
Global Cybersecurity
4 weeks ago
The Global Cybersecurity/SOC Manager will play a key role in maintaining and continuously improving FINCA's cybersecurity, monitoring and control framework, ensuring that effective security risk, threat, vulnerability and incident management practices are incorporated into IT and business practices within their FIF and subsidiaries.
Developing and facilitating security logs and incident management, analytics and reporting capacities is a primary focus of the position. Working closely with global, regional and local Information Security and IT resources to design, test, implement effective security controls is another key responsibility of the position.
Accountabilities- Communicate and collaborate with internal clients to contribute to security direction, and provide influence and technical guidance on current and future technical security directions.
- Act as a cybersecurity subject matter expert throughout projects lifecycle, including functional requirements, design specifications, testing and quality assurance, implementation and support.
- Provide input to the annual Information Security budget cycle.
- Ensure that security requirements are identified early on and are being incorporated into all projects/applications:
- Investigate, recommend, evaluate, deploy and integrate security tools and techniques to improve our ability to protect corporate assets and infrastructure.
- Develop and maintain documentation of relevant IT systems and security controls.
- Assess and capture security requirements within context of enterprise application architecture.
- Ensure that application development and deployment meet FINCA security standards.
- Provide security input to design and application architectural reviews.
- Report on risks, risk mitigations, and residual business risks.
- Develop comprehensive and accurate reports and presentations for both technical and executive audiences.
- Develop recommendations for improvements.
- Monitor appropriate sources for newly identified threats and vulnerabilities.
- Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel.
- Recognize and safely utilize attacker tools, tactics, and procedures.
- Develop methodologies to enhance red teaming processes.
- Assist with scoping prospective engagements, leading engagements from kickoff through remediation, and mentoring less experienced staff.
- Execute and/or lead (when required) red team assessments to highlight gaps impacting organization security posture.
- Research new/emerging security threats, vulnerabilities and exploit techniques.
- Respond to new attack surfaces and help implement new requirements as needed.
- Develop, manage, and maintain security testing industry frameworks and best practices: Cloud Security Alliance (CSA), NIST, SANS, CIS.
- Partner with Global Information Security and Business Continuity team members across the network to drive secure outcomes based on industry best practices.
- Play a key role in Global Cybersecurity Team on developing threat modeling and new detection techniques, based on trending attack surfaces.
- Provide support to business digital projects through entire project lifecycle (threat modeling, requirements definition, verification and validation).
Qualifications
- Bachelor's Degree in a technical discipline or equivalent work experience.
- Certifications are not required, but will be considered in the evaluation process. Applicable certifications include: SANS, Splunk, CISSP.
- Knowledge of security and control frameworks (such as ISO 27001, CobiT, NIST).
- Security certifications (CISSP, GIAC, CEH, CISM, OSCP) will be an asset.
Experience
- Minimum 4-6 years of experience in a Security Manager/Analyst Role.
- Experience in a financial institution will be considered as a plus.
- Experience working in a large international organization or network will be considered as a plus.
- Experience with IT security assessments.
- Experience with common assessment tools (examples Qualys, Tenable, Rapid7).
- Experience communicating assessment results to audiences with diverse technical proficiency.
- Experience constructively articulating business impact of vulnerabilities to various stakeholders.
- Experience with correlating and analyzing logs and events from various sources (e.g. Vulnerability Scanning, Virus Protection, SIEM).
- Experience with producing and customizing security queries, reports and dashboards from various sources (e.g. Vulnerability Scanning, SIEM, Virus Protection).
- Experience conducting application security reviews preferred.
- Experience with scripting languages desired.
Knowledge and Skills
- Able to explain and deliver technical solutions in a practical way.
- Able to manage simultaneously multiple projects involving various stakeholders and to deliver results within deadlines.
- Work well in a team environment including cross-functional and cross-organizational teams maintaining composure in difficult situations with a professional attitude and ownership mindset.
- Excellent communication (oral and written) and interpersonal skills.
- Proven ability to delegate and to empower teams.
- Ability to be a strongly credible ambassador for the FIF brand, including making presentations, and able to establish respect and credibility with media outlets.
- Strong skills in analysis, problem-solving, and resolving disputes.
- Strong technical reporting skills.
- High degree of initiative and ability to work with little supervision.
