principal consultant - cyber security

chief risk officer

compliance officer

chief information security officer ciso

HugoBank

<div>As the Chief Information Security Officer (CISO) for HugoBank, a cloud-native digital bank operating in Pakistan, one will play a pivotal leadership role in safeguarding the bank&rsquo;s digital ecosystem. The CISO is responsible for defining and executing the enterprise information security strategy, managing cyber and technology risks, and ensuring compliance with applicable regulatory and supervisory requirements. This role ensures the confidentiality, integrity, and availability of customer data, critical systems, and bank assets across cloud (AWS), on-premises, and third-party environments.
DUTIES &amp; RESPONSIBILITIES:
Information Security Strategy &amp; Governance<ul>
<li>
Define and execute the bank&rsquo;s enterprise information security strategy and governance framework, ensuring alignment with business objectives, cloud-native architecture, and regulatory requirements.</li>
<li>Provide oversight and reporting of information security risks, controls, and posture to senior management and the Board, embedding security into enterprise risk management and decision-making.</li>
</ul>
Risk Management &amp; Compliance<ul>
<li>
Identify, assess, and prioritize security risks, implementing measures to mitigate vulnerabilities.</li>
<li>Ensure ongoing compliance with applicable regulatory, legal, and industry requirements, and act as the primary interface for information security matters with regulators, auditors, and internal risk and compliance functions.</li>
</ul>
Security Operations<ul>
<li>
Oversee day-to-day security operations including incident response, threat detection, and vulnerability management.</li>
<li>Develop and maintain an incident response plan to ensure timely and effective handling of security incidents or breaches.</li>
</ul>
Security Architecture &amp; Vendor Management<ul>
<li>
Define and govern the bank&rsquo;s security architecture, ensuring secure-by-design controls across cloud-native platforms, applications, infrastructure, and data environments.</li>
<li>Oversee third-party and vendor security risk management, including due diligence, onboarding, continuous monitoring, and contractual security obligations for critical and outsourced services.</li>
</ul>
Security Awareness &amp; Culture<ul><li>
To promote a culture of security awareness through training and communication, embedding security responsibility across the organization.</li></ul>
Budget &amp; Resource Management<ul><li>
Manage the cybersecurity budget, ensuring efficient allocation and utilization of resources.</li></ul>
Access Management &amp; Controls<ul>
<li>
Define and enforce access management policies, including user-provisioning, de-provisioning and privileged access controls.</li>
<li>Implement and maintain a trusted software list, regularly reviewing and updating controls.</li>
<li>Evaluate employee software requests and ensure all tools meet internal security standards.
</li></ul>Security tools and the evolving ecosystem<ul><li>
Define and continuously evolve the bank&rsquo;s information security tooling and platforms (e.g., IAM, SIEM/SOC, EDR/XDR, PAM, DLP, cloud security, application security), ensuring effective coverage, integration, and scalability as the bank grows.</li></ul>
ROLE RELATIONSHIP:
Internal<ul>
<li>
Executive Leadership</li>
<li>IT and Operation Teams</li>
<li>Compliance and Risk Management</li>
<li>Internal Audit</li>
</ul>
External<ul>
<li>
Regulatory Authorities (SBP)</li>
<li>Security Vendors and Consultants</li>
<li>Third-Party Partners &amp; Auditors</li>
</ul>
Requirements<ul><li>
Bachelor&rsquo;s or Master&rsquo;s degree in Information Security, Cybersecurity, or related field.
</li></ul><ul><li>Industry certifications such as CISSP, CISM, or CISA are highly desirable.
</li><li>Minimum 15 years of experience in Information Security or related domains.</li>
<li>Proven leadership experience in senior information security roles, preferably in the financial sector.</li>
<li>In-depth knowledge of cybersecurity principles, technologies, and regulatory frameworks.</li>
<li>Banking or FinTech experience prefered</li></ul></div>

Chief Information Security Officer (CISO)

<div>
 As the Chief Information Security Officer (CISO) for HugoBank, a cloud-native digital bank operating in Pakistan, one will play a pivotal leadership role in safeguarding the bank's digital ecosystem. The CISO is responsible for defining and executing the enterprise information security strategy, managing cyber and technology risks, and ensuring compliance with applicable regulatory and supervisory requirements. This role ensures the confidentiality, integrity, and availability of customer data, critical systems, and bank assets across cloud (AWS), on-premises, and third-party environments.
 
