Cyber Security Assurance Manager (Info Sec)

About the role

The Cyber Security Assurance Manager will lead the enterprise‑wide security assurance programme, ensuring that vulnerabilities are identified, remediated and that applications and infrastructure meet the highest security standards. This role reports to senior IT leadership and works across multiple technology domains.

Key responsibilities

• Own and operate the vulnerability management programme using scanners such as Tenable, Nessus and Qualys, driving assessment, remediation tracking and reporting.
• Manage file integrity monitoring (FIM), database activity monitoring (DAM) and firewall assurance activities, coordinating remediation and closure of gaps.
• Lead application security testing (SAST, DAST, SCA) and promote secure coding practices using tools like Fortify.
• Oversee ATM security, including vulnerability assessments, penetration testing, hardening and compliance monitoring.
• Coordinate security compliance monitoring for baselines, configuration and regulatory standards (PCI, ISO 27001, CBE) with automated scanning and reporting.
• Conduct security assessments for technologies such as WAF, NGFW, IPS, ISE, MFA, EDR, SD‑WAN, routers and switches.
• Integrate security controls into the DevSecOps pipeline, automating security gates in CI/CD.
• Produce assurance reports, metrics and audit evidence to maintain audit readiness.

Required profile

• Minimum 8 years of IT and information security experience, preferably in a banking environment.
• Demonstrated leadership in vulnerability management, application security and security assurance programmes.
• Bachelor’s degree in Computer Science, Engineering or related field; Master’s degree preferred.
• Relevant certifications such as CISSP, CEH/OSCP, GWAPT or GPEN are a plus.

Required skills

• Vulnerability management tools: Tenable, Nessus, Qualys.
• Application security testing: SAST, DAST, SCA, Fortify.
• Penetration testing frameworks: OWASP, PTES.
• Network security: firewalls, NGFW, IPS, WAF, SD‑WAN.
• DevSecOps integration and CI/CD pipelines.
• Security compliance: PCI, ISO 27001, CBE.
• Audit evidence preparation and security reporting.