Assist. Manager (VA & PT)

Punjab Information Technology Board

Lahore , Pakistan

Apply Now

Posted Yesterday 2 views Report Job

We are seeking a skilled cybersecurity professional to develop and implement a robust Vulnerability Assessment and Penetration Testing (VAPT) program. The ideal candidate will ensure the program aligns with industry-standard methodologies and meets established timelines. This role involves conducting and managing penetration tests and vulnerability assessments using a variety of tools, analyzing findings, and collaborating with cross-functional teams to mitigate risks effectively. The candidate will also be responsible for tracking program effectiveness and ensuring secure software development lifecycle (SDLC) practices are followed.

Key Responsibilities

- Develop and implement a comprehensive VAPT program adhering to industry standards and project timelines.
- Conduct and oversee penetration testing and vulnerability assessments using tools such as Nessus, Nexpose, Nmap, Metasploit, OpenVAS, and Burp Suite.
- Track and report on the effectiveness of the VAPT program by monitoring metrics including identified, remediated, and pending vulnerabilities.
- Analyze assessment results to prioritize vulnerabilities based on risk and provide actionable remediation recommendations.
- Collaborate closely with development, security, and IT operations teams to ensure timely and effective resolution of identified vulnerabilities.
- Ensure secure SDLC checkpoints are integrated into the development process, including documentation of security approvals and risk exceptions.

Required Qualifications

- Proven experience in developing and managing VAPT programs within an enterprise environment.
- Strong hands-on expertise with penetration testing and vulnerability assessment tools such as Nessus, Nexpose, Nmap, Metasploit, OpenVAS, and Burp Suite.
- Solid understanding of vulnerability management processes and risk prioritization methodologies.
- Ability to analyze security findings and communicate remediation steps clearly to technical and non-technical stakeholders.
- Experience working collaboratively with development, security, and IT operations teams to address security vulnerabilities.
- Familiarity with secure software development lifecycle (SDLC) practices and documentation requirements.

Preferred Qualifications and Benefits

- Certifications such as CEH, OSCP, CISSP, or equivalent are highly desirable.
- Experience in automating vulnerability assessments and integrating security tools into CI/CD pipelines.
- Knowledge of compliance frameworks and regulatory requirements related to cybersecurity.
- Opportunity to work in a dynamic environment with a focus on continuous improvement and professional growth.
- Exposure to cutting-edge security technologies and methodologies.

Interested candidates are encouraged to apply by 04-Nov-2026.

Job Details

Total Positions:

1 Post

Job Shift:

First Shift (Day)

Job Type:

Contract

Job Location:

Lahore, Pakistan

Gender:

No Preference

Age:

18 - 65 Years

Minimum Education:

Master

Degree Title:

Masters/Bachelors (Hons) (16 years), 16 Years of Education, Computer Engineering/Sciences, Information Technology, Artificial Intelligence, Information Engineering/Sciences 1, Computer Engineering/Sciences 1, Software Engineering 1, Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP)

Career Level:

Mid-Level

Experience:

10 Years - 13 Years

Apply Before:

Oct 24, 2026

Posting Date:

Oct 18, 2026