 
 
 DUTIES &amp; RESPONSIBILITIES:
 
 
 
 Information Security Strategy &amp; Governance
 
 
 <ul>
 <li>
 Define and execute the bank's enterprise information security strategy and governance framework, ensuring alignment with business objectives, cloud-native architecture, and regulatory requirements
 </li>
 <li>
 Provide oversight and reporting of information security risks, controls, and posture to senior management and the Board, embedding security into enterprise risk management and decision-making
 
 
 </li>
 </ul>
 Risk Management &amp; Compliance
 
 
 <ul>
 <li>
 Identify, assess, and prioritize security risks, implementing measures to mitigate vulnerabilities
 </li>
 <li>
 Ensure ongoing compliance with applicable regulatory, legal, and industry requirements, and act as the primary interface for information security matters with regulators, auditors, and internal risk and compliance functions
 
 
 </li>
 </ul>
 Security Operations
 
 
 <ul>
 <li>
 Oversee day-to-day security operations including incident response, threat detection, and vulnerability management
 </li>
 <li>
 Develop and maintain an incident response plan to ensure timely and effective handling of security incidents or breaches
 
 
 </li>
 </ul>
 Security Architecture &amp; Vendor Management
 
 
 <ul>
 <li>
 Define and govern the bank's security architecture, ensuring secure-by-design controls across cloud-native platforms, applications, infrastructure, and data environments
 </li>
 <li>
 Oversee third-party and vendor security risk management, including due diligence, onboarding, continuous monitoring, and contractual security obligations for critical and outsourced services
 
 
 </li>
 </ul>
 Security Awareness &amp; Culture
 
 
 <ul>
 <li>
 To promote a culture of security awareness through training and communication, embedding security responsibility across the organization
 
 
 </li>
 </ul>
 Budget &amp; Resource Management
 
 
 <ul>
 <li>
 Manage the cybersecurity budget, ensuring efficient allocation and utilization of resources
 
 
 </li>
 </ul>
 Access Management &amp; Controls
 
 
 <ul>
 <li>
 Define and enforce access management policies, including user-provisioning, de-provisioning and privileged access controls
 </li>
 <li>
 Implement and maintain a trusted software list, regularly reviewing and updating controls
 </li>
 <li>
 Evaluate employee software requests and ensure all tools meet internal security standards.
 
 
 </li>
 </ul>
 Security tools and the evolving ecosystem
 
 
 <ul>
 <li>
 Define and continuously evolve the bank's information security tooling and platforms (e.g., IAM, SIEM/SOC, EDR/XDR, PAM, DLP, cloud security, application security), ensuring effective coverage, integration, and scalability as the bank grows
 
 
 </li>
 </ul>
 
 ROLE RELATIONSHIP:
 
 
 
 
 Internal
 
 
 
 <ul>
 <li>
 Executive Leadership
 </li>
 <li>
 IT and Operation Teams
 </li>
 <li>
 Compliance and Risk Management
 </li>
 <li>
 Internal Audit
 
 
 </li>
 </ul>
 
 External
 
 
 
 <ul>
 <li>
 Regulatory Authorities (SBP)
 </li>
 <li>
 Security Vendors and Consultants
 </li>
 <li>
 Third-Party Partners &amp; Auditors
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Bachelor's or Master's degree in Information Security, Cybersecurity, or related field.
 </li>
 <li>
 Industry certifications such as CISSP, CISM, or CISA are highly desirable.
 </li>
 <li>
 Minimum 15 years of experience in Information Security or related domains
 </li>
 <li>
 Proven leadership experience in senior information security roles, preferably in the financial sector
 </li>
 <li>
 In-depth knowledge of cybersecurity principles, technologies, and regulatory frameworks
 </li>
 <li>
 Banking or FinTech experience prefered
 </li>
 </ul>
</div>

