Application Security Manager

Easypaisa is Pakistan’s pioneering digital bank, transforming the country’s digital finance landscape. Supported by prominent shareholders including Telenor Group, a leading telecom operator in Asia and the Nordics, and Ant Group, the powerhouse behind Alipay, easypaisa provides secure and convenient financial solutions to millions across Pakistan. The role focuses on ensuring the secure deployment of servers, applications, containers, and databases, while leading efforts to identify and address security vulnerabilities. The incumbent will assist senior security leadership in managing application security risks and contribute to maintaining a robust Information Security Risk Register.

Key Responsibilities

- Conduct comprehensive assessments such as vulnerability assessments and penetration testing across a range of platforms including desktop, web, mobile applications, APIs, databases, containers, integrations, and servers.
- Oversee the security validation of servers, applications, and databases prior to production deployment, ensuring all security gaps are addressed.
- Guide developers and system administrators on best practices for securing environments and mitigating identified vulnerabilities.
- Perform vulnerability assessments and penetration testing on cloud-based applications, whether developed internally or sourced from third parties, and track progress using smart sheet tools.
- Review Business Requirement Documents (BRD) and Product Requirement Documents (PRD) for both internal change requests and third-party integrations.
- Participate actively in Cross Functional Team (CFT) meetings, reviewing third-party integration workflows in a phased and controlled manner.
- Conduct static and dynamic security analyses, along with penetration testing, specifically targeting mobile and web applications to uncover security weaknesses.
- Evaluate all third-party integrations and APIs according to a defined roadmap, ensuring compliance with security standards.
- Lead a team responsible for conducting both scheduled and ad-hoc security reviews, ensuring timely resolution of security issues.
- Maintain detailed trackers to document assessments performed, follow up on vulnerability remediation, and prioritize fix timelines.
- Review information security clauses in contracts with external business partners to ensure compliance with organizational standards.
- Prepare detailed reports for stakeholders, highlighting risks, recommending mitigation strategies, and monitoring the implementation of these measures.
- Provide security education and guidance to developers and system administrators, helping them understand security requirements and resolve findings effectively.
- Develop and implement metrics programs focused on secure development practices and data loss prevention.
- Participate in the organization’s Information Security Awareness Program to promote a security-conscious culture.
- Conduct regular security audits from both theoretical and practical perspectives to evaluate the effectiveness of security controls.
- Contribute to Information Security Risk Assessments and prepare related reports.
- Undertake additional duties as assigned by the Head of Information Security or Chief Information Security Officer (CISO).

Required Qualifications

- Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field from a reputable institution.
- Over 5 years of hands-on experience in server and application vulnerability scanning and penetration testing.
- 2 to 3 years of direct experience in application security, including vulnerability assessments and penetration testing.
- Strong familiarity with security frameworks such as MITRE ATT&CK, OWASP, and OSTTM is advantageous.

Preferred Qualifications and Benefits

- Relevant professional certifications in information security or penetration testing will be highly regarded.
- Experience working in a fast-paced digital banking or fintech environment is a plus.
- Opportunity to work with a leading digital bank backed by global industry leaders, contributing to cutting-edge financial technology solutions.

This role offers a unique opportunity to play a critical part in safeguarding one of Pakistan’s most innovative digital financial platforms, working alongside experienced security professionals in a dynamic and supportive environment.