Assistant Manager (IT Security)

Job Overview

Position Details

• Job Title: Assistant Manager – IT Security
• Organization: Cargills Bank PLC
• Job Location: Colombo, Sri Lanka
• Job Type: Full-Time
• Job Category: Banking & Insurance, IT & Software, Management

Organization Overview

Qualifications & Experience

• Bachelor’s Degree in Information Security, Cybersecurity, Computer Science, or a related IT discipline.
• Minimum of 6 to 8 years of hands-on experience in IT Security operations.
• Prior work experience in the Banking and Financial Services sector will be a distinct advantage.
• Demonstrated expertise in Security Monitoring, Threat Detection, and Incident Response (SOC/SIEM).
• Solid practical understanding and hands-on experience with major NGFW vendor platforms (e.g., Palo Alto Networks, Fortinet FortiGate, Check Point).
• Strong capability in Cybersecurity Governance, Risk & Compliance (GRC) frameworks.
• Proficiency in Vulnerability Management, Security Testing, and Patch Management.
• Solid practical experience in Identity & Access Management (IAM) and Privileged Access Control.
• Understanding of Third-Party and Vendor Security Risk Management practices.
• Industry-recognized cybersecurity certifications (e.g., CCNP, PCNSA/PCNSE, NSE5 or above, OSCP, CEH, or working towards CISA/CISM/CISSP) are highly advantageous.

Key Responsibilities

• Assist in executing cybersecurity Governance, Risk, and Compliance (GRC) activities to ensure strict adherence to CBSL, SWIFT, PCI, and internal security requirements.
• Perform daily monitoring, response, and threat detection activities utilizing SIEM/SOC tools to ensure comprehensive system coverage.
• Manage daily Identity and Access Management (IAM) processes, including conducting periodic access reviews for privileged and critical systems.
• Execute daily vulnerability management operations, ensuring high levels of patch compliance across servers, endpoints, and infrastructure.
• Conduct and coordinate periodic Vulnerability Assessments and Penetration Testing (VAPT) across web applications, mobile apps, APIs, and network infrastructure.
• Review, evaluate, and approve firewall rule change requests to ensure strict compliance with network security policies and least-privilege access principles.
• Assist in conducting comprehensive security assessments of third-party vendors and service providers prior to onboarding.
• Assist in managing internal and external security audits by tracking and ensuring the timely closure of findings.
• Compile data for security posture reports and track Key Risk Indicators (KRIs) for management review.

Required Skills

• In-depth understanding of SIEM/SOC tools, firewall architectures, and incident response procedures.
• Strong analytical, problem-solving, and technical evaluation abilities.
• Capability to manage GRC standards, VAPT operations, and vendor risk management efficiently.
• Good communication and interpersonal skills to collaborate across IT teams and management.

Salary & Benefits

• Competitive remuneration package in line with industry standards for senior banking IT roles.
• Opportunities for career advancement within a leading licensed commercial bank.

How to Apply

Important Notes

• Clearly state “Assistant Manager – IT Security” in the subject line of your email submission.
• Submissions must be received on or before the specified deadline of 29th October 2026.