Ortak Consultants

HIRING: CHIEF RISK OFFICERA client of Ortak Consultants (Pvt.) Limited is looking for a &quot;CHief Risk Officer&quot;Location: Shahra -e- Faisal, KarachiIndustry: Insurance/Financial ServicesRequirements:<ul><li>Bachelor&rsquo;s or Master&rsquo;s degree in a relevant field.</li><li>Professional certifications such as ACII, FRM, or equivalent preferred.</li><li>15&ndash;20 years of experience in insurance/reinsurance, including senior leadership exposure.</li><li>Strong expertise in reinsurance placements, risk management, and market negotiations.</li><li>Strong leadership, strategic thinking, and decision-making capabilities.</li></ul>Key Responsibilities:<ul><li>Lead end-to-end reinsurance placements, renewals, and treaty management, working closely with underwriting teams to align coverage with portfolio risk profiles.</li><li>Develop strategies aligned with company&rsquo;s risk appetite and business objectives.</li><li>Optimize proportional and non-proportional reinsurance structures for cost efficiency and coverage.</li><li>Ensure compliance with all regulatory, statutory, and internal requirements.</li><li>Build and maintain strong relationships with local and international reinsurers and brokers.</li><li>Monitor global reinsurance market trends, pricing, capacity, and risk events.</li><li>Negotiate reinsurance terms, conditions, and premiums to secure optimal coverage.</li><li>Collaborate with underwriting, claims, and finance teams for risk evaluation, recoveries, and reconciliation.</li><li>Ensure compliance with regulatory, statutory, and internal requirements.</li><li>Lead, mentor, and develop the Risk/Reinsurance team and strengthen enterprise risk management practices.</li><li>Identify potential successors for key roles and ensure effective knowledge transfer.</li><li>Any other tasks assigned by Management time to time.</li></ul>Send your CV to careers@ortakconsultants.com with &ldquo;Chief Risk Officer&rdquo; in the subject line.Job Type: Full-timeWork Location: In person

Chief Risk Officer

Al-Tariq Constructors (Pvt.) Ltd

We are seeking a highly organized, proactive, and professional Personal Assistant to support the Chief Executive Officer. The ideal candidate will have 5 to 8 years of relevant experience in executive support roles and possess excellent communication, coordination, and time-management skills. The candidate must be capable of handling confidential matters with discretion and maintaining a high level of professionalism at all times.Key Responsibilities:<ul><li>Manage CEO&rsquo;s calendar, appointments, and meeting schedules.</li><li>Coordinate internal and external meetings, including preparation of agenda and minutes.</li><li>Handle correspondence, emails, and official communication on behalf of the CEO.</li><li>Arrange travel plans, accommodations, and logistics.</li><li>Prepare reports, presentations, and briefing documents.</li><li>Maintain confidential records and documentation.</li></ul>Requirements:<ul><li>Master&rsquo;s / Bachelor's Degree in Business Administration, Management, or relevant discipline</li><li>5&ndash;8 years of experience as a PA/Executive Assistant to senior management</li><li>Excellent written and verbal communication skills</li><li>Strong organizational and multitasking abilities</li><li>Proficiency in MS Office (Word, Excel, PowerPoint, Outlook)</li></ul>Job Type: Full-timeWork Location: In person

PA to CEO

Arwen Tech

<div>
 Posted on Feb 16, 2026
 
 
 Title
 
 
 Cybersecurity Technical Lead
 
 
 Apply before
 
 
 Mar 31, 2026
 
 
 City
 
 
 Karachi
 
 
 
 Responsibilities
 
 
 
 Summary of Job Profile:
 
 
 Lead the technical strategy, design, implementation, and support of advanced cybersecurity solutions. This role is responsible for translating client requirements into secure, scalable architectures, overseeing solution delivery, and providing expert-level technical leadership throughout the pre-sales, deployment, and post-implementation support lifecycle. This is an elevated leadership position representing the highest technical authority within the cybersecurity domain. While the incumbent will drive technical strategy, ensure delivery excellence, and foster innovation, they will remain under the direct reporting line of the Head of Cybersecurity (CISO) / Cybersecurity Business Unit Head. The role is responsible for translating client requirements into secure, scalable architectures and providing expert-level technical leadership throughout the project lifecycle.
 