- Knowledge of Windows, Linux, and Unix operating systems. Hands-on experience a plus.
- High level of personal integrity, and the ability to professionally handle confidential matters with appropriate judgment and maturity.
- Penetration testing skills are considered a plus.
- Eager to learn and expand cybersecurity knowledge.
Language Skills
- Fluency in English.
- Fluency in other FINCA working languages, such as Spanish, French, or Russian is a plus.
- Availability to travel up to 50% of the time.
If you are interested, please apply now.
#J-18808-Ljbffr-
Cybersecurity Consultant
3 weeks ago
Lahore, Punjab, Pakistan INTECH Automation & Intelligence Full timeCybersecurity Consultant - GRC (Product)Join to apply for the Cybersecurity Consultant - GRC (Product) role at INTECH Automation & IntelligenceContinue with Google Continue with GoogleCybersecurity Consultant - GRC (Product)Join to apply for the Cybersecurity Consultant - GRC (Product) role at INTECH Automation & IntelligenceAbout The JobJoin our Team - Your...
-
Global Information Systems Auditor
4 weeks ago
Lahore, Punjab, Pakistan FINCA Impact Finance Full timeGlobal Information Systems Auditor FINCA Impact Finance, Pakistan FINCA Impact Finance (FIF) believes in the power of Inclusive Finance.FINCA Impact Finance is a global leader of responsible financial services. We are comprised of 17 full-service banks and microfinance institutions and a holding/shared service company and we serve more than 2.8 million...
-
Senior Information Security Specialist
2 weeks ago
Lahore, Punjab, Pakistan beBeeCybersecurity Full time $80,000 - $100,000Seeking Cybersecurity ExpertWe are looking for a seasoned cybersecurity expert to join our team. The ideal candidate will have a strong background in information security, risk management, and compliance.The successful candidate will be responsible for developing and implementing robust security frameworks, identifying vulnerabilities, mitigating risks, and...
-
SecOps Analyst
4 weeks ago
Lahore, Punjab, Pakistan Atheneum Partners (Private) Limited Full timeWe respect the privacy of candidates for employment. This Privacy Notice sets forth how we will use the information we obtain when you apply for a position through this career site. If you do not consent to the terms of this Privacy Notice, please do not submit information to us.SecOps Analyst / IT AuditorApply remote type Hybrid locations Lahore time type...
-
Key Account Manager
4 weeks ago
Lahore, Punjab, Pakistan NETS-International Group Full timeGet AI-powered advice on this job and more exclusive features.NETS is a leading global Solutions Provider and Systems Integrator dedicated empowering the future through our integrated approach and commitment to delivering Innovative, Intelligent, and Integrated Solutions (NETS 3 I's) Effectively, Efficiently, and Economically (NETS 3 E's). Our service...
-
Security and Compliance Analyst
10 hours ago
Lahore, Punjab, Pakistan Nakisa Full timeJoin to apply for the Security and Compliance Analyst role at NakisaJoin to apply for the Security and Compliance Analyst role at NakisaAbout NakisaNakisa stands as a global leader in enterprise business solutions, specializing in Human Resources, Financial Management, and Real Estate. We are dedicated to delivering innovative, forward-thinking, and robust...
-
GTM Specialist
2 hours ago
Lahore, Punjab, Pakistan Devsinc Full timeRole Overview We're looking for a results-driven GTM Specialist/Strategist to be part of our outbound team, drive pipeline growth, and align outreach with Devsinc's go-to-market (GTM) objectives in the Global Marketing Department. You will play a strategic and executional role in identifying opportunities, generating qualified leads, and refining messaging...
-
IT Security Engineer
4 weeks ago
Lahore, Punjab, Pakistan EWS Group Full timeContour Software has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a...
-
IT Security Engineer
2 weeks ago
Lahore, Punjab, Pakistan Contour Software Full timeAbout ContourContour Software has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries....
-
Manager Business Operations
4 weeks ago
Lahore, Punjab, Pakistan 10Pearls, LLC Full timeCompany Overview10Pearls is an end-to-end digital technology services partner helping businesses utilize technology as a competitive advantage. We help our customers digitalize their existing business, build innovative new products, and augment their existing teams with high-performance team members. Our broad expertise in product management, user...