digital marketing manager

project manager

associate manager, technical support engineering Jobs in Karachi

key account manager

social media manager

cybersecurity manager

Arpatech

ob Title: Information Security ManagerLocation: Karachi (on-site)Shift: 9 AM to 6 PMWe&rsquo;re looking for an experienced Information Security Manager to lead our organization&rsquo;s security operations, compliance efforts, and governance strategy while fostering a culture of cyber resilience across all departments. You&rsquo;ll be responsible for designing and implementing robust security frameworks, ensuring regulatory compliance, managing risks, and driving proactive threat detection and response strategies.Key Responsibilities:-Lead and manage enterprise-wide information security initiatives.-Oversee SOC operations and implement SIEM solutions (experience with Wazuh is highly preferred).-Drive vulnerability management and coordinate with DevOps teams to embed security in CI/CD pipelines (DevSecOps).-Develop, maintain, and enforce information security policies, standards, and procedures aligned with frameworks such as ISO 27001, NIST, and other industry best practices.-Own the organization&rsquo;s GRC (Governance, Risk, and Compliance) function and ensure adherence to relevant laws, regulations, and frameworks.-Act as a key liaison during security audits and assessments.-Promote awareness and training to build a strong internal security culture.--Strong understanding of SDLC.Requirements:-Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or a related field (Master&rsquo;s degree is a plus).-Minimum 8 years of experience in Information Security, with at least 4 years in a leadership or managerial role.-Strong understanding of security frameworks like ISO 27001, NIST, and risk management methodologies.-Hands-on experience with SOC tools, SIEM platforms, vulnerability scanning, and DevSecOps practices.-Proven track record in security compliance, governance, and risk management.-Experience working with or managing Wazuh or similar SIEM platforms is highly desirable.-Industry certifications such as CISSP, CISM, or CISA are a strong plus.Job Type: Full-timeWork Location: In personWork Location: In person

Information Security Manager

Bank Alfalah Limited

<div>
 
 Job Purpose:
 
 
 The Governance, Risk &amp; Compliance Manager is responsible for establishing, managing, and continuously improving the organization&rsquo;s information security governance, risk management, and compliance framework. The role ensures alignment with regulatory requirements, industry standards, and business objectives, while providing strategic oversight, leadership, and assurance to senior management
 
 
 
 
 
 Responsibilities:
 
 <ul>
 <li>
 Support the execution of internal and external information security audits in collaboration with the Team lead.
 </li>
 <li>
 Interpret and implement regulatory requirements and liaise with internal teams to ensure compliance.
 </li>
 <li>
 Facilitate coordination between business and technical teams to conduct comprehensive security reviews.
 </li>
 <li>
 Work with stakeholders to recommend and track risk mitigation measures, ensuring timely closure of identified gaps/observations.
 </li>
 <li>
 Maintain and oversee the information security risk register.
 </li>
 <li>
 Define and maintain risk management framework including risk assessment methodology and risk appetite alignment
 </li>
 <li>
 Coordinate with IT/security teams for mitigation strategies.
 </li>
 <li>
 Assist TL in preparation of reports/presentations for management reporting and ITSC/BITC.
 </li>
 <li>
 Lead and support the development, implementation, and continuous improvement of information security policies, procedures, and governance frameworks to ensure alignment with industry standards and regulatory requirements.
 </li>
 <li>
 Define and monitor KPIs/KRIs to measure effectiveness of security controls and risk posture
 </li>
 <li>
 Ensure organizational policies, processes, and operations achieve full compliance with SBP regulatory requirements, while maintaining alignment with cross‑border regulations.
 </li>
 <li>
 Oversee cyber security and information security (NESA Compliance) programs.
 </li>
 <li>
 Lead risk assessments and ensure compliance of vendors with security requirements
 </li>
 <li>
 Assist in finding technical gaps/weaknesses in BAFL environment through gap assessment exercise.
 </li>
 <li>
 Lead, and manage the IS GRC team in absence of Team Lead
 </li>
 <li>
 Manage risk acceptance process and ensure proper approval from the management
 </li>
 <li>
 Conduct cybersecurity awareness sessions bi-annually for employees to enhance their knowledge of security best practices, helping them recognize and prevent social engineering threats such as phishing, and promoting safer digital behavior
 </li>
 <li>
 Coordinate and manage regulatory inspections and ensure timely closure of observations
 </li>
 </ul>
 
