Wing Head – Information Security Risk Management (VP/SVP)

About the role

The National Bank of Pakistan is seeking a senior leader to head its Information Security Risk Management wing. Reporting to the Chief Information Security Officer, the role oversees continuous security monitoring, threat detection and response across on‑premise and cloud environments.

Key responsibilities

• Ensure continuous monitoring of security events and drive proactive threat detection using automated tools.
• Lead the Incident Management & Response Program and apply MITRE ATT&CK and Cyber Kill Chain frameworks.
• Manage SOC monitoring, SIEM engineering, threat management, incident response and threat intelligence functions.
• Oversee cloud‑based SIEM, XDR and SOAR platforms supporting international operations.
• Develop security operation metrics, dashboards and executive reporting.
• Assess emerging cyber threats, including AI‑driven attacks, and recommend mitigation measures.
• Perform threat modelling (STRIDE, PASTA) and attack‑path analysis for networks, systems and applications.
• Coordinate with IT, Business, Legal, Compliance, Vendors and senior management on security matters.

Required profile

• Minimum graduation in Computer Science, Computer Engineering, Cyber Security or Information Technology; Masters or professional certifications preferred.
• At least 10 years of IT/Network/Data‑Center/IT‑Security experience, with 5+ years in information security operations at a managerial level.

Required skills

• Hands‑on experience with SOC operations, SIEM, SOAR, XDR, Threat Management and Incident Management.
• Familiarity with SBP guidelines, MITRE ATT&CK, Cyber Kill Chain, STRIDE, PASTA, cloud SIEM/XDR/SOAR platforms, firewalls, routers, switches and data‑center operations.