IT Security Assurance Senior Specialist

About the role

The IT Security Assurance Senior Specialist will support the bank’s security assurance function by implementing security solutions and conducting assessments that protect applications, systems, and digital platforms. This role embeds security throughout the software development lifecycle, digital transformation projects, and third‑party solutions.

Key responsibilities

• Implement enterprise information assurance standards, policies and procedures aligned with regulatory and industry requirements.
• Perform security assessments of web, mobile, API, cloud‑native and digital platform applications.
• Integrate security controls into SDLC and DevSecOps pipelines, and conduct design and code reviews.
• Validate remediation of findings from vulnerability scans, penetration tests and audits.
• Conduct vulnerability scanning, threat modeling and risk assessments across IT systems.
• Participate in third‑party and vendor security assessments.
• Support compliance with ISO 27001, NIST, OWASP, PCI DSS and local regulations.
• Deploy, configure and maintain security technologies such as WAF, IDS/IPS, endpoint security and encryption tools.
• Contribute to incident response activities, including investigation, containment and recovery.

Required profile

• Bachelor’s degree in Computer Science, Information Technology or a related field.
• Minimum 4 years of experience in information security roles.

Required skills

• Web, mobile, API and cloud‑native application security.
• Vulnerability scanning and penetration testing.
• Threat modeling and risk assessment.
• Design and code review for security vulnerabilities.
• Integration of security controls into SDLC and DevSecOps pipelines.
• WAF, IDS/IPS, endpoint security and encryption tools.
• Compliance frameworks: ISO 27001, NIST, OWASP, PCI DSS.
• Incident response and remediation validation.