Assistant Manager/Deputy Manager IT Security

The Assistant Manager/Deputy Manager IT Security will be responsible for managing and securing the bank's enterprise IT security infrastructure and ensuring compliance with regulatory requirements.

• Manage and secure enterprise security infrastructure including Next Generation Firewalls (NGFW), Web Application Firewalls (WAF), VPN solutions, Network Access Control (NAC), Endpoint Detection & Response (EDR), and security monitoring platforms.
• Implement and maintain Information Security policies, SOPs, and controls aligned with SBP regulations, ISO 27001, COBIT, NIST Cyber security Framework, and industry best practices.
• Conduct security assessments, monitoring, and protection for Core Banking Systems (CBS), ATM Switches, Internet Banking, Mobile Banking, Payment Systems, API integrations, Digital Banking platforms, and third-party fintech applications.
• Ensure regulatory compliance with SBP Enterprise Technology Governance & Risk Management Framework, Risk-Based Cyber Security Controls, and Operational Risk Management.

Applicants for Assistant Manager/Deputy Manager IT Security must hold a Master's degree with 8-10 years of relevant experience in enterprise information security.

• Education: Master's degree (16 years of education) in Computer Science, IT, Software/Computer Engineering, Cyber Security, or related field from an HEC-recognized university.
• Experience: 8-10 years of relevant progressive experience in developing, maintaining, and implementing enterprise Information security in a bank.
• Skills: Hands-on experience in NGFW, WAF, VPN, NAC, EDR, security monitoring platforms. Strong understanding of SBP Enterprise Technology Governance & Risk Management Framework, Risk-Based Cyber Security Controls, Operational Risk Management, and regulatory compliance. Experience in developing/maintaining Information Security policies, SOPs, aligned with SBP regulations, ISO 27001, COBIT, NIST Cyber security Framework. Experience in security assessment, monitoring, and protection of CBS, ATM Switches, Internet Banking, Mobile Banking, Payment Systems, API integrations, Digital Banking platforms, and third-party fintech applications.
• Certifications: Active CISM, CISA or CISSP Certification required; additional certifications preferred.