SalariesSign in
AboutPrivacyTerms
Cybersecurity Specialist
DDigiU Pty Ltd

Cybersecurity Specialist

PakistanRemoteFull-time
Posted Oct 3
Apply

Job Description

Position Summary:

  • The Cybersecurity Expert will be responsible for implementing, maintaining, and auditing the organization’s information security framework, with a strong focus on ISO/IEC 27001 compliance. This role ensures that the company’s data and systems are secure from threats, and operates within the required legal and regulatory guidelines.

    Key Responsibilities:
    • Implement and maintain the ISO/IEC 27001 Information Security Management System (ISMS).
    • Conduct risk assessments and develop mitigation strategies for cyber threats and vulnerabilities.
    • Ensure continuous improvement of information security policies, procedures, and controls.
    • Perform internal audits and prepare the organization for external ISO 27001 audits and certifications.
    • Manage and resolve cybersecurity incidents, coordinating response plans and investigations.
    • Provide guidance on secure development practices and secure system architecture.
    • Train employees and departments on information security awareness and best practices.
    • Collaborate with IT, legal, and compliance teams to ensure security is embedded across operations.
    • Monitor security tools, log data, and system alerts to detect and respond to anomalies.

    Penetration Testing
    • Conduct application, API, mobile, network, and cloud penetration tests on internal and client systems.
    • Simulate real-world attack scenarios to uncover exploitable vulnerabilities.
    • Develop custom scripts, payloads, or tools to support advanced testing needs.
    • Document findings with clear proof-of-concepts (PoCs) and technical impact analysis.

    Vulnerability Assessment & Management
    • Perform ongoing vulnerability scanning using industry-standard tools (e.g., Nessus, Qualys, OpenVAS, Burp Suite).
    • Analyze scan results, validate findings, and prioritize remediation based on risk levels.
    • Track remediation progress and provide guidance to development and DevOps teams.
    • Maintain a continuous vulnerability management lifecycle including discovery, analysis, reporting, and verification.

    Security Review & Advisory
    • Collaborate with software development and DevOps teams to conduct secure code reviews and architecture assessments.
    • Provide recommendations for secure design, configuration, and coding practices.
    • Support clients by explaining vulnerabilities, associated risks, and mitigation strategies in clear, understandable language.

    Monitoring & Threat Intelligence
    • Monitor emerging threats, exploits, and security best practices to keep assessment methodologies up to date.
    • Integrate threat intelligence into testing strategies to mimic current attacker techniques (TTPs).

    Documentation & Reporting
    • Prepare detailed penetration test reports, executive summaries, and risk-based recommendations.
    • Maintain accurate records of assessments, testing plans, methodologies, and remediation efforts.
    • Present findings to both technical and non-technical stakeholders, internal and external.

    Requirements:
    • 5+ years of experience in a cybersecurity role, with hands-on ISO 27001 implementation and auditing.
    • Certified ISO/IEC 27001 Lead Implementer or Auditor (mandatory).
    • Strong understanding of risk assessment, GRC frameworks, and security operations.
    • Proficient in tools and technologies such as SIEM, IDS/IPS, vulnerability scanners, and endpoint protection.
    • Excellent documentation and reporting skills.
    • Bachelor’s degree in Cybersecurity, IT, or a related field; relevant certifications (CISSP, CISA, etc.) preferred.

Originally posted on Himalayas

View job

E-EFMP DevSecOps Engineer

DecisionPoint Corporation

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Cloud Security Engineer/Architect

Tier One Technologies

  • United States
  • Remote
Apply
Oct 3
View job

Cyber Incident Response Analyst

Fever

  • Argentina
  • Remote
  • Full-time
Apply
Oct 3
View job

AI Red Team Specialist - Remote | Upto $22/hr

mercor

  • United Kingdom
  • Remote
  • Full-time
Apply
Oct 3
View job

Senior Cybersecurity Professional, Vulnerability Management

Mondelēz International

  • Greece
  • Remote
  • Full-time
Apply
Oct 3
View job

Assistant Manager - Security Assurance.MGN Egy - Information Security Governance

Mashreq

  • Egypt
  • Remote
  • Full-time
Apply
Oct 3
View job

Information Security Engineer - Microsoft Purview Specialist

The University of Chicago Medicine

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Security Compliance Engineer

Yuno

  • Argentina
  • Remote
  • Full-time
Apply
Oct 3
View job

Security Engineer, Vulnerability Management

Yum! Brands

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Security Analytics Engineer L5

Netflix

  • Poland
  • Remote
  • Full-time
Apply
Oct 3
View job

Security and Compliance Engineer_Offshore

Photon

  • India
  • Remote
  • Full-time
Apply
Oct 3
View job

Security Engineer, Web Application Security

Yum! Brands

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job
S

Security System Requirements Engineer

Scalian

  • Spain
  • Remote
  • Full-time
Apply
Oct 3
View job

JUNIOR SERVICENOW CONSULTANT – GRC (x2) | REMOTE

Leading Edge

  • Pakistan
  • Remote
  • Contract
Apply
Oct 3
View job

IT Security Administrator

Bitwarden

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Senior Manager – Data Privacy (Mashreq Global Network Egypt)

