Posted Oct 17, 2026 26 views
The Assistant Manager Information Security - Risk Management & Compliance will play a critical role in advancing the organization's Security Governance, Risk, and Compliance (GRC) program. This position is responsible for implementing and managing security policies and controls aligned with global standards such as ISO, CIS, and NIST. The role involves planning and executing security enhancements, vulnerability assessments, penetration testing, and risk assessments to establish both preventive and reactive security measures. The successful candidate will work closely with various teams to ensure the organization's information security posture meets compliance requirements and mitigates risks effectively.
Key Responsibilities
- Analyze and recommend appropriate security controls for systems, web applications, and mobile applications. Develop and design security strategies to meet information risk compliance objectives within set deadlines.
- Oversee, plan, and execute vulnerability audits, penetration tests, forensic IT audits, and related investigations. Ensure that findings are integrated into projects to enhance the overall IT security framework.
- Provide expert advice on security solutions tailored to address diverse threats, improving the security architecture of the network.
- Collaborate cross-functionally to develop capabilities that support governance goals, information management lifecycle standards, and best practices for both physical and electronic information.
- Support and maintain strong business relationships with internal and external security auditors and regulatory bodies.
- Assist internal teams in aligning their programs with the security control framework to ensure successful implementation.
- Plan and conduct business risk assessments, internal and external vulnerability assessments, and penetration testing of critical business applications.
- Lead the planning and execution of the annual security assessment plan, identifying weaknesses and driving their resolution.
Required Qualifications
- Bachelor’s degree, preferably in Computer Science or Engineering.
- Approximately 7 years of overall experience in technology, with a strong focus on information security and risk management.
Preferred Skills and Technical Expertise
- Proficiency in network penetration testing, including OWASP Top 10 vulnerabilities, Android/iOS application assessments, API penetration testing, red teaming, adversary simulation, and source code/static application security testing (SAST).
- Experience with NIST SP 800-115 penetration testing methodologies, including reporting with executive summaries, technical findings, CVSS scoring, evidence documentation, and remediation recommendations.
- Ability to conduct retesting and remediation validation to ensure vulnerabilities are effectively addressed.
- Hands-on experience with security tools such as Burp Suite, Nmap, Metasploit, Nessus/Tenable, Qualys, Wireshark, Kali Linux, OWASP ZAP, Nikto, SQLMap, and scripting for automation and testing purposes.
This permanent role is based in Islamabad and reports directly to the Senior Manager of Information Security - Governance & Architecture. The position offers an opportunity to contribute significantly to the organization's security posture by managing and evolving the Security GRC program in line with international standards and best practices.
Skills
Job Details
What is your Competitive Advantage?
Similar Job Titles
GM Cybersecurity & Technology Risk (CISO)
Aqib Irshad
Head of HR, Training & OD
FINCA
Mona Sharif
Senior Team Lead
Konext PVT. LTD
Zohaib Ali
Marketing Manager
Digital Online Devices
Ayesha Shaukat
Social Media Marketing Manager
Ivoke
Babar Ahmed Khan
Territory Sales Manager
Engro Foods
Muzammil Baig
Digital Marketing Manager
IT Services Group
Ali Aziz
CEO
Shopistan
Usman Habib
Recruitment & Training Executive
ACS Synergy (Pvt) Ltd.
Zubair Anjum
Business Excellence Specialist
Nestle Pakistan
Sehrish Azhar
Motivational Speaker & Blogger
Living Upbeat
