Chief Information Security Officer (CISO) - Banking Sector

About the role

Fulcrum Pvt Ltd is recruiting an experienced, strategic Chief Information Security Officer (CISO) for a leading client in the banking sector. The role reports to the Chief Information Officer (CIO) and sits at Senior Vice President grade. The CISO drives the bank's information security strategy, strengthens cyber resilience, manages technology risks and ensures compliance with regulatory requirements and industry best practices.

Key responsibilities

• Develop and implement the bank's information security strategy, policies and governance framework.
• Ensure compliance with State Bank of Pakistan (SBP) regulations and standards such as ISO 27001 and PCI DSS.
• Identify, assess and mitigate cybersecurity threats, vulnerabilities and technology risks.
• Oversee security architecture, cloud security, identity and access management, data protection and network security.
• Lead security operations, threat monitoring, incident response, vulnerability management and cyber resilience initiatives.
• Assess third-party, cloud, SaaS and technology vendor security risks.
• Coordinate regulatory audits, penetration testing, security assessments and remediation.
• Promote cybersecurity awareness and present risk and control updates to senior management and Board committees.

Required profile

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology or a related field.
• Minimum 12 years of experience in IT risk management, cybersecurity or information security.
• At least 4-5 years of managerial experience in a relevant field.
• Proven experience managing cybersecurity risks and incidents in complex environments, preferably in banking or financial services.
• Professional certifications such as CISSP, CISM, CISA or CRISC are preferred.

Required skills

• Strong understanding of cybersecurity frameworks such as NIST and ISO 27001 and applicable regulations.
• Expertise in security architecture, risk assessment, vulnerability management, cloud security and data protection.
• Excellent analytical, leadership, communication and stakeholder management skills.