Mashreq

  • Egypt
  • Remote
  • Full-time
Apply
Oct 3
View job

Staff AI Security Architect

Datavant

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Cloud Security Engineer

Datavant

  • Ireland
  • Remote
  • Full-time
Apply
Oct 3
View job

Sr Cybersecurity Engineer (JP)

QVC

  • Japan
  • Remote
  • Full-time
Apply
Oct 3
View job

Cyber Security Specialist Lead

Franciscan Health

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Data Security Compliance Director

Syllo

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Information Systems Security Engineer (ISSE)

CACI International Inc

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Analyste en sécurité applicative et DevSecOps (Employed or freelance)

EngiFlex

  • Belgium
  • Remote
  • Full-time
Apply
Oct 3
View job
S

Senior Incident Response Analyst, MDR

Sophos

  • Canada
  • Remote
  • Full-time
Apply
Oct 3
View job

International AI Security Study: Video & Voice Research Participant

Your Personal AI

  • Argentina
  • Remote
  • Contract
Apply
Oct 3
View job

Network Security Engineer

Google Fiber

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Access Engineer & IAM Auditor

Growe Talents

  • Worldwide
  • Remote
  • Full-time
Apply
Oct 3
View job
T

Security Engineer

The Trevor Project

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Senior Security Engineer

Pacvue

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job
D

Cybersecurity Specialist

DigiU Pty Ltd

  • Pakistan
  • Remote
  • Full-time
Apply
Oct 3
PreviousPage 65 of 126Next
DDigiU Pty Ltd

Cybersecurity Specialist

PakistanRemoteFull-time
Posted Oct 3
Apply

Job Description

Position Summary:

  • The Cybersecurity Expert will be responsible for implementing, maintaining, and auditing the organization’s information security framework, with a strong focus on ISO/IEC 27001 compliance. This role ensures that the company’s data and systems are secure from threats, and operates within the required legal and regulatory guidelines.

    Key Responsibilities:
    • Implement and maintain the ISO/IEC 27001 Information Security Management System (ISMS).
    • Conduct risk assessments and develop mitigation strategies for cyber threats and vulnerabilities.
    • Ensure continuous improvement of information security policies, procedures, and controls.
    • Perform internal audits and prepare the organization for external ISO 27001 audits and certifications.
    • Manage and resolve cybersecurity incidents, coordinating response plans and investigations.
    • Provide guidance on secure development practices and secure system architecture.
    • Train employees and departments on information security awareness and best practices.
    • Collaborate with IT, legal, and compliance teams to ensure security is embedded across operations.
    • Monitor security tools, log data, and system alerts to detect and respond to anomalies.

    Penetration Testing
    • Conduct application, API, mobile, network, and cloud penetration tests on internal and client systems.
    • Simulate real-world attack scenarios to uncover exploitable vulnerabilities.
    • Develop custom scripts, payloads, or tools to support advanced testing needs.
    • Document findings with clear proof-of-concepts (PoCs) and technical impact analysis.

    Vulnerability Assessment & Management
    • Perform ongoing vulnerability scanning using industry-standard tools (e.g., Nessus, Qualys, OpenVAS, Burp Suite).
    • Analyze scan results, validate findings, and prioritize remediation based on risk levels.
    • Track remediation progress and provide guidance to development and DevOps teams.
    • Maintain a continuous vulnerability management lifecycle including discovery, analysis, reporting, and verification.

    Security Review & Advisory
    • Collaborate with software development and DevOps teams to conduct secure code reviews and architecture assessments.
    • Provide recommendations for secure design, configuration, and coding practices.
    • Support clients by explaining vulnerabilities, associated risks, and mitigation strategies in clear, understandable language.

    Monitoring & Threat Intelligence
    • Monitor emerging threats, exploits, and security best practices to keep assessment methodologies up to date.
    • Integrate threat intelligence into testing strategies to mimic current attacker techniques (TTPs).

    Documentation & Reporting
    • Prepare detailed penetration test reports, executive summaries, and risk-based recommendations.
    • Maintain accurate records of assessments, testing plans, methodologies, and remediation efforts.
    • Present findings to both technical and non-technical stakeholders, internal and external.

    Requirements:
    • 5+ years of experience in a cybersecurity role, with hands-on ISO 27001 implementation and auditing.
    • Certified ISO/IEC 27001 Lead Implementer or Auditor (mandatory).
    • Strong understanding of risk assessment, GRC frameworks, and security operations.
    • Proficient in tools and technologies such as SIEM, IDS/IPS, vulnerability scanners, and endpoint protection.
    • Excellent documentation and reporting skills.
    • Bachelor’s degree in Cybersecurity, IT, or a related field; relevant certifications (CISSP, CISA, etc.) preferred.

Originally posted on Himalayas