PPRA Islamabad Jobs 2026: IT, Cybersecurity and EPADS Career Opportunities

Minimum MS, comprising 18 years of education, in Computer Science, Cyber Security, Information Security, Information Technology, Software Engineering, Computer Engineering from an HEC-recognized high-ranked university/institution, or a foreign university. Higher qualification in the relevant field will be preferred.

Mandatory certification: CISM or CISSP.

Minimum 10 years of relevant and verifiable post-qualification professional experience in information/cybersecurity, including at least 5 years in a lead/managerial cybersecurity position.

Lead PPRA-wide cybersecurity strategy, governance, policies, standards and security roadmap in accordance with NISF and applicable government requirements; advise senior management on cybersecurity risks, threats, priorities and overall security posture; oversee cybersecurity risk management, incident response, vulnerability management, identity and privileged access security, and security compliance.

Provide security oversight for PPRA applications, data, networks, cloud and local environments, and third-party/managed security services; ensure application-level security, secure development practices, security assessments and timely remediation of identified risks; oversee cybersecurity audits, compliance reviews and security requirements for business continuity and disaster recovery.

Coordinate with relevant government cybersecurity authorities, regulators, auditors and service providers as required; report cybersecurity posture, significant risks and incidents to the Competent Authority and relevant management forums; perform other cybersecurity responsibilities assigned by the Competent Authority.

Master’s or bachelor’s degree with 16 years of education in Information Technology, Information Systems, Computer Science, Computer Engineering or a related discipline from an HEC-recognized institution or a reputed foreign university.

Proven experience as a CTO/CEO, Project Manager/Project Director or in a similar IT leadership role, with a minimum of 5 years required. Proven leadership experience in public-sector organizations delivering large-scale projects with national/provincial-level scale, scope and revenue and financial impact, with a minimum of 5 years required.

Required skills include strategic planning and thinking to solve technology problems; leadership and organizational abilities; excellent communication; competence and understanding of broad technology trends in software, hardware and infrastructure; understanding of budgets, project management and business planning; understanding of public procurement regulations, rules and guidelines; teamwork and collaboration with cross-functional teams and external partners; and a diversified portfolio demonstrating understanding of business domains and stakeholders while implementing a public procurement regime across the country.

Undertake strategic planning related to the Authority’s information technology needs, including computer hardware and software procurement, software licences, cloud services and network access; create strategic plans and set timelines for evaluating, developing and deploying technical, web and mobile services; plan, suggest and make technology initiatives and investments.

Evaluate and assess technology’s impact on the Authority’s current and future business, and work with top management and the leadership team to set clear priorities and preferences for IT management; collaborate across departments to drive strategic initiatives, including alignment between technology strategy and technology roadmaps; define short- and long-term IT goals and determine resources to achieve them.

Determine feasibility, devise monitoring mechanisms, identify legal aspects and assess the value, impact, associated risks, competitive and strategic advantages of IT initiatives; develop and manage annual and quarterly budgets; ensure sustainable capacity building for the Authority and related stakeholders to achieve IT goals.

Make infrastructure decisions, ensuring technical excellence, versatility, safety, soundness, resiliency and scalability in the architecture and engineering of product solutions, as well as managing technical delivery; build quality assurance processes, security policies, user roles, SOPs and data-protection mechanisms, disaster-recovery plans, effective management and governance.

Allocate, develop and monitor KPIs and performance metrics to assess technological performance; devise an effective communication technology strategy and relationship-management approach with partners and stakeholders.

Minimum bachelor’s degree with 16 years of education in Computer Science, Software Engineering, Information Technology, Cybersecurity or a related discipline from an HEC-recognized university.

Mandatory certifications: CEH (Certified Ethical Hacker) and CISA (Certified Information Systems Auditor).

Minimum 5 years of relevant and verifiable post-qualification experience in Application Security, Information Security or SOC operations. Experience securing web applications, APIs, databases and enterprise systems; hands-on experience with vulnerability assessment tools, SIEM platforms and application security testing methodologies such as SAST/DAST; and familiarity with regulatory compliance, audit processes and security documentation within public-sector or enterprise environments.

