About this role
<p style="text-align:center"><span style="font-family:tahoma, arial, helvetica, sans-serif"><strong>Cyber Security Engineer</strong></span></p> <p> </p> <p><span style="font-family:tahoma, arial, helvetica, sans-serif"><strong>Union Assurance</strong> is a leading corporate and one of the fastest growing entities in the Life Insurance industry backed by the strength and stability of John Keells Holdings PLC, one of Sri Lanka's largest conglomerates. </span></p> <p> </p> <p><span style="font-family:tahoma, arial, helvetica, sans-serif"><strong>The Job Role:</strong></span></p> <p> </p> <p><span style="font-family:tahoma, arial, helvetica, sans-serif">A unique opportunity exists for a professional with a passion for Cybersecurity. In this role, you will be eliminating vulnerabilities and risk in networks, software systems and data centers with ongoing vulnerability scans, monitoring network data, and ensuring hardware and software applications are updated</span></p> <p> </p> <p><span style="font-family:tahoma, arial, helvetica, sans-serif"><strong>Principle Accountabilities:</strong></span></p> <p> </p> <ul style="list-style-type:disc"> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Execute comprehensive enterprise information security and IT risk management program to ensure effective controls based on ISO 27001 and CIS are present to protect company assets</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Manage the continuous maintenance of the IT network, servers, user identity and devices to ensuring optimum security levels are maintained.</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Implement and manage security infrastructure firewalls, Secure Access Service Edge for the company’s users.</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Vulnerability assessment and Penetration testing of applications and perimeter using tools such as OWASP ZAP, support DevSecOps process.</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Analyze IT security threats in real-time and mitigate the threats; secure configuration of all IT assets.</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Ensure that newly-acquired technology complies with the IT security regulations and conduct regular vulnerability assessments on all online resources and present periodic updates on IT network security to the board audit committee to ensure no internal breaches or misuse of data take place.</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Responsible for managing information system security incidents, including investigation, recovery and prevention works.</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Participate in architectural discussions to work through risk, security, and compliance concerns and give inputs for architecture decisions on all aspects of security solutions.</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Attend training session to broaden and master skillset into advanced and emerging areas of cybersecurity.</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Assist in preparing training material for employees on cybersecurity, its threats and countermeasures</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Provide updates as required to Compliance Steercos & complete assigned actions items so as to avoid nonconformities</span></li> </ul> <p> </p> <p><span style="font-family:tahoma, arial, helvetica, sans-serif"><strong>Qualifications and Experience</strong></span></p> <p> </p> <ul style="list-style-type:disc"> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Bachelor’s degree with Information Technology specialization.</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">2- 3 years of experience in similar capacity</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Experience in conducting or participating in any application security penetration testing</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Professional qualifications from following professional bodies ISACA; (ISC)2; or Global Information Assurance Certification (GIAC).</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Understanding of controls and frameworks and sound knowledge in network security controls, operating systems and incident response management.</span></li> <li style="font-family:tahoma, arial, helvetica, sans-serif"><span style="font-family:tahoma, arial, helvetica, sans-serif">Good planning & organizing skill, quality focus and Attention to detail is mandatory.</span></li> </ul><div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">Job Responsibilities</H2> </div><div></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">Person Specifications</H2> </div><div></div></div></div><p style="margin:0.0in;font-family:Arial;font-size:10.5pt;color:#3c3c3c"><span style="font-weight:bold;background-color:white;font-family:tahoma, arial, helvetica, sans-serif">The selected candidate for the above position will be entitled to an attractive remuneration package. Applicants who are interested are encouraged to apply on or before 19th June 2026</span></p>