Unit Head - Application Security (AVP / VP)

"The Nation's Bank", National Bank of Pakistan aims to support the financial well-being of the Nation along with enabling sustainable growth and inclusive development through its wide local and international network of branches. Being one of the leading and largest banks of Pakistan, National Bank of Pakistan is contributing significantly towards socioeconomic growth in the country with an objective to transform the institution into a future-fit, agile and sustainable Bank.

In line with our strategy, the Bank is looking for talented, dedicated and experienced professional(s) for the following position inthe area of Risk Management based in Karachi.

The individuals who fulfill the below basic-eligibility criteria may apply for the following position:

Position / Job Title:
Unit Head - Application Security (AVP / VP)

Reporting to:
Wing Head - Application and Database Security

Educational /Professional Qualification:

• Minimum Graduation in Computer Science and / or Computer Engineering and / or Cybersecurity and / or Information Technology from a local or international university / college / institute recognized by the HEC of Pakistan
• Candidates have Masters in Information Security or have any other relevant professional certification(s) such as PJPT, OSCP, OSCP+, GPEN, OSWE, CWRT, OSEP, CISSP etc. will be preferred

Experience:

• Minimum 06 years of experience in IT and / or Secure Software Development and / or Information Security out of which 03 years in applications security and / or assessment

• Candidate having relevant working experience in banking or large scale organization will be preferred

Other Skills / Expertise / Knowledge Required:

• Understanding of OWASP Top 10 & hands-on over essential offensive security tools and techniques

• Good interpersonal skills & active team player with an ability to prioritize and meet strict deadlines

Outline of Main Duties / Responsibilities:

• To help organization evolve its application security function and services
• To ensure Secure Software Development Life Cycle is followed within the organization
• To review security design / architecture of business applications
• To perform information security risk assessments of business applications before deployment in a timely manner
• To oversee and perform application security control assessment, vulnerability assessment and penetration testing
• To be responsible for overseeing code reviews of applications and provide guidance to address the highlighted issues
• To oversee the application security issues and remediation process
• To provide guidance on application vulnerability scanning and penetration testing to security team and junior security engineers
• To manage vulnerability assessment through tools including static and dynamic analysis
• To review vendor security activities to ensure their software development meets organizations standards
• To discover application security exposures and provide guidance to develop mitigation plans
• To effectively and timely coordinate, plan and respond to internal audit, external audit and regulators, wherever applicable and ensure that related audit findings are timely closed
• To provide necessary information security guidance and support to the internal and external stakeholders
• To provide relevant training to the Application Security team and assign appropriate resources on projects and functions
• To update the existing policies, standards and controls list as per security standards and regulatory requirements
• To develop new policy or procedure or standard document when and where needed
• To assist Wing Head and Divisional Head in managing cyber defense at application layer
• To perform any other assignment as assigned by the supervisor(s)

Place of Posting:

Karachi

Assessment Interview(s)

Only shortlisted candidates strictly meeting the above-mentioned basic eligibility criteriawill be invited for panel interview(s).

Employment Type:

The employment will be on contractual basis for three years which may be renewed ondiscretion of the Management. Selected candidates will be offered compensationpackage and other benefits as per Banks Policy / rules.

Apply within 10 working days from the date of this job posting.

Applications received after due date will not be considered in any case. No TA / DA will be admissible for interview.

National Bank of Pakistan is an equal opportunity employer and welcomes applications from all qualified individuals, regardless of gender, religion, or disability.