Assist. Manager (Information Security)

Punjab Information Technology Board

Lahore , Pakistan

Apply Now

Posted 2 days ago 3 views Report Job

We are seeking a skilled professional with strong technical expertise in information and cyber security domains. The ideal candidate will have hands-on experience in vulnerability assessment, penetration testing, and secure configuration management across various environments. This role involves conducting thorough security assessments of web applications, networks, and infrastructure components, ensuring compliance with global security standards and policies. The candidate should be adept at quickly understanding security requirements and implementing effective controls to protect organizational assets.

Key Responsibilities

- Conduct vulnerability assessments and penetration testing on web applications, network infrastructure, databases, web servers, and operating systems.
- Apply penetration testing methodologies such as OWASP, CWE, and MITRE to identify and mitigate security risks.
- Utilize security tools including Nexpose, Nessus, Burp Suite, and nmap for comprehensive security evaluations.
- Perform audits on applications, networks, databases, web servers, and operating systems to ensure security compliance.
- Develop and implement information security policies, procedures, and standards aligned with global frameworks such as ISO, PCI DSS, CIS, and NIST.
- Manage and maintain Identity and Access Management (IAM), Privileged Access Management (PAM), and Zero Trust Network Access (ZTNA) solutions.
- Conduct firewall rule audits, optimize configurations, perform cleanup, and review overall security posture.
- Understand network architecture concepts including TCP/IP, subnetting, firewalls, and Web Application Firewalls (WAF).
- Monitor, detect, and investigate malicious activities across applications and systems.
- Prepare detailed security reports and documentation, demonstrating strong communication skills, including expertise in SOC 1 and SOC 2 reporting.
- Collaborate effectively with systems, network, and application teams to address and remediate identified security vulnerabilities.

Required Qualifications

- Proven experience in vulnerability assessment and penetration testing across multiple platforms.
- Proficiency with penetration testing methodologies such as OWASP, CWE, and MITRE.
- Hands-on experience using security tools like Nexpose, Nessus, Burp Suite, and nmap.
- Strong understanding of network protocols, architecture, and security controls.
- Experience in developing and implementing security policies and standards in line with ISO, PCI DSS, CIS, and NIST frameworks.
- Practical knowledge of IAM, PAM, and ZTNA solutions.
- Ability to conduct firewall audits and optimize security configurations.
- Excellent report writing and communication skills, with experience in SOC 1 and SOC 2 reporting.
- Ability to work collaboratively with cross-functional teams to remediate security issues.

Preferred Qualifications and Benefits

While not explicitly mentioned, candidates with additional certifications in cybersecurity, such as CISSP, CEH, or CISA, will be considered favorably. The role offers an opportunity to work in a dynamic environment focused on maintaining high security standards and continuous improvement of security posture.

Applications are welcomed until 04-Nov-2026.

Job Details

Total Positions:

1 Post

Job Shift:

First Shift (Day)

Job Type:

Contract

Job Location:

Lahore, Pakistan

Gender:

No Preference

Age:

18 - 65 Years

Minimum Education:

Master

Degree Title:

Masters/Bachelors (Hons) (16 years), 16 Years of Education, Computer Engineering/Sciences, Information Technology, Computer Engineering/Sciences 1, Software Engineering 1

Career Level:

Mid-Level

Experience:

10 Years - 13 Years

Apply Before:

Oct 24, 2026

Posting Date:

Oct 18, 2026