Unit Head – Application Security (AVP/VP)

About the role

The National Bank of Pakistan is seeking a senior leader to head its Application Security unit. Reporting to the Wing Head of Application and Database Security, the role will shape the bank’s secure software development lifecycle and protect critical business applications.

Key responsibilities

• Develop and evolve the application security function and services across the organization.
• Ensure the Secure Software Development Life Cycle (SSDLC) is consistently applied.
• Review security design and architecture of business applications.
• Conduct information security risk assessments for applications prior to deployment.
• Oversee application security control assessments, vulnerability assessments and penetration testing.
• Lead code review processes and guide remediation of identified issues.
• Manage the application vulnerability scanning and penetration testing program, mentoring junior security engineers.
• Coordinate vendor security activities to ensure compliance with the bank’s standards.

Required profile

• Minimum graduation in Computer Science, Computer Engineering, Cybersecurity or Information Technology from a recognized institution.
• Preferably a Master’s degree in Information Security or relevant professional certifications (e.g., PJPT, OSCP, OSCP+, GPEN, OSWE, CWRT, OSEP, CISSP).
• At least 6 years of IT or information security experience, with a minimum of 3 years focused on application security or assessment.
• Prior experience in banking or large‑scale organizations is preferred.

Required skills

• Deep understanding of OWASP Top 10.
• Hands‑on experience with offensive security tools and techniques.
• Proficiency in static and dynamic application analysis.
• Expertise in vulnerability assessment and penetration testing.
• Strong capability in secure code review and remediation guidance.