KEY RESPONSIBILITIES & ACCOUNTABILITIES OF THE POSITION

This position holds overall responsibility for assisting the management in the continual improvement of FinCSIRT operations and supporting member organizations with their information security needs including below described key responsibilities.

• Manage the end-to-end incident response life cycle for members by attending to information security incidents.
• Coordinate with service providers, Sri Lanka CERT|CC, and other related agencies (both local and international) to gather and disseminate information security intelligence.
• Provide consultation and technical assistance to members on implementing best practices, industry standards, and regulatory requirements — both proactive and reactive measures to enhance readiness against emerging threats.
• Deliver SLA-based services and conduct Vulnerability Assessments/Penetration Testing (VA/PT) for member institutions.
• Oversee the monitoring and smooth operation of the Financial Sector Security Operations Center (FS-COC).
• Communicate and follow up with members, local and global CERT/CSIRT entities, and other financial sector stakeholders.
• Actively participate in organizing the Annual Cyber War Games for industry practitioners.
• Manage internal IT infrastructure and its security in accordance with the highest standards.
• Support management in day-to-day operational tasks and internal security response processes.

QUALIFICATIONS, EXPERIENCE AND PERSONAL ATTRIBUTES

• A degree from a recognized university in Information Security, Computer Science, Computer Engineering, or an equivalent professional qualification.
• Having a Master's degree will be considered as an added qualification.
• Professional IT Security certifications such as CISM, CGEIT, CRISC or having one of the technical certifications such as CCNA, RHCE, CEH will be an added advantage.
• Solid understanding of current information security threats, vulnerabilities, and mitigation strategies.
• Hands-on experience in log analysis, penetration testing, and malware analysis.
• In-depth knowledge of both commercial and open-source operating systems, including Windows, commonly used Unix/Linux distributions, Android, and iOS.
• Strong understanding of technologies such as cloud computing, virtualization, application development, threat hunting, and compliance standards such as ISO, PCI-DSS, NIST, OWASP.
• Minimum of 5 years of experience in the field of Information Security.

The above position offers an attractive remuneration package and benefits commensurate with industry standards. The selected candidate can look forward to prospects for career growth in a rapidly growing and stable company.

LankaPay is an equal opportunity employer and is committed to diversity, equity, and inclusion in the workplace. We welcome and encourage applications from all qualified individuals, as our final selections will based solely on merit.

Please send your CV including names and contact details of two non-related referees within 07 days of this advertisement to the careers@lankapay.net. Applicants should state the post applied in the subject field.

(While we value all applications received, only short-listed candidates will be called for interviews)