 
 
 Essential Duties &amp; Responsibilities
 
 
 
 Technical Leadership &amp; Strategy:
 
 
 <ul>
 <li>
 Develop and own the technical cybersecurity roadmap and solution portfolio.
 </li>
 <li>
 Act as the ultimate technical escalation point for complex cybersecurity projects and support issues.
 </li>
 <li>
 Drive innovation by researching, evaluating, and integrating new security technologies and methodologies into the service offerings.
 </li>
 <li>
 Establish and enforce technical standards, best practices, and architectural principles for all cybersecurity implementations.
 
 
 </li>
 </ul>
 
 Pre-Sales &amp; Solution Design
 
 
 
 <ul>
 <li>
 Partner with the sales and account management teams as the primary technical expert during client engagements.
 </li>
 <li>
 Lead technical discovery sessions to deeply understand client challenges, security posture, and requirements.
 </li>
 <li>
 Architect comprehensive, innovative, and secure solution designs that address client needs, incorporating products, professional services, and managed services.
 </li>
 <li>
 Develop detailed proposals, Bills of Materials (BOM), Statements of Work (SOW), and high-level project plans for proposed solutions.
 </li>
 <li>
 Conduct compelling technical presentations, proof-of-concept (PoC) demonstrations, and whiteboarding sessions for clients and partners.
 
 
 </li>
 </ul>
 
 Implementation &amp; Project Delivery
 
 
 
 <ul>
 <li>
 Provide overarching technical governance and guidance for the implementation of cybersecurity projects.
 </li>
 <li>
 Review and approve detailed implementation plans, design documents, and configuration templates.
 </li>
 <li>
 Troubleshoot and resolve critical technical hurdles encountered during deployment phases.
 </li>
 <li>
 Ensure projects are delivered on time, within scope, and meet the highest quality and security standards.
 
 
 </li>
 </ul>
 
 SOC Operations &amp; Technical Lead Supervision
 
 
 
 <ul>
 <li>
 Act as the Technical Lead for SOC Operations, providing high-level oversight and technical ground supervision for all security monitoring activities.
 </li>
 <li>
 Supervise the SOC team on technical grounds, ensuring the integrity of threat detection logic, alert triaging, and incident response playbooks.
 </li>
 <li>
 Lead the technical maturity of the SOC by auditing technical workflows and ensuring the effective utilization of SIEM, EDR, and NDR tools.
 </li>
 <li>
 Provide expert guidance on complex investigations, performing deep-dive technical analysis for critical security incidents.
 
 
 </li>
 </ul>
 
 Support &amp; Optimization
 
 
 
 <ul>
 <li>
 Define the structure and escalation paths for Level 3 and Level 4 advanced technical support.
 </li>
 <li>
 Analyze recurring support issues to identify root causes and drive permanent solutions, including automation or design changes.
 </li>
 <li>
 Lead periodic security architecture reviews and optimization assessments for key clients to ensure their environment evolves with the threat landscape.
 </li>
 <li>
 Develop and deliver technical training and knowledge transfer sessions for internal implementation and support teams.
 
 
 </li>
 </ul>
 
 Stakeholder &amp; Partnership Management
 
 
 
 <ul>
 <li>
 Build and maintain deep technical relationships with key OEMs, distributors, and technology partners.
 </li>
 <li>
 Collaborate closely with internal teams (PMO, SOC, NOC, Engineering) to ensure seamless solution alignment and service delivery.
 </li>
 <li>
 Serve as a trusted cybersecurity advisor to senior client technical stakeholders.
 