Continuously monitor and analyse application logs, database activities, APIs and user behaviour using SIEM and application-security tools to identify suspicious or anomalous activities; detect, analyse and respond to cybersecurity incidents related to applications, including data breaches, unauthorized data access and misuse of sensitive procurement and financial information.

Oversee implementation of application security controls, including secure configuration, role-based access control (RBAC), API security, encryption and protection of sensitive data such as tender documents and bid securities; conduct vulnerability assessments, secure-code reviews and coordinated remediation of application-level and database-related security weaknesses in alignment with OWASP Top 10 standards.

Ensure secure system integrations with external entities, including banks, AGPR and other organizational systems, at application and data layers; support secure software operations by coordinating with development and DevOps teams on security requirements, patches, configuration changes and secure SDLC implementation.

Support compliance with applicable laws, rules, regulations and information-security frameworks such as ISO/IEC 27001; prepare application and data-security incident reports, audit documentation, compliance reports and periodic security advisories for management; participate in security audits, assessments, penetration-testing activities and continuous improvement of application and data-security controls; carry out responsibilities assigned by the Project Director to ensure seamless security of the EPADS application.

Minimum bachelor’s degree with 16 years of education in Cyber Security, Information Security, Computer Science, Information Technology, Information Systems, Software Engineering or a related IT discipline from an HEC-recognized high-ranked university/institution or a foreign university.

Preferred certifications: ISO/IEC 27001 Lead Implementer and/or ISO/IEC 27001 Lead Auditor, CISA, or equivalent relevant information-security compliance/audit certification.

Minimum 5 years of relevant and verifiable post-qualification experience, preferably including information-security compliance, ISMS, risk assessment, security audits, control assessments, policy/procedure development and audit-evidence management.

Coordinate implementation and monitoring of PISF, ISMS and applicable information-security policies, standards and regulatory requirements; maintain cybersecurity policies, procedures, compliance matrices, risk registers and risk-treatment records.

Coordinate security-control assessments, internal/external audits and maintenance of audit/compliance evidence; track audit findings, compliance gaps and corrective actions through closure, and report status to management.

Monitor third-party and managed-service security compliance against approved contractual and security requirements; prepare periodic cybersecurity compliance reports, dashboards and documentation for management and relevant authorities; support security awareness, policy communication and continual improvement of the information-security management framework; perform other cybersecurity responsibilities assigned by the Competent Authority.

Bachelor’s degree with 14/16 years of education in Computer Science, Information Technology, Software Engineering, Cyber Security, Data Science/Statistics, or a related qualification from an HEC-recognized university.

Relevant hands-on experience in IT support/helpdesk will be preferred.

Provide first-level technical and operational support to users of EPADS and respond to queries received through the helpdesk; assist users with registration, login, profile management, tender publication, bid submission and other EPADS-related processes.

Troubleshoot and resolve routine system-related issues and escalate complex technical matters to the concerned technical team; guide procuring agencies, bidders and other stakeholders on effective EPADS use through telephone, email and other designated communication channels.

Maintain records of user queries, complaints, resolutions and escalations, ensuring timely follow-up and closure; prepare periodic reports on helpdesk activities, recurring issues and user-support requirements; perform other IT-support and helpdesk-related duties assigned by the Competent Authority.

Minimum Intermediate or equivalent qualification from a recognized Board of Education; or minimum Matric with second division and a 3-year diploma/certificate in Information Technology, Computer Hardware, Networking or a relevant technical field from a recognized institute.

Must possess practical knowledge of computer hardware, software installation, operating systems, troubleshooting and routine maintenance of IT equipment. Relevant hands-on experience in IT support, hardware maintenance or technical troubleshooting will be preferred.

Provide basic technical support to staff and end users and resolve routine IT-related issues; install, configure, repair and maintain computers, laptops, printers and other IT equipment; perform routine hardware and software troubleshooting, including operating-system installation, configuration and updates.

Assist in assembling, disassembling, upgrading and replacing computer hardware and related components; conduct preventive maintenance of IT equipment to ensure smooth and uninterrupted functioning; maintain an updated inventory of IT equipment, accessories and related assets, along with repair and maintenance records.

Identify and report recurring technical faults and refer complex issues to the concerned IT personnel; perform other IT-maintenance and technical-support duties assigned by the Competent Authority.