Manager-Security Assurance.Information Security Group-ISG at Mashreq

India

<p style="margin-left: 0in;"><strong><u>Job Purpose :</u></strong></p><p style="margin-left: 0in;">The Manager-Security Assurance role is integral to Mashreq Global Services' Information Security Group (ISG). This role is responsible for strengthening the security posture of modern applications, APIs, cloud-native platforms, and AI-powered systems. The successful candidate will integrate security throughout the Software Development Lifecycle (SDLC), securing applications and APIs, implementing DevSecOps practices, and governing the secure adoption of Artificial Intelligence technologies.</p><div style="direction: ltr;"><p>&nbsp;</p><p><strong><u>Key Responsibilities for the Role</u></strong></p><p>&nbsp;</p><p>Conduct intrusive penetration testing and vulnerability assessments on Applications and APIs.</p><p>Assess security risks associated with AI-powered applications, LLM integrations, AI agents, and RAG architectures.</p><p>Automate security tasks to ensure continuous integration, continuous delivery (CI/CD) processes are secure and efficient.</p><p>Utilize advanced attack techniques and tools to simulate real-world cyberattacks, assess security gaps, and recommend mitigation actions.</p><p>Design, implement, and maintain secure APIs and application security practices within the development lifecycle, integrating security testing tools at every stage.</p><p>Collaborate with development and operations teams to ensure the incorporation of security controls early in the software development process.</p><p>Perform security audits and code reviews to identify security flaws in the development pipeline.</p><p>Identify and evaluate security risks related to software deployments and automation processes.</p><p>Develop and implement risk management strategies to reduce vulnerabilities in the development and operational environments.</p><p>Provide actionable feedback and training to teams to improve secure coding and configuration practices.</p><p>Work with cross-functional teams to integrate security throughout the development lifecycle.</p><p>Prepare detailed reports, including risk assessments, security vulnerabilities, and actionable remediation strategies for technical and non-technical stakeholders.</p><p>Stay updated on emerging security threats and vulnerabilities and implement best practices for secure development.</p></div><p style="margin-left: 0in;">&nbsp;</p><div style="direction: ltr;"><p><strong><u>Qualifications</u></strong></p><p>Bachelor’s or master’s degree in computer science, Information Security, Cybersecurity, or a related discipline.</p><p>6 to 10 years of progressive experience in Application Security, Penetration Testing, and API security roles.</p><p>Relevant certifications (e.g., OSCP, CEH, API Security certifications) are highly desirable.</p><p>Proven experience in API security, Application security, and AI Security practices.</p><p>Proficiency with security testing tools like Burp Suite, SAST, SCA, DAST, IAST, and dynamic testing tools.</p><p>Familiarity with OpenAPI Specifications, OAuth, SAML and API Gateway, including enforcing AAA.</p><p>Strong experience with programming/scripting languages (e.g., Python) for automation and security integration.</p><p>Familiarity with security-focused DevOps tools (e.g., Azure DevOps, Docker, Kubernetes).</p></div> <h3>Responsibilities</h3><ul><li> Conduct Vulnerability Assessments and Penetration Testing</li><li> Secure API and Application Security</li><li> Perform Threat Modelling and Secure Architecture Reviews</li><li> Automate DevSecOps Processes</li><li> Assess and Mitigate Risks for Traditional and AI-based Applications</li><li> Govern Secure Adoption of AI Technologies</li><li> Collaborate with Development Teams to Integrate Security into SDLC</li><li> Stay Updated with Emerging AI Use Cases and Security Best Practices</li><li> Provide Expertise in API Security, Application Security, and AI Security</li><li> Ensure Compliance with Regulatory and Compliance Frameworks</li></ul> <h3>Qualifications</h3><ul><li> Bachelor's or Master's Degree in Computer Science, Information Security, Cybersecurity, or a Related Discipline</li><li> 6 to 10 Years of Progressive Experience in Application Security, Penetration Testing, and API Security Roles</li><li> Relevant Certifications (e.g., OSCP, CEH, API Security Certifications) Highly Desirable</li><li> Proven Experience in API Security, Application Security, and AI Security Practices</li><li> Proficiency with Security Testing Tools (e.g., Burp Suite, SAST, SCA, DAST, IAST)</li><li> Familiarity with OpenAPI Specifications, OAuth, SAML, and API Gateway</li><li> Strong Experience with Programming/Scripting Languages (e.g., Python) for Automation and Security Integration</li><li> Familiarity with Security-focused DevOps Tools (e.g., Azure DevOps, Docker, Kubernetes)</li><li> Experience in the Banking or Financial Services Industry an Advantage</li><li> Strong Analytical and Problem-Solving Skills</li></ul> <br><div> The leading financial institution in MENA </div> <div> <span>While more than half a century old, we proudly think like a challenger, startup, and innovator</span> </div> <div> <span>in banking and finance, powered by a diverse and dynamic team who put customers first.</span> </div> <div> <span>Together, we pioneer key innovations and developments in banking and financial services.</span> </div> <div> <span>Our mandate? To help customers find their way to Rise Every Day, partnering with them through</span> </div> <div> <span>the highs and lows to help them reach their goals and unlock their unique vision of success.</span> </div> <div> <span>Delivering superior service to clients by leading with innovation, treating colleagues with dignity and fairness while pursuing opportunities that grow shareholders value.&nbsp;</span> </div> <div> <span>We actively contribute to the community through responsible banking in our mission to inspire more people to Rise.</span> </div>