About this role
Job Specification: ------------------- • The selected candidate will work on varied computer security Common Criteria Evaluation and FIPS 140-2 validation projects • Supervise conduct of CC Evaluation activities. • Maintains an ongoing dialogue with the director CC lab about the status and conduct of security assessments • Responsible for administration and technical activities of Screening and Evaluation Lab. • Keep track of progress of screening and evaluation activities in the lab. • Ensure that thorough, precise and comprehensive evaluation reports are being prepared. • Ensure that procedures for creating, storing, configuration management (CM), accessing, archiving and disposing of screening and evaluation activities records are being followed by teams. • Observe and ensure that the highest standards of confidentiality for the information provided for screening and evaluation are being followed. • Executes certification effort schedules and test methods in accordance with Pakistan CC Scheme and CC. • Understands and complies with test methods and procedures • Reports details of all nonconforming work and supplies that prohibit the accurate conduct of security assessments (observation reports) • Manage Physical security testing • System-level logical analysis Qualification: --------------- • PhD/MS in a relevant discipline of Computer Science or Computer Engineering or Electrical Engineering such as Cyber Security, Information Security, Network Security, Information Technology, Information Assurance, etc. with minimum of twelve years’ experience of working in the versatile areas of information security evaluations at any relevant department, organization or agency at management positions. • Knowledgeable of all relevant standards and publications pertaining to the specific tests (e.g. FIPS140-x, Common Criteria, NSS, NIST Publications, ISO27k, CIS-CAT benchmarking etc.) found on the lab’s scope. • Professional Certifications in Cyber Security and Information Security such as CISSP, CISA, Common Criteria Certified Evaluator, ISO/IEC 27001 LA/LI, ISO/IEC 17025 LA would be a plus. Location of Job: ------------------ - Islamabad Other Details: --------------- • Working experience/ practical knowledge in fields of Cyber Security, Information Security, Network Security, Embedded systems, wireless/ radio communications, hardware devices/ gadgets, RF/ Microwaves, Software security testing and Mobile applications security testing (iOS & Android). • Preferably Common Criteria Evaluation Trained from well reputed international organization • Knowledge of cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators, etc. • Knowledge of common security related protocols and their design (i.e. SSH,SRTP, L2TP, IPsec, TLS, etc.). • Vulnerability Analysis and/or penetration testing experience/expertise. • Knowledge of electrical engineering as applied to computer architecture (e.g., circuit boards, processors, chips, and computer hardware). • Good knowledge of microprocessors. • Knowledge of industry-standard and organizationally accepted analysis principles and methods. • Knowledge of the enterprise information technology (IT) architectural concepts and patterns (e.g., baseline, validated design, and target architectures. • Knowledge of human-computer interaction principles. • Preferably CC trained and certified. - 5 years of general age relaxation has already been added.