IT Security Assurance Specialist

About the role

The IT Security Assurance Specialist supports the bank’s security function by implementing solutions and conducting assessments that protect applications, systems, and digital platforms throughout the software development lifecycle.

Key responsibilities

• Implement enterprise information assurance standards, policies and procedures aligned with regulatory and industry requirements.
• Perform security assessments of web, mobile, API, cloud‑native and digital platforms, including vulnerability scans, threat modeling and risk assessments.
• Integrate security controls into SDLC and DevSecOps pipelines, conduct design and code reviews, and validate remediation of findings.
• Collaborate with development, DevOps and operations teams to address risks and strengthen application security.
• Support third‑party vendor assessments and compliance initiatives for ISO 27001, NIST, OWASP, PCI DSS and local regulations.
• Deploy, configure and maintain security technologies such as WAF, IDS/IPS, endpoint security and encryption tools, and contribute to incident response activities.

Required profile

• Bachelor’s degree in Computer Science, IT or a related field.
• Up to 4 years of experience in information security roles.
• Strong understanding of security assurance frameworks and regulatory requirements.

Required skills

• Vulnerability scanning and penetration testing.
• Threat modeling and risk assessment.
• Design and code review for security vulnerabilities.
• Experience with security technologies: WAF, IDS/IPS, endpoint security, encryption tools.
• Knowledge of ISO 27001, NIST, OWASP, PCI DSS standards.