Information Security Manager

About the role

As an Information Security Manager you will lead vulnerability assessments and penetration testing for a range of high‑critical web applications and AI platforms across banking, digital, retail and analytics domains. You will work closely with development and DevOps teams to embed security early in the software lifecycle and guide secure design practices.

Key responsibilities

• Perform security, vulnerability assessments and penetration tests on high‑critical web applications and APIs.
• Collaborate with DevOps teams to enable DevSecOps and shift‑left security practices.
• Conduct Dynamic Application Security Testing (DAST), analyse findings and recommend remediations.
• Assess web services and API security, providing guidance to product teams.
• Mentor and guide team members in security testing methodologies.
• Analyse exploitability of vulnerabilities and advise on appropriate remediation levels.
• Report security risk and assessment results to leadership for visibility and decision‑making.

Required profile

• Minimum 6 years of experience in application security, vulnerability assessment or penetration testing.
• Strong knowledge of Windows operating systems and major web browsers.
• Hands‑on experience with security testing tools such as Burp Suite, Nmap and ZAP.
• Familiarity with automated SAST and DAST scanners.
• Understanding of DevSecOps principles and integration with CI/CD pipelines.

Required skills

• Burp Suite
• Nmap
• ZAP
• SAST scanners
• DAST scanners
• API security testing
• Web services security assessment
• Vulnerability assessment
• Penetration testing
• DevSecOps