It is a parallelism issue, but it's a different set of terms that want to be parallel.
The consultant has urged Infotech to:
upgrade its protection software,
institute new policies for exchanging sensitive information,
assembling a special team of information technology specialists to manage network security protocols.
So upgrade, institute, and assemble want to be in the same format -- they all form the "list" of things Infotech has been urged to do.
We need an "and" before assemble, since it's the final piece in the series.
The "to manage" versus "for managing" is idiomatic, really.
It is preferable to say "specialists to manage protocols" rather than "specialists for managing protocols."
In the same vein, we would say "He is the expert hired to analyze data" rather than "He is the expert hired for analyzing data."