KEY RESPONSIBILITIES & ACCOUNTABILITIES OF THE POSITION

This position holds overall responsibility for assisting the management in the continual improvement of FinCSIRT operations and supporting member organizations with their information security needs including below described key responsibilities.

• Help the members to manage the end-to-end incident response life cycle by attending to information security incidents where necessary.

• Coordinate and liaise with service providers, local/regional and international CERT/CSIRT communities, regulatory bodies, and other relevant local and global stakeholders to gather, analyze, disseminate, and exchange cyber threat intelligence and information security updates.

• Maintain effective communication and follow-up with member organizations, financial sector stakeholders, and external partners to support incident response, information sharing, and collaborative cybersecurity initiatives.

• Deliver SLA-based services, conduct vulnerability and security assessments/penetration testing for member institutions.

• Lead the monitoring and smooth operation of the Financial Sector Security Operations Center (FS-SOC) function.

• Actively participate in organizing the annual cyber war games, security forums and other planned cyber security events.

• Manage internal IT and network infrastructure and its security in accordance with the highest standards.

• Execute day-to-day operational tasks and internal security response processes.

• Provide consultation and technical assistance to member organizations on implementing information security best practices and industry standards.

• Support members in achieving and maintaining the regulatory and compliance requirements, conduct gap assessments, proactive and reactive security recommendations, and provide adversarial support to identify security weaknesses and enhance resilience against emerging cyber threats.

• Track and coordinate information security calendar activities, maintain information security inventories/third-party contracts, and support the Manager – FinCSIRT in achieving annual roadmap milestones and strategic objectives through timely execution of planned initiatives under an effective information security governance program.

• Lead cybersecurity research and development initiatives, identifying opportunities to automate manual operational processes through AI and emerging security technologies to improve efficiency, accuracy, and security outcomes.

QUALIFICATIONS, EXPERIENCE AND PERSONAL ATTRIBUTES

This position holds overall responsibility for assisting the management in the continual improvement of FinCSIRT operations and supporting member organizations with their information security needs including below described key responsibilities.

• A degree from a recognized university in Information Security, Computer Science, Computer Engineering, or an equivalent professional qualification.
• Having a Master's degree will be considered as an added qualification.
• One or more professional IT and cyber security certifications such as EC|Council certifications, CCNA, RHCSA, E-learn security certifications, ISO 27001:2022 LA/LI or any other equivalent certifications.
• Solid understanding of current information security threats, vulnerabilities, and mitigation strategies.
• Hands-on experience in log analysis, penetration testing, and malware analysis.
• Demonstrate in-depth knowledge of both commercial and open-source operating systems and applications, including Windows, commonly used Unix/Linux distributions, Android, and iOS.
• Demonstrate in-depth knowledge in network infrastructure management and administration functions.
• Strong understanding of technologies such as cloud computing, virtualization, application development, threat hunting, artificial intelligence and compliance standards such as ISO, PCI-DSS, NIST, OWASP. etc
• Minimum of 4 years of experience in the field of Information Security.
• Willingness to work extended hours when required to support FinCSIRT operational requirements.

The above position offers an attractive remuneration package and benefits commensurate with industry standards. The selected candidate can look forward to prospects for career growth in a rapidly growing and stable company.

LankaPay is an equal opportunity employer and is committed to diversity, equity, and inclusion in the workplace. We welcome and encourage applications from all qualified individuals, as our final selections will based solely on merit.

Please send your CV including names and contact details of two non-related referees within 07 days of this advertisement to the Careers@lankapay.net. Applicants should state the post applied in the subject field.

(While we value all applications received, only short-listed candidates will be called for interviews)