Manager (Information Security Analyst)

Punjab Information Technology Board

Lahore , Pakistan

Apply Now

Posted 15 hours ago 1 views Report Job

This role involves conducting comprehensive security assessments, audits, and incident investigations to identify vulnerabilities and mitigate risks across the organization. The candidate will be responsible for implementing and managing a variety of security controls such as firewalls, IDS/IPS, and endpoint protection solutions, ensuring alignment with industry standards. The position requires developing and maintaining security policies, procedures, and documentation while keeping up to date with emerging threats and new technologies. Collaboration with IT teams is essential to enforce best practices, deliver employee security awareness training, and contribute to disaster recovery planning efforts.

Key Responsibilities
- Conduct vulnerability assessments and penetration testing on web applications, network infrastructure, and other critical components.
- Utilize penetration testing methodologies including OWASP, CWE, and MITRE frameworks, employing tools such as Nexpose, Nessus, Burp Suite, and nmap.
- Perform audits across applications, networks, databases, web servers, and operating systems to ensure security compliance.
- Quickly assimilate security requirements and implement policies and controls in accordance with global standards like ISO, PCI DSS, CIS, and NIST.
- Develop, implement, and maintain Information Security (IS) policies, procedures, and standards.
- Hands-on experience with Identity and Access Management (IAM), Privileged Access Management (PAM), and Zero Trust Network Access (ZTNA) solutions.
- Conduct firewall rule audits, optimize configurations, perform cleanup, and review overall security posture.
- Prepare detailed reports and communicate findings effectively, demonstrating expertise in SOC 1 and SOC 2 reporting.
- Coordinate with systems, network, and application teams to remediate identified security gaps and enhance overall security posture.

Required Qualifications
- Proven experience in conducting security assessments, penetration testing, and audits across multiple environments.
- Strong knowledge of security frameworks and standards such as ISO, PCI DSS, CIS, and NIST.
- Proficiency in penetration testing methodologies and tools including OWASP, CWE, MITRE, Nexpose, Nessus, Burp Suite, and nmap.
- Experience in developing and implementing security policies, procedures, and standards.
- Hands-on expertise with IAM, PAM, and ZTNA technologies.
- Ability to perform firewall audits and optimize security configurations.
- Strong report writing, communication, and presentation skills, particularly related to SOC 1 and SOC 2 compliance.
- Ability to collaborate effectively with cross-functional IT teams to address security issues.

Preferred Qualifications and Benefits
While not explicitly stated, candidates with experience in disaster recovery planning and employee security awareness training will be highly valued. The role offers the opportunity to work with cutting-edge security technologies and frameworks, contributing to a robust security posture aligned with global standards.

Applications are invited until 04-Nov-2026.

Job Details

Total Positions:

1 Post

Job Shift:

First Shift (Day)

Job Type:

Contract

Job Location:

Lahore, Pakistan

Gender:

No Preference

Age:

18 - 65 Years

Minimum Education:

Master

Degree Title:

Masters/Bachelors (Hons) (16 years), 16 Years of Education, Advanced Computing, Computer Engineering/Sciences, Electrical Engineering/Sciences, Information Technology, Artificial Intelligence, Computer Engineering/Sciences 1, Software Engineering 1, Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Wireless Security Professional (CWSP)

Career Level:

Mid-Level

Experience:

10 Years - 13 Years

Apply Before:

Oct 24, 2026

Posting Date:

Oct 18, 2026