 
</div>

Senior Manager Information Security

Yousuf Adil (Chartered Accountants)

Job SummaryYousuf Adil Chartered Accountants is looking for the position of &ldquo;Manager - Technology &amp; Cyber Risk Advisory&rdquo; within Technology and Cyber Risk Advisory department for itsKarachi office. The incumbent will be responsible for:Job Description<ul><li>Lead end-to-end IT audit and advisory engagements, including planning, execution, reporting, and client communication.</li><li>Assess IT general controls (ITGC), application controls, cybersecurity, cloud environments, and emerging technologies.</li><li>Deliver insights and recommendations to strengthen client risk management and internal controls.</li><li>Support regulatory and compliance projects (e.g., ISO 27001, SOC 1/2, NIST, COBIT, etc.).</li><li>Develop and maintain strong client relationships and contribute to business development.</li><li>Manage and coach junior team members, promoting a culture of excellence and collaboration.</li><li>Relevant certifications such as CISA, CISM, CRISC, or ISO 27001 Lead Auditor are highly preferred.</li><li>Assist in preparing technical proposals for new venture or collaborations .</li></ul>Qualification<ul><li>BS - Computer Science /Information Systems / Cyber Security or related fields.</li></ul>Experience<ul><li>6+ years of experience in IT audit, advisory, cyber security or related fields (preferably in Big 4 firms or any similar sector/consulting services).</li></ul>Job Type: Full-timePay: From Rs200,000.00 per monthApplication Question(s):<ul><li>Do you have experience in IT audit, advisory, cyber security or related fields ?</li><li>Have you completed Bachelors in Computer Science /Information Systems / Cyber Security or related fields.?</li></ul><ul><li>Do you have experience working in any Big four Firms?</li></ul><ul><li>What is your current salary?</li></ul><ul><li>What is your expected salary?</li></ul><ul><li>What will be your notice period?</li></ul>Location:<ul><li>Karachi (Required)</li></ul>Work Location: In person

Manager - Technology and Cyber Risk Advisory

Mashreq

<div>
 
 
 Job Purpose:
 
 
 
 
 Management
 
 
 <ul>
 <li>
 Manage the Cybersecurity (Advisory &amp; Review) vertical within the Information Security function, ensuring risk‑based, business‑aligned guidance and independent reviews across architecture, solution design, and change lifecycles working collaboratively with the group or independently as needed.
 </li>
 <li>
 Establishment, maintenance, and alignment of the security advisory framework, policies, standards, reference architectures, and application security control assessment processes. Apply a data‑driven approach to evaluate adherence, effectiveness, and continuous improvement, either jointly with the group or independently where required.
 </li>
 </ul>
 
 
 Execution
 
 
 <ul>
 <li>
 Delivery of timely, high‑quality advisory engagements and security reviews with clear outcomes, supported by traceable decisions and remediation tracked through closure.
 </li>
 <li>
 Represent Information Security across pre‑implementation advisory forums, security architecture and design reviews, application security control assessments, and security gatekeeping for change management.
 </li>
 </ul>
 
 
 The Manager Cybersecurity (Advisory &amp; Reviewer)
 
 supports the Head of Information Security in achieving the bank&rsquo;s objectives for security advisory services, architecture governance, application security assurance, and secure change management. The role requires a T‑shaped expert with broad security domain exposure and deep capability in advisory, architecture, security controls, cloud security, and secure change governance. Performance is assessed based on improvements in risk posture and control maturity.
 