 
 </li>
 </ul>
 Innovation &amp; Intellectual Property Development
 
 
 <ul>
 <li>
 Lead the innovation agenda for the Cybersecurity unit by identifying market gaps and creating opportunities for in-house product accelerators, automation tools, dashboards, and proprietary cybersecurity methodologies.
 </li>
 <li>
 Champion the development of Arwen&rsquo;s own intellectual property (IP) by building repeatable, scalable offerings such as security automation scripts, SOC playbooks, niche security tools, managed service frameworks, and packaged advisory services.
 </li>
 <li>
 Collaborate with cross-functional teams to integrate AI-driven security analytics, workflow automation, and smart dashboards into current and future MSSP/SOC service offerings.
 </li>
 <li>
 Establish an innovation-driven culture within the Cyber team, promoting experimentation, ideation, POCs, and continuous enhancement of internal tools and customer-facing solutions.
 </li>
 <li>
 Engage with external National Incubation Centers (NICs) and relevant innovation ecosystems, either through internal teams or direct collaboration to accelerate the development of innovative cybersecurity solutions and proprietary IP.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 Knowledge, Skills, Abilities (KSA&rsquo;s) required to successfully perform the job:
 
 
 <ul>
 <li>
 Expert-level knowledge across multiple cybersecurity domains: Cloud Security (AWS, Azure, GCP), Network Security (NGFW, SD-WAN, ZTNA), Endpoint Security (EDR/XDR), Identity &amp; Access Management (IAM/PAM), Data Security, and Security Operations (SIEM, SOAR, Threat Intelligence).
 </li>
 <li>
 Mastery of cybersecurity frameworks (NIST CSF, MITRE ATT&amp;CK, ISO 27001) and compliance requirements.
 </li>
 <li>
 Proven ability to design and document complex, integrated security architectures.
 </li>
 <li>
 Exceptional presentation, communication, and interpersonal skills, with the ability to explain complex technical concepts to both technical and non-technical audiences.
 </li>
 <li>
 Strong project and program management acumen, with experience leading large-scale security transformations.
 </li>
 <li>
 Excellent problem-solving, analytical, and decision-making skills.
 </li>
 <li>
 Ability to mentor, guide, and elevate the technical skills of team members.
 
 
 </li>
 </ul>
 
 Education, Experience, Licensure, Certification Required For The Position
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Information Technology, Cybersecurity, or a related field. A Master&rsquo;s degree is preferred.
 </li>
 <li>
 Mandatory Certifications: CISSP required. Additional certifications such as CISM, GIAC (GSE, GWAPT), CCSK, or vendor-specific expert-level certifications (e.g., PCNSE, CCIE Security) are highly desirable.
 </li>
 <li>
 Minimum of 12+ years of progressive experience in cybersecurity, with at least 7 years in a senior technical leadership/architect role involving pre-sales, implementation, and support.
 </li>
 <li>
 Demonstrable experience in designing and delivering multi-vendor, enterprise-grade security solutions.
 
 
 </li>
 </ul>
 
 Competencies Required To Successfully Perform The Job
 
 
 
 Technical Competencies
 
 
 Behavioral/General Competencies
 
 
 <ul>
 <li>
 Security Architecture &amp; Design
 </li>
 <li>
 Advanced Threat Analysis
 </li>
 <li>
 Cloud Security Posture Management
 </li>
 <li>
 Scripting &amp; Automation (Python, PowerShell)
 </li>
 <li>
 Solution Integration &amp; Testing
 </li>
 <li>
 Strategic Thinking &amp; Innovation
 </li>
 <li>
 Client-Centric Mindset
 </li>
 <li>
 Ownership &amp; Accountability
 </li>
 <li>
 Collaborative Leadership
 </li>
 <li>
 Effective Communication &amp; Influence
 </li>
 <li>
 Mentorship &amp; Knowledge Sharing
 </li>
 <li>
 Resilience &amp; Adaptability
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 <ul>
 <li>
 Excellent Salary
 </li>
 <li>
 Fuel Allowance
 </li>
 <li>
 Internet Allowance
 </li>
 <li>
 Medical Insurance
 </li>
 <li>
 Annual Leaves
 </li>
 <li>
 Provident Fund
 </li>
 <li>
 EOBI
 </li>
 <li>
 Annual Bonus
 </li>
 </ul>
</div>

