Assistant Manager - IT Security

Cargills Bank PLC is a licensed commercial bank supervised by the Central Bank of Sri Lanka, driven by the philosophy "Banking on the Human Spirit". We are looking for a dedicated and proactive individual to join our IT Security team. In this role, you will play a critical part in protecting our systems, data, and digital assets by supporting proactive threat detection, vulnerability management, and incident response initiatives.

Position Summary

• Role: Assistant Manager - IT Security

• Institution: Cargills Bank PLC

• Location: Colombo 03, Sri Lanka

• Employment Type: Full-Time

Key Responsibilities

• Assist in executing cybersecurity Governance, Risk, and Compliance (GRC) activities to ensure strict adherence to CBSL, SWIFT, PCI, and internal security requirements.

• Perform daily monitoring, response, and threat detection activities utilizing SIEM/SOC tools to ensure comprehensive system coverage.

• Manage daily Identity and Access Management (IAM) processes, including conducting periodic access reviews for privileged and critical systems.

• Execute daily vulnerability management operations, ensuring high levels of patch compliance across servers, endpoints, and infrastructure.

• Conduct and coordinate periodic Vulnerability Assessments and Penetration Testing (VAPT) across web applications, mobile apps, APIs, and network infrastructure.

• Review, evaluate, and approve firewall rule change requests to ensure strict compliance with network security policies and least-privilege access principles.

• Assist in conducting comprehensive security assessments of third-party vendors and service providers prior to onboarding.

• Assist in managing internal and external security audits by tracking and ensuring the timely closure of findings.

• Compile data for security posture reports and track Key Risk Indicators (KRIs) for management review.

Qualifications & Requirements

Educational Background

• Bachelor’s Degree in Information Security, Cybersecurity, Computer Science, or a related IT discipline.

Experience Requirements

• Minimum of 6–8 years of hands-on experience in IT Security operations.

• Preference: Prior work experience in the Banking and Financial Services sector will be a distinct advantage.

Core Technical Competencies & Skills

• Demonstrated expertise in Security Monitoring, Threat Detection, and Incident Response (SOC/SIEM).

• Solid practical understanding and hands-on experience with or working knowledge of major NGFW vendor platforms (e.g., Palo Alto Networks, Fortinet, FortiGate, Check Point).

• Strong capability in Cybersecurity Governance, Risk & Compliance (GRC) frameworks.

• Proficiency in Vulnerability Management, Security Testing, and Patch Management.

• Solid practical experience in Identity & Access Management (IAM) and Privileged Access Control.

• Understanding of Third-Party and Vendor Security Risk Management practices.

• Industry-recognized cybersecurity certifications (e.g., CCNP, PCNSA/PCNGE, NSE5 or above, OSCP, CEH, or working towards CISA/CISM/CISSP) are highly advantageous.

How to Apply

Interested candidates are invited to forward their CVs via email to career@cargillsbank.com.

• Subject Line: Please mention the post applied for (Assistant Manager - IT Security) in the subject line of the email.

• Closing Date: On or before 29th October 2026