Job Description
CAREER OPPORTUNITIES AT FIRST CAPITAL
About Us
First Capital is a member of the JXG (Janashakthi Group) focused on delivering performance first through its operations as primary dealer, stockbroker, corporate advisory, debt structuring and wealth management. Rated A+ (Stable) by Lanka Rating Agency Limited, First Capital is a full-service investment institution in Sri Lanka. The Company has over four decades of expertise in providing capital market solutions.
Join us for a rewarding career with endless opportunities for career development and personal growth.
ASSOCIATE LEAD/ SENIOR ASSOCIATE LEAD - CYBER SECURITY
Job Responsibilities
- Implement assigned components of the approved strategy through planned, measurable actions.
- Prepare updates to policies, standards, and procedures in response to regulatory requirements or emerging risks for management review.
- Conduct risk assessments across infrastructure, applications, cloud environments, and third-party vendors using the enterprise risk methodology.
- Maintain the cyber risk register by recording risks, monitoring remediation activities, and following up with risk owners.
- Review vulnerability assessment and penetration testing (VA/PT) reports, along with control evidence, and identify control gaps.
- Compile audit evidence and monitor remediation of audit findings within the assigned scope.
- Support compliance with CBSL guidelines and ISO 27001 requirements.
- Prepare cybersecurity metrics and contribute to risk and compliance reporting.
Person Specifications
- BSc in Cyber Security, Information/Computer Security, Computing (Cybersecurity), Computer Science with Network Technology or a similar BSc with Cyber Security as the major subject.
- 3-4 years of relevant experience in BFSI, IT, Network Security, Cyber Security, Technology Assurance, Cyber Security Governance, Internal Audit or a related field.
- Professional certifications such as ISO 27001 / ISO 27701 Lead Auditor or Lead Implementer, CompTIA Security+, ISACA, ISC2 or other relevant cybersecurity qualifications will be an added advantage.
- Strong technical knowledge of infrastructure, vulnerability management, and cloud technologies.
- Strong analytical and problem-solving skills.
- Good communication and stakeholder management skills.
To Apply, please send your CV to: hr@firstcapital.lk on or before the 26th of October 2026.