

Key Responsibilities

- Conduct vulnerability assessments and penetration testing on web applications, network infrastructure, and related components.
- Utilize penetration testing methodologies including OWASP, CWE, and MITRE frameworks, leveraging tools such as Nexpose, Nessus, Burp Suite, and nmap.
- Perform comprehensive audits across applications, networks, databases, web servers, and operating systems.
- Quickly assimilate security requirements to develop and implement policies and controls aligned with global standards such as ISO, PCI DSS, CIS, and NIST.
- Develop, implement, and maintain Information Security policies, procedures, and standards.
- Hands-on experience managing Identity and Access Management (IAM), Privileged Access Management (PAM), and Zero Trust Network Access (ZTNA) solutions.
- Conduct firewall rule audits, optimize configurations, perform cleanup, and review overall security posture.
- Prepare detailed reports and communicate findings effectively, with expertise in SOC 1 and SOC 2 reporting.
- Coordinate remediation efforts by working closely with systems, network, and application teams to address identified security gaps.

Required Qualifications

- Proven experience in conducting security assessments, penetration testing, and vulnerability management.
- Strong knowledge of security frameworks and standards including ISO, PCI DSS, CIS, and NIST.
- Proficiency with security tools such as Nexpose, Nessus, Burp Suite, and nmap.
- Solid understanding of penetration testing methodologies like OWASP, CWE, and MITRE.
- Hands-on experience with IAM, PAM, and ZTNA technologies.
- Ability to develop and enforce security policies and procedures.
- Excellent report writing, communication, and presentation skills.
- Experience in SOC 1 and SOC 2 compliance and reporting.
- Capability to collaborate effectively with cross-functional IT teams.

Preferred Qualifications and Benefits

While specific benefits are not detailed, candidates who demonstrate the ability to rapidly adapt to evolving security requirements and contribute to disaster recovery planning will be highly valued. Experience in delivering employee security awareness training and a proactive approach to staying updated on emerging threats and technologies will be advantageous.

Applications are accepted until 04-Nov-2026.

Job Details

Total Positions:

1 Post

Job Shift:

First Shift (Day)

Job Type:

Contract

Job Location:

Lahore, Pakistan

Gender:

No Preference

Age:

18 - 65 Years

Minimum Education:

Master

Degree Title:

Masters/Bachelors (Hons) (16 years), 16 Years of Education, Computer Engineering/Sciences, Information Technology, Telecommunication Engineering/Sciences, Software Engineering 1, Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), CySA+_ CompTIA Cybersecurity Analyst+ (by CompTIA)

Career Level:

Mid-Level

Experience:

10 Years - 13 Years

Apply Before:

Oct 24, 2026

Posting Date:

Oct 18, 2026