Head of Information Security

About the role

We are seeking an experienced Head of Information Security to define and drive our cybersecurity strategy, ensure regulatory compliance, and safeguard our digital assets across the bank.

Key responsibilities

• Lead enterprise Information Security strategy and governance.
• Ensure compliance with SBP regulations, ISO 27001, NIST, PCI DSS and cybersecurity laws.
• Oversee SOC operations, threat monitoring and incident response.
• Conduct security audits, risk assessments and vendor evaluations.
• Strengthen cybersecurity architecture across systems, cloud and digital platforms.
• Lead BCP/DRP planning, testing and cyber‑resilience initiatives.
• Drive employee security awareness and training programs.
• Report security posture and risks to senior leadership and Board committees.

Required profile

• Bachelor’s or Master’s in Cybersecurity, IT or Computer Science.
• 10+ years of Information Security experience, including 3+ years in a leadership role.
• Relevant certifications such as CISSP, CISM, CISA or ISO 27001 preferred.

Required skills

• SIEM platforms
• IDS/IPS
• Firewalls
• Cloud security
• Identity and Access Management (IAM)
• Digital banking security