Assistant Manager Security Architecture & Assessments

Job Description

Last Date to Apply:4th June, 2022Employment Type:This is a full-time position.Grade:This is a grade 2 position.Location:This role is based in Islamabad, Pakistan.Flexibility model: HybridAbout the Role:New technology, innovative products/services, diverse business partnerships and the risk of cyber threats provides an exciting opportunity for you to grow in the field of information security. This means the work you do will carry significant importance in achieving organizational objectives through securing the organization and supporting the roll out of secure products for customers.Your Impactful Goals will include:

• As a team member for security architecture, assessments, projects, application security and testing, he/she shall be responsible for ensuring following company goals are met using the available resources:
• Ensure implementation of end to end adequate security in new products, processes, systems and projects based on architecture principles and guidelines
• Ensure security vulnerabilities in network and all applications are identified, reported and timely remediated
• Conduct security reviews of systems and processes identified and prioritized through risk assessments
• Testing security products, applications, APIs and systems to detect security weaknesses
• Testing applications using static and dynamic application security testing (SAST/DAST) techniques, manual processes and automated tools that includes mobile applications, web Applications
• Experience in routing & switching in LAN/WAN architectures, WLAN, radius, SSO/SAML, cloud platform, identity and access management, secure SDLC, Microsoft technologies (Active Directory, IIS, ISA, DNS, SQL) & Linux
• Experience in red-teaming and research potential threats
• Ensure compliance to legal, regulatory & contractual Information Security requirements and internationally recognized standards are integrated as part of business as usual activities

Your Typical Day will look like:

• Explore, understand and scrutinize assigned subject area from security perspective
• Support stakeholders in secure architecture design and deployment for business needs. Guiding on Defensible Security Architecture and assurance of principles and guidelines throughout the infrastructure
• Identify vulnerabilities and security risks; create detailed reports of findings; track and follow up on implementation of recommendations
• Coordinate with relevant stakeholders for resolution of 0-day exploits, security patches, vulnerabilities, corrective, preventive controls for identified issues
• Conduct web/mobile application penetration testing on a timely basis for supporting business targets
• Ensuring information/cyber security from concept to go live and post go live
• Lead continuous assessment of software systems, applications, portals, network and infrastructure to identify the vulnerabilities and risks. Build a plan to mitigate the vulnerabilities and risks identified during assessment exercises
• Oversee and support talent development of the team members to ensure succession planning, mentorship and coaching within the departments resulting in efficiency and effectiveness in their respective areas
• On occasion, extended work hours may be required in cases of extreme urgencies (project work, incidents, etc.)

Your Career Path:Exposure and growth within multiple information security domains leading to Manager/Lead of Security Architecture and Assessment.What were looking for:Education:BS (CS, IT), MS (Information Security) would be preferredCertifications: CISSP, OSCP, ISO27001 certifications would be preferredWork experience:

• 2-4 years in IT/network security, information Security or application security assessment role. Experience in cyber security leadership positions would be preferred
• Telecom industry experience is also

Functional Skills/Knowledge Areas:

• Sound understanding of infrastructure and network security concepts
• Knowledge and experience in secure application development
• Should have a strong understanding of open digital architecture
• Mobile/web application penetration testing
• Excellent communication, presentation and reporting Skills
• Strong team builder and stakeholder management skills
• Ability to work effectively with people at all levels in the organization
• Ability to effectively operate with flexibility in a fast paced, constantly evolving team environment and ability to navigate through ambiguity and work independently
• Should be able to work under pressure to troubleshoot in minimum possible time
• Be innovative, having analytical mind set and solution finding approach
• Be comfortable working on odd timings and weekends in cases of urgent requirements.

Why should you join us at Telenor?At Telenor Pakistan, weprovide you theplatformto work in a challenging and rewardingenvironment tobecome a skilled professional in your chosen field of interest.Asone of thetop employersof the country, we enable you to realize your dreams in acollaborativeenvironment of diversity and openness to new mindsets.As an equal employment opportunity provider, Telenor Pakistan makes all decisions of employment purely based on merit irrespective of race, caste, gender, creed, color, religion, sex, national origin,ordisability.

Keyskills :