Now hiring

Consultant - Security (Colombo, LK) @ John Keells Holdings Plc

LKOnsiteFull-time
Apply with ResuMinder

Opens on the employer's site

About this role

Keells, as a leading retailer is striving to deliver its core purpose to ‘improve the quality of life for the nation’. We know that to deliver on our core purpose, we have to grow and develop Sri Lanka’s best retail team. If you want to come on this journey with us, to deliver retail excellence, then we can really support your ambitions and future growth. What You Need to Do Act as the primary point of contact for information security incidents, ensuring timely investigation, resolution, escalation, and comprehensive documentation. Lead post-incident reviews and root cause analysis, providing recommendations and implementing corrective and preventive measures to minimize future risks. Conduct regular security reviews, assessments, and audits to identify vulnerabilities, security gaps, and potential risks, and recommend appropriate mitigation measures. Lead and coordinate cybersecurity awareness initiatives and training programs to promote security best practices and strengthen employees’ awareness of information security risks. Collaborate with Application, Database, Infrastructure, Group IT, and other relevant teams to ensure security controls and measures are effectively implemented and maintained. Coordinate Vulnerability Assessment and Penetration Testing (VAPT) activities for systems, applications, and infrastructure, working closely with external security consultants and vendors to identify and remediate vulnerabilities. Monitor emerging cybersecurity threats, vulnerabilities, and industry best practices, and recommend improvements to strengthen the organization’s overall security posture What You Need Bachelor’s degree in Computing, Information Technology, Cybersecurity, or a related field. Minimum 3 years of relevant experience in a cybersecurity or information security role, with hands-on experience in security incident management and security assessments. Strong knowledge and practical experience in Microsoft Azure security technologies, including Azure Security Center / Microsoft Defender for Cloud. Strong communication, presentation, interpersonal, teamwork, coordination, and follow-up skills, with the ability to engage effectively with both technical and non-technical stakeholders. A proactive can-do attitude, strong analytical and problem-solving skills, and the ability to work independently while managing multiple priorities. Interested candidates are encouraged to apply on HIVE before the 13/09/2026.

Ready to apply?

Install the ResuMinder extension and we'll auto-fill the application in seconds — no rewriting.

See how your CV scores