NBP Funds Management Limited Jobs Assistant Manager Information Security

October 24, 2026 admin

NBP Funds Management Limited Jobs Assistant Manager Information Security :

Organization: NBP Funds Management Limited

Vacancy Announcement | Assistant Manager Information Security | Karachi

WE’RE HIRING! ASSISTANT MANAGER INFORMATION SECURITY

Job Description:

Monitor and assess the organization’s IT infrastructure to ensure it adheres to security standards and policies.
Perform hands-on penetration testing of web applications, mobile applications (Android/iOS), APIs, network infrastructure, and Active Directory environments.
Conduct vulnerability assessments other relevant security testing.
Identify, exploit, validate, and document security vulnerabilities in accordance with industry standards and approved testing methodologies.
Perform security testing aligned with OWASP Top 10, OWASP Web Security Testing Guide (WSTG), OWASP API Security Top 10, and relevant mobile security testing standards.
Analyze and prioritize vulnerabilities based on severity, exploitability, business impact, and exposure and Coordinate with IT, Development, and external vendors to facilitate timely remediation.
Execute social engineering attacks, including phishing campaigns, simulating real-world attack scenarios to evaluate employee awareness and organizational defenses.
Engagement with Vendors on reported vulnerabilities by third party that are true and actionable. Filter out the reported vulnerabilities that turn out to be false positives.
Conduct security awareness training programs for employees, educating them on best practices and emerging threats.
Assist the Manager Information Security in ongoing activities, including the development, review, implementation, and enforcement of Information Security policies, procedures, standards, and guidelines in alignment with industry best practices and applicable regulatory requirements.

Desirable Education, Skills Knowledge and Experience:

Bachelor’s or Master’s degree in Cybersecurity, Information Security, Computer Science, or a relevant discipline from an HEC-recognized institution.
Minimum 3–5 years of hands-on experience in VAPT, penetration testing, or application security.
A recognized VAPT certification is desirable, such as OSCP, eWPT, PNPT, CEH Practical, or an equivalent certification.
Working knowledge of Network, Linux, Windows, Active Directory, HTTP/S, REST APIs, authentication, authorization, and common web technologies.
Strong knowledge of security frameworks, standards, and regulations.
Effective communication and interpersonal abilities.

Location: Head Office, Karachi

Department: Information Security

How to Apply:

Email your resume and cover letter to [email protected] with the position in subject line or apply via the following link Apply Online

Ethnicity, Gender, Religion and Disability need not to be an obstacle to success. We encourage and promote representations from all segments of the society.