Manager Security Hardening and Configuration
MCB
Published Date: • Lahore, Pakistan (On-Site)
Description
In this role, you will be responsible for developing and enforcing security configuration policies and standards that strengthen the overall security posture of MCB. You will work closely with cross-functional departments and stakeholders to align security hardening strategies with business objectives and regulatory mandates. The role demands strong leadership and project management skills to effectively guide the team and manage resources in implementing security solutions and risk mitigation strategies. Your analytical skills will be vital in performing risk assessments, generating comprehensive security reports, and proactively addressing vulnerabilities before they impact the organization. The ideal candidate will possess certifications such as CASP+, CCNP Security, OCP Database Security, or equivalent, bringing both technical expertise and a proactive mindset to this pivotal security leadership role.
Education: Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field.
Responsibilities
- Develop, implement, and maintain system hardening policies and procedures for operating systems, networks, POS systems, ATMs, and databases to ensure strong security configurations.
- Lead and manage a team of two security specialists to execute security hardening initiatives and maintain high standards of protection throughout the organization’s infrastructure.
- Manage security configuration tasks in compliance with recognized frameworks, including CIS Benchmarks, DISA STIGs, and zero-trust architecture principles.
- Conduct comprehensive risk analyses and vulnerability assessments to identify potential threats and recommend mitigation strategies aligned with industry best practices and regulatory requirements.
- Ensure adherence to regulatory compliance standards such as PCI DSS, SWIFT CSCF, ISO 27001, and pertinent banking regulations by managing continuous monitoring and auditing processes.
- Collaborate with cross-functional teams, including IT, network operations, and compliance departments, to ensure security hardening measures integrate seamlessly into broader technology and business initiatives.
- Prepare detailed risk analysis and security reports for senior management and key stakeholders to inform decision-making and highlight areas of potential risk.
- Oversee endpoint security management efforts, ensuring all connected devices meet stringent security policies and configuration standards.
- Maintain up-to-date knowledge of emerging security threats, vulnerabilities, and industry developments to continuously improve security hardening methodologies and tools.
- Drive continuous improvement of security architecture by effectively utilizing relevant certifications and expertise to enhance protective measures and foster a culture of security awareness.
- Lead projects and initiatives related to the deployment of new security technologies and controls, managing timelines, deliverables, and resources to ensure successful implementation.
- Mentor and develop team members by providing guidance, training, and performance feedback, fostering professional growth and expertise within the security hardening domain.
Experience
3 Years
Apply By
Required Skills
- Security Configuration Management
- Endpoint Security Management
- Regulatory Compliance management
- Stakeholder Management
- Risk Analysis Reporting
- ISO 27001
- System hardening
- Network Security
- Database Security
Nice to Have Skills
- Project Management
- Leadership