Information Security Manager

About the role

National Logistics Corporation, Pakistan's leading multimodal logistics organization, is looking for a corporate professional to act as Information Security Manager in Rawalpindi. The role covers the information security strategy, governance and day-to-day security operations.

Key responsibilities

• Develop, implement and maintain the organization's information security strategy and governance framework.
• Lead security operations including threat monitoring, incident response, vulnerability management and continuous monitoring using SIEM, EDR and XDR tools.
• Design, deploy and manage the security monitoring and observability stack for real-time visibility.
• Oversee network and perimeter security, VPN infrastructure and secure remote access controls.
• Manage secure virtualization and infrastructure environments, including hardening and patching of network assets.
• Coordinate with internal and external teams (SOC, CERT, CSIRT, network and systems teams) to deliver security measures.
• Ensure compliance with standards such as ISO 27001, NIST and GDPR, and support audit readiness.
• Conduct risk assessments, coordinate security audits and penetration testing, and drive remediation plans.
• Raise cybersecurity awareness and lead training on operational security practices.
• Provide reporting and dashboards on security posture, metrics and risk status to senior management.

Required profile

• BS in Cybersecurity, IT or a related field; preference for MS degree holders.
• Proven expertise in risk assessment, incident response and security architecture.
• Experience managing compliance with ISO 27001, NIST, GDPR and other standards.
• Background working with SOC, CERT and CSIRT teams.