Manager-Security Assurance.Information Security Group-ISG
At a glance
Manager-level GRC & Compliance role at Mashreq Careers. Remote, India.
Pay not stated GRC & Compliance salary
remoteroles summary, based on the employer's posting.
What you'll do
- Test applications and APIs for vulnerabilities, then recommend fixes based on the security gaps you find
- Review risks in AI applications, LLM integrations, agents and RAG systems, and guide their secure use
- Build security checks into CI/CD workflows and automate testing across the software development lifecycle
- Review code, deployments and automation for security flaws, working with development and operations teams on early controls
- Give teams practical secure-coding guidance and report findings, risk assessments and remediation steps to stakeholders
What you bring
- A relevant computer science or information security degree, plus six to ten years in application security, penetration testing or API security
- Hands-on knowledge of API, application and AI security, with security testing tools such as Burp Suite or another listed tool
- Experience using scripting for security automation and familiarity with API standards, authentication protocols or security-focused DevOps tools
Who this fits
This manager-level role suits someone experienced in application, API and AI security who can combine hands-on testing with guidance for development teams. The position is listed as remote in Bengaluru, India.
From the employer
Job Purpose :
The Manager-Security Assurance role is integral to Mashreq Global Services' Information Security Group (ISG). This role is responsible for strengthening the security posture of modern applications, APIs, cloud-native platforms, and AI-powered systems. The successful candidate will integrate security throughout the Software Development Lifecycle (SDLC), securing applications and APIs, implementing DevSecOps practices, and governing the secure adoption of Artificial Intelligence technologies.
Key Responsibilities for the Role
Conduct intrusive penetration testing and vulnerability assessments on Applications and APIs.
Assess security risks associated with AI-powered applications, LLM integrations, AI agents, and RAG architectures.
Automate security tasks to ensure continuous integration, continuous delivery (CI/CD) processes are secure and efficient.
Utilize advanced attack techniques and tools to simulate real-world cyberattacks, assess security gaps, and recommend mitigation actions.
Design, implement, and maintain secure APIs and application security practices within the development lifecycle, integrating security testing tools at every stage.
Collaborate with development and operations teams to ensure the incorporation of security controls early in the software development process.
Perform security audits and code reviews to identify security flaws in the development pipeline.
Identify and evaluate security risks related to software deployments and automation processes.
Develop and implement risk management strategies to reduce vulnerabilities in the development and operational environments.
Provide actionable feedback and training to teams to improve secure coding and configuration practices.
Work with cross-functional teams to integrate security throughout the development lifecycle.
Prepare detailed reports, including risk assessments, security vulnerabilities, and actionable remediation strategies for technical and non-technical stakeholders.
Stay updated on emerging security threats and vulnerabilities and implement best practices for secure development.
Qualifications
Bachelor’s or master’s degree in computer science, Information Security, Cybersecurity, or a related discipline.
6 to 10 years of progressive experience in Application Security, Penetration Testing, and API security roles.
Relevant certifications (e.g., OSCP, CEH, API Security certifications) are highly desirable.
Proven experience in API security, Application security, and AI Security practices.
Proficiency with security testing tools like Burp Suite, SAST, SCA, DAST, IAST, and dynamic testing tools.
Familiarity with OpenAPI Specifications, OAuth, SAML and API Gateway, including enforcing AAA.
Strong experience with programming/scripting languages (e.g., Python) for automation and security integration.
Familiarity with security-focused DevOps tools (e.g., Azure DevOps, Docker, Kubernetes).
- Conduct Vulnerability Assessments and Penetration Testing
- Secure API and Application Security
- Perform Threat Modelling and Secure Architecture Reviews
- Automate DevSecOps Processes
- Assess and Mitigate Risks for Traditional and AI-based Applications
- Govern Secure Adoption of AI Technologies
- Collaborate with Development Teams to Integrate Security into SDLC
- Stay Updated with Emerging AI Use Cases and Security Best Practices
- Provide Expertise in API Security, Application Security, and AI Security
- Ensure Compliance with Regulatory and Compliance Frameworks
- Bachelor's or Master's Degree in Computer Science, Information Security, Cybersecurity, or a Related Discipline
- 6 to 10 Years of Progressive Experience in Application Security, Penetration Testing, and API Security Roles
- Relevant Certifications (e.g., OSCP, CEH, API Security Certifications) Highly Desirable
- Proven Experience in API Security, Application Security, and AI Security Practices
- Proficiency with Security Testing Tools (e.g., Burp Suite, SAST, SCA, DAST, IAST)
- Familiarity with OpenAPI Specifications, OAuth, SAML, and API Gateway
- Strong Experience with Programming/Scripting Languages (e.g., Python) for Automation and Security Integration
- Familiarity with Security-focused DevOps Tools (e.g., Azure DevOps, Docker, Kubernetes)
- Experience in the Banking or Financial Services Industry an Advantage
- Strong Analytical and Problem-Solving Skills
GRC & Compliance work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
GRC & ComplianceRemote
Find me workBy the team behind remoteroles.