Cyber Security Assurance Manager (Info Sec)

Summary of Duties:

• Responsible for managing and implementing the cybersecurity assurance programme. including vulnerability management, application security testing, penetration testing, and security compliance monitoring to protect enterprise systems and applications from security threats.
• Manage vulnerability management programme using Scanners for comprehensive vulnerability scanning, assessment, remediation tracking, and reporting ensuring effective vulnerability management across the enterprise.
• Manage and oversee FIM, DAM and firewall assurance operations, coordinating teams, tracking remediation, and ensuring timely closure of identified security gaps.
• Lead application security testing (SAST) , dynamic application security testing (DAST), software composition analysis (SCA), and secure coding practices ensuring secure application development.
• Oversee ATM security programme for ATMs including vulnerability assessment, penetration testing, security hardening, and compliance monitoring ensuring ATM security resilience.
• Coordinate security compliance monitoring including baseline compliance scanning for security baselines, configuration compliance, and regulatory compliance with automated scanning and compliance reporting.
• Lead IT Security assessment practice for multiple technologies including WAF, NGFW, IPS, ISE, Device Control, MFA, Web Proxy, Mail Proxy, EDR, Application Control, Sandbox, Routers, Switches, SD-WAN .. etc to Validate control effectiveness through configuration reviews, threat-based testing, rule analysis, logging verification, and use-case validation as per standards and industry best practice.
• Integrate security into DevSecOps pipeline including automated security testing (SAST, DAST, SCA), security gates, and pipeline automation ensuring secure CI/CD.
• Develop security assurance reports and metrics, prepare evidence for audits, and ensure audit readiness.

Minimum Qualifications

• BSC in Communication Engineering or computer science
• CISSP (Certified Information Systems Security Professional) certificate is preferred.
• CEH (Certified Ethical Hacking) or OSCP preferred
• GIAC certifications (GWAPT, GPEN) preferred
• Master's degree in Information Security or related field preferred

Minimum Experience:

• 8+ Years of IT & Information Security experience with demonstrated leadership in vulnerability management, application security, and security assurance programmes

Job Specific Skills

• Vulnerability Management experience with enterprise tools (Tenable, Nessus, Qualys)
• Application Security Testing (SAST, DAST, SCA) experience with Fortify and similar tools
• Penetration testing methodologies and frameworks (OWASP, PTES)
• Security compliance monitoring and baseline management
• DevSecOps integration and CI/CD security
• Network security (Firewalls, IPS, WAF) management
• Security reporting and metrics development
• Audit evidence preparation and regulatory compliance (CBE, PCI, ISO 27001)
• Banking environment experience
• Risk Management
• Strategic planning and programme management
• Team leadership and mentoring
• Stakeholder management at executive level