Head of Governance, Risk & Compliance (GRC)

About the role

The Head of GRC will lead the development and implementation of information and cyber‑security policies, procedures and controls for easypaisa, Pakistan’s first digital bank. Reporting to senior management, this role ensures a robust governance, risk management and compliance posture across the organization.

Key responsibilities

• Maintain and update ISMS documentation in line with ISO 27001, NIST and other standards.
• Conduct periodic risk assessments of information assets and business processes.
• Organise and manage internal and external information‑security audits and management reviews.
• Oversee remediation of non‑conformities and drive a culture of continual improvement.
• Integrate information‑security considerations into all projects and perform related risk assessments.
• Manage the Information Security Risk Register and design risk‑based control testing programs.
• Promote information‑security awareness throughout the organisation.
• Review documentation for new projects and change requests, providing security recommendations.
• Coordinate client audits, third‑party assessments and regulator circular implementation.
• Develop threat‑modeling methodologies for infrastructure, applications and databases.

Required profile

Required skills

• ISO 27001
• NIST framework
• Information Security Management System (ISMS) implementation

What we offer

• Opportunity to shape security governance for a leading digital bank.
• Collaborative environment with strong backing from Telenor Group and Ant Group.