National Bank of Pakistan – Senior Information Security Vacancies (VP/SVP/AVP) in Karachi

Minimum graduation in Computer Science / Computer Engineering and/or Cyber Security / Information Technology from an HEC-recognized institute. Relevant professional certifications (CISSP, CISM, CompTIA CySA+, GAC (GSOC) or equivalent) and masters in related fields preferred.

Minimum 10 years of experience in IT and/or network engineering and/or data center operations and/or IT security operations, including at least 5 years in security operations, monitoring or threat management. Responsibilities include managing SOC operations (SIEM, SOAR, XDR), threat monitoring and response, detection engineering, incident management, automation of security detection and response, vendor coordination, cloud and on-premises security monitoring, red/blue/purple team exercises, and development of security dashboards and reporting.

Minimum graduation in Computer Science / Computer Engineering and/or Cyber Security / Information Technology from an HEC-recognized institute. Relevant certifications such as CISSP / CRISC / CISA preferred.

Minimum 10 years of experience in information security and/or information technology with at least 4 years in managing/monitoring information security risk. Responsibilities include information security risk assessments, security architecture reviews, business impact assessments, vendor risk management, incident risk assessments, maintaining security risk registers, regulatory compliance, stakeholder communication, and embedding security requirements across projects and third parties.

Minimum graduation in Computer Science / Computer Engineering and/or Cyber Security / Information Technology from an HEC-recognized institute. Masters or relevant CIS/CRISC certifications preferred.

Experience in information security for digital banking channels and related ecosystems. Responsibilities include developing and executing security program for bank-wide digital applications, application security and secure SDLC, vulnerability assessment and remediation, API and mobile app security, cloud security for digital services, threat modeling, vendor security assessments, and coordination of incident response for digital channels.