information security lead

Arpatech

Job Title: Information Security ManagerLocation: Karachi (on-site)Shift: 9 AM to 6 PMWe&rsquo;re looking for an experienced Information Security Manager to lead our organization&rsquo;s security operations, compliance efforts, and governance strategy while fostering a culture of cyber resilience across all departments. You&rsquo;ll be responsible for designing and implementing robust security frameworks, ensuring regulatory compliance, managing risks, and driving proactive threat detection and response strategies.Key Responsibilities:-Lead and manage enterprise-wide information security initiatives.-Oversee SOC operations and implement SIEM solutions (experience with Wazuh is highly preferred).-Drive vulnerability management and coordinate with DevOps teams to embed security in CI/CD pipelines (DevSecOps).-Develop, maintain, and enforce information security policies, standards, and procedures aligned with frameworks such as ISO 27001, NIST, and other industry best practices.-Own the organization&rsquo;s GRC (Governance, Risk, and Compliance) function and ensure adherence to relevant laws, regulations, and frameworks.