Cybersecurity Technical Lead

GUMCORP (PVT.) LIMITED

We are seeking a detail-oriented and proactive ERP Officer to support, maintain, and optimize our Enterprise Resource Planning (ERP) system. The ERP Officer will play a key role in ensuring system efficiency, supporting users, and aligning ERP functionality with business processes.Key Responsibilities:<ul><li>Administer, support, and maintain the ERP to ensure optimal performance and reliability.</li><li>Monitor ERP system operations, troubleshoot issues, and provide timely resolutions to minimize downtime.</li><li>Manage system configurations, user roles, access controls, and security settings within ERP.</li><li>Coordinate with departments to gather business requirements and translate them into ERP solutions.</li><li>Assist in ERP system upgrades, patches, enhancements, and version updates.</li><li>Perform data validation, data migration support, and system testing activities.</li><li>Develop and maintain ERP documentation including SOPs, user manuals, process flows, and system configurations.</li><li>Provide end-user training and ongoing support to ensure effective ERP utilization.</li><li>Liaise with external vendors, consultants, and Microsoft partners for system support and enhancements.</li><li>Ensure ERP processes comply with internal controls, data security, and organizational policies.</li><li>Identify opportunities for system improvements, automation, and process optimization.</li></ul>Qualifications:<ul><li>Bachelor&rsquo;s degree in Information Technology, ERP or a related field.</li><li>Minimum of 2&ndash;3 years of proven experience working with ERP systems (e.g., SAP, Oracle, Odoo, Microsoft Dynamics)</li><li>Experience with ERP user support, system administration, and troubleshooting.</li></ul>Location: Korangi Industrial AreaJob Type: Full-timeApplication Question(s):<ul><li>What is your current salary?</li><li>What is your expected salary?</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>ERP Consultant: 1 year (Required)</li><li>Microsoft Dynamics: 1 year (Preferred)</li></ul>Work Location: In person

ERP Support Officer

Union Fabrics (Pvt.) Limited

Union Fabrics (Pvt.) Ltd. is a fast growing vertically integrated Textile Manufacturing Company with state-of-the-art facilities---Weaving, Processing &amp; Stitching. Expansion and growth plans have opened up new opportunity for the following position:IT Support OfficerJob Description:The responsibilities of the IT Support Officer includes following but are not limited to these:<ul><li>Provide technical support to end users for hardware, software, and network issues</li><li>Install, configure, and maintain computers, peripherals, and standard applications</li><li>Troubleshoot and resolve IT incidents via helpdesk, phone, email, or in person</li><li>Escalate complex issues to higher-level support or vendors when required</li><li>Maintain and update IT assets, inventory, and documentation</li><li>Assist with system upgrades, patches, and routine maintenance</li><li>Ensure data security, backup procedures, and compliance with IT policies</li><li>Support onboarding and offboarding of staff (user accounts, access, equipment)</li></ul>Experience:<ul><li>At least 1 to 3 years of experience required against the above requirements</li></ul>Qualifications:<ul><li>Bachelor&rsquo;s Degree in Computer Science/Information Technology from any HEC recognized University</li><li>Strong Troubleshooting, Designing and Implementation experience</li><li>Clear concepts and hands-on experience on Core Networks Routing, Switching &amp; Firewalling</li><li>Relevant certifications would be preferred</li></ul>Location: KarachiJob Type: Full-timePay: Rs60,000.00 - Rs70,000.00 per monthExperience:<ul><li>IT Support : 3 years (Required)</li></ul>Work Location: In person

IT Support Officer

Explore 465+ Chief information security officer ciso in Karachi this February. Find roles across top companies and apply now to boost your career.

465 chief information security officer ciso jobs In Karachi

Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)

Chief Risk Officer

PA to CEO

Cybersecurity Technical Lead

ERP Support Officer

IT Support Officer