 
 
 Key Result Areas:
 
 
 
 
 1) Security Advisory Services
 
 
 <ul>
 <li>
 Provide proactive, risk based advisory to security, product, engineering, IT, and business teams on security architecture and controls aligned with group and regulatory requirements
 </li>
 <li>
 Participate in change and architecture forums and issue advisory notes and sign offs with conditions, compensating controls, and defined residual risk.
 </li>
 <li>
 Review RFPs and SOWs and define security requirements for vendors, suppliers, partners, and critical services.
 </li>
 <li>
 
 2) Security Architecture Review
 
 </li>
 <li>
 Review high level and detailed enterprise and solution architectures, data flows, and trust boundaries and recommend security controls aligned with bank standards and industry best practices.
 </li>
 <li>
 Document architecture risks, control gaps, and remediation recommendations.
 </li>
 <li>
 Review security controls and solutions against the bank&rsquo;s policies, standards and industry best practices.
 </li>
 <li>
 Validate the effectiveness of security controls and solutions.
 </li>
 <li>
 Operate a structured exception and risk acceptance process with periodic revalidation and documented compensating controls.
 </li>
 <li>
 Establish and maintain the application security controls assessment framework either in collaboration with the group or independently as required.
 </li>
 <li>
 Conduct application security control assessments, identify gaps, and recommend improvements.
 </li>
 <li>
 Manage an annual assessment cycle and ensure timely completion by application owners.
 </li>
 <li>
 
 3) Security Controls Review
 
 </li>
 <li>
 Review security controls and solutions against the bank&rsquo;s policies, standards and industry best practices.
 </li>
 <li>
 Validate the effectiveness of security controls and solutions.
 </li>
 <li>
 Operate a structured exception and risk acceptance process with periodic revalidation and documented compensating controls.
 </li>
 <li>
 
 4) Application Security Control Assessment
 
 </li>
 <li>
 Establish and maintain the application security controls assessment framework either in collaboration with the group or independently as required.
 </li>
 <li>
 Conduct application security control assessments, identify gaps, and recommend improvements.
 </li>
 <li>
 Manage an annual assessment cycle and ensure timely completion by application owners.
 </li>
 <li>
 
 5) Cloud Security Review
 
 </li>
 <li>
 Review cloud architecture and deployed environments for secure design, clear responsibility boundaries, and compliance with bank standards.
 </li>
 <li>
 Guide teams on cloud governance practices to prevent configuration weaknesses and excessive access.
 </li>
 <li>
 Assess the security of development and deployment processes for cloud workloads.
 </li>
 <li>
 Validate data location and protection and cross border transfer controls to meet regulatory expectations.
 </li>
 </ul>
 
 
 6) Security Gatekeeping
 
 
 <ul>
 <li>
 Review and approve changes for alignment with security policies and controls.
 </li>
 <li>
 Oversee security&rsquo;s role in change governance and participate in formal change review forums.
 </li>
 <li>
 Monitor and report on high-risk security changes and the effectiveness of related controls.
 </li>
 </ul>
 
 
 7) Continuous Security Learning and Improvement
 
 
 <ul>
 <li>
 Share lessons learned from architecture reviews, incidents, assessments, audits, and testing with relevant teams for improving practices, standards, and guidance.
 </li>
 <li>
 Monitor emerging risks and technologies and share relevant security advisory.
 </li>
 </ul>
 
 
 
 
 
 Knowledge, Skills &amp; Experience:
 
 
 
 
 Essential Knowledge
 
 
 <ul>
 <li>
 Graduate or Post Graduate degree in Computer Science, Engineering, or IT or equivalent experience.
 </li>
 <li>
 Professional certifications such as CISSP, TOGAF/SABSA or ITIL
 </li>
 <li>
 At least six years of information security experience in financial institutions or digital banks with at least four years in security advisory, architecture review, and application security control assessment with understanding of cloud security and modern architecture.
 </li>
 <li>
 Strong understanding of key security controls and technologies, including Zero Trust, IAM, PAM, FIM, DLP, firewalls, IDS/IPS, API management/gateways, cryptography, security logging and monitoring, application security controls, and ITSM/change management processes
 </li>
 </ul>
 
 
 Skills and Application
 
 
 <ul>
 <li>
 Proven ability to coordinate cross functional stakeholders and deliver advisory outcomes on time with measurable risk reduction.
 </li>
 <li>
 Excellent written and verbal communication that produces clear advisory notes, assessments, decision records, risk statements, and executive summaries.
 </li>
 <li>
 Strong analytical skills supporting architecture reviews, application security control assessments and the evaluation of security controls.
 </li>
 </ul>
 
 
</div>

Manager - Cyber Security Advisory (Mashreq Digital Bank Pakistan)

<div>
 Job Purpose:
 
 Management
 
 - Manage the Cybersecurity (Advisory &amp; Review) vertical within the Information Security function, ensuring risk‑based, business‑aligned guidance and independent reviews across architecture, solution design, and change lifecycles working collaboratively with the group or independently as needed.
 
 
 - Establishment, maintenance, and alignment of the security advisory framework, policies, standards, reference architectures, and application security control assessment processes. Apply a data‑driven approach to evaluate adherence, effectiveness, and continuous improvement, either jointly with the group or independently where required.
 
 
 Execution
 
 - Delivery of timely, high‑quality advisory engagements and security reviews with clear outcomes, supported by traceable decisions and remediation tracked through closure.
 
 
 - Represent Information Security across pre‑implementation advisory forums, security architecture and design reviews, application security control assessments, and security gatekeeping for change management.
 
 
 The Manager Cybersecurity (Advisory &amp; Reviewer) supports the Head of Information Security in achieving the bank&rsquo;s objectives for security advisory services, architecture governance, application security assurance, and secure change management. The role requires a T‑shaped expert with broad security domain exposure and deep capability in advisory, architecture, security controls, cloud security, and secure change governance. Performance is assessed based on improvements in risk posture and control maturity.
 
 Key Result Areas:
 
 1) Security Advisory Services
 
 - Provide proactive, risk based advisory to security, product, engineering, IT, and business teams on security architecture and controls aligned with group and regulatory requirements
 
 - Participate in change and architecture forums and issue advisory notes and sign offs with conditions, compensating controls, and defined residual risk.
 
 - Review RFPs and SOWs and define security requirements for vendors, suppliers, partners, and critical services.
 
 2) Security Architecture Review
 
 
 - Review high level and detailed enterprise and solution architectures, data flows, and trust boundaries and recommend security controls aligned with bank standards and industry best practices.
 
 - Document architecture risks, control gaps, and remediation recommendations.
 
 - Review security controls and solutions against the bank&rsquo;s policies, standards and industry best practices.
 
 - Validate the effectiveness of security controls and solutions.
 
 - Operate a structured exception and risk acceptance process with periodic revalidation and documented compensating controls.
 
 - Establish and maintain the application security controls assessment framework either in collaboration with the group or independently as required.
 
 - Conduct application security control assessments, identify gaps, and recommend improvements.
 
 - Manage an annual assessment cycle and ensure timely completion by application owners.
 
 3) Security Controls Review
 
 
 - Review security controls and solutions against the bank&rsquo;s policies, standards and industry best practices.
 
 - Validate the effectiveness of security controls and solutions.
 
 - Operate a structured exception and risk acceptance process with periodic revalidation and documented compensating controls.
 
 4) Application Security Control Assessment
 
 
 - Establish and maintain the application security controls assessment framework either in collaboration with the group or independently as required.
 
 - Conduct application security control assessments, identify gaps, and recommend improvements.
 
 - Manage an annual assessment cycle and ensure timely completion by application owners.
 
 5) Cloud Security Review
 
 
 - Review cloud architecture and deployed environments for secure design, clear responsibility boundaries, and compliance with bank standards.
 
 - Guide teams on cloud governance practices to prevent configuration weaknesses and excessive access.
 
 - Assess the security of development and deployment processes for cloud workloads.
 
 - Validate data location and protection and cross border transfer controls to meet regulatory expectations.
 
 6) Security Gatekeeping
 
 - Review and approve changes for alignment with security policies and controls.
 
 - Oversee security&rsquo;s role in change governance and participate in formal change review forums.
 
 - Monitor and report on high-risk security changes and the effectiveness of related controls.
 
 7) Continuous Security Learning and Improvement
 
 - Share lessons learned from architecture reviews, incidents, assessments, audits, and testing with relevant teams for improving practices, standards, and guidance.
 
 - Monitor emerging risks and technologies and share relevant security advisory.
 
 
 Knowledge, Skills &amp; Experience:
 
 Essential Knowledge
 
 - Graduate or Post Graduate degree in Computer Science, Engineering, or IT or equivalent experience.
 
 - Professional certifications such as CISSP, TOGAF/SABSA or ITIL
 
 - At least six years of information security experience in financial institutions or digital banks with at least four years in security advisory, architecture review, and application security control assessment with understanding of cloud security and modern architecture.
 
 - Strong understanding of key security controls and technologies, including Zero Trust, IAM, PAM, FIM, DLP, firewalls, IDS/IPS, API management/gateways, cryptography, security logging and monitoring, application security controls, and ITSM/change management processes
 
 Skills and Application
 
 - Proven ability to coordinate cross functional stakeholders and deliver advisory outcomes on time with measurable risk reduction.
 
 - Excellent written and verbal communication that produces clear advisory notes, assessments, decision records, risk statements, and executive summaries.
 
 - Strong analytical skills supporting architecture reviews, application security control assessments and the evaluation of security controls.
</div>

Manager - Cyber Security Advisory

HR POD Careers

<div>
 
 Requirements:
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Systems, or a related field.
 </li>
 <li>
 2+ years of experience in Cyber Security, SOC, or IT Security roles.
 </li>
 <li>
 Basic understanding of SOC operations, SIEM tools, and incident management.
 </li>
 <li>
 Familiarity with security monitoring, alert analysis, and incident escalation processes.
 </li>
 <li>
 Understanding of core cybersecurity concepts such as threats, vulnerabilities, and attack vectors.
 </li>
 <li>
 Certifications such as CompTIA Security+, CompTIA CySA+, or EC-Council Certified SOC Analyst (CSA) will be a strong advantage.
 </li>
 <li>
 Strong analytical and problem-solving skills with attention to detail.
 </li>
 <li>
 Willingness to learn and stay updated with evolving cybersecurity threats.
 
 
 
 </li>
 </ul>
 
 Responsibilities:
 
 
 
 <ul>
 <li>
 Monitor security events and alerts across organizational networks and systems using SIEM tools.
 </li>
 <li>
 Analyze security alerts to identify potential threats, anomalies, and suspicious activities.
 </li>
 <li>
 Assist in the detection, triage, and escalation of security incidents based on severity and impact.
 </li>
 <li>
 Respond to security incidents in a timely manner by following established incident response procedures and protocols.
 </li>
 <li>
 Support investigation of security breaches, including root cause analysis and impact assessment.
 </li>
 <li>
 Document security incidents, findings, and resolution actions clearly and accurately.
 </li>
 <li>
 Recommend corrective actions and preventive measures to reduce future security risks.
 </li>
 <li>
 Stay updated on the latest cybersecurity threats, vulnerabilities, and attack techniques.
 </li>
 <li>
 Utilize threat intelligence sources and feeds to enhance detection and improve organizational security posture.
 </li>
 <li>
 Collaborate with internal IT and security teams to strengthen overall defense mechanisms.
 
 </li>
 </ul>
</div>

Cyber Security Specialist (Onsite, Karachi, PKR Salary)

Alykas

SOC Analyst &ndash; AlykasAbout AlykasAlykas is a US-based company providing intelligent, end-to-end IT and cybersecurity solutions designed for mid-market and enterprise organizations. Our mission is to deliver measurable outcomes that reduce risk, enhance operational efficiency, and turn technology into a strategic competitive advantage.We offer a comprehensive portfolio of services, including Managed IT Services, Cloud &amp; Data Center Solutions, IT Advisory &amp; Consulting, and Cybersecurity Solutions. Our team of globally experienced, culturally aligned engineers provides consistent, expert support tailored to meet the complex needs of today&rsquo;s dynamic business environments.Position OverviewAs a SOC Analyst at Alykas, you will play a critical role in safeguarding our clients against evolving cyber threats through advanced security monitoring, analysis, and incident response. Working within a multi-tenant Security Operations Center (SOC), you will support multiple clients using a range of cutting-edge cybersecurity technologies including SIEM, EDR, MFA, and more.Your responsibilities will span threat detection, incident triage, and proactive threat hunting, as well as utilizing tools such as PAM, email security, firewalls, and IAM systems to enhance client security postures. Strong communication and collaboration skills are essential, as you&rsquo;ll regularly engage with clients and internal teams to ensure swift, effective responses to security challenges.Key Responsibilities<ul><li>Monitor and analyze security alerts using SIEM platforms</li><li>Conduct initial triage, assess incident severity, and take appropriate response actions</li><li>Investigate indicators of compromise (IOCs) and document findings comprehensively</li><li>Respond to incidents following established playbooks and escalation procedures</li><li>Collaborate with cross-functional teams to resolve security incidents efficiently</li><li>Maintain accurate documentation of investigations, incidents, and remediation activities</li><li>Stay current with emerging cyber threats, technologies, and defensive strategies</li></ul>Must-Haves<ul><li>Minimum 3 years of experience in a Security Operations Center (SOC)</li><li>Proficiency with endpoint detection tools (e.g., SentinelOne, CrowdStrike, Microsoft Defender)</li><li>Hands-on experience with incident response and ticketing systems</li><li>Strong client-facing communication and reporting skills</li><li>Familiarity with firewall technologies</li><li>Fluent English communication skills, both written and verbal essential for working with Alykas&rsquo;s international clients</li></ul>Experience With<ul><li>SIEM platforms such as QRadar, Splunk, or AlienVault</li></ul>Nice-to-Haves (Plusses)<ul><li>Experience with automation platforms (SOAR) and scripting (e.g., Python)</li><li>Exposure to Vulnerability Management and SCCM</li><li>Background in Cyber Threat Hunting (CTH) or Cyber Threat Intelligence (CTI)</li><li>Relevant certifications such as Security+, CySA+, CISSP, or CEH</li><li>Knowledge of Identity and Access Management (IAM), particularly Active Directory</li></ul>Benefits<ul><li>Competitive salary based on experience</li><li>Performance-based bonus program</li><li>Comprehensive benefits package, including health insurance and paid time off</li><li>Collaborative work environment at world-class, state-of-the-art service delivery centers</li><li>Company-sponsored certifications and ongoing professional development opportunities</li><li>Unlimited lab access for hands-on learning and technical skill enhancement</li></ul>Join the Alykas MissionAt Alykas, we are driven by a shared mission &mdash; to defend digital assets, empower secure business operations, and deliver excellence in every interaction. If you&rsquo;re passionate about cybersecurity and eager to grow in a collaborative, globally engaged environment.Apply today and take the next step in your cybersecurity career with Alykas.Job Type: Full-timePay: Rs120,000.00 - Rs170,000.00 per monthLanguage:<ul><li>English (Preferred)</li></ul>Work Location: In person

SOC Analyst

Explore 482+ Cybersecurity manager in Karachi this May. Find roles across top companies and apply now to boost your career.