Principal Information Security Assurance Engineer

About the role

The Principal Information Security Assurance Engineer leads enterprise‑wide security assurance initiatives, evaluating and strengthening security controls across systems, applications, and databases. The role ensures continuous improvement of a secure SDLC framework and oversees regular penetration testing and vulnerability assessments to protect information assets.

Key responsibilities

• Review audit logs, user application activities, privileged access, and service usage.
• Audit operational changes, change requests, and privileged level modifications.
• Integrate security mechanisms into the SDLC and conduct internal penetration testing.
• Coordinate external penetration testing and vulnerability scanning, interpreting results.
• Track and support security patching activities with relevant teams.
• Assess risk of change requests on applications and databases, approving them after proper review.
• Research and recommend security enhancements, and support incident analysis.
• Coordinate information security project activities.

Required profile

• Minimum Bachelor’s degree in IT, Computer Science, Cyber Security, Business Administration or related field.
• At least 6 years of experience in IT security, penetration testing, application security, or similar roles.
• Proven ability to conduct security audits, vulnerability assessments, and incident response.

Required skills

• Penetration testing
• Vulnerability scanning and result interpretation
• Security patch management
• Audit log analysis
• Secure SDLC implementation
• Security incident analysis
• Risk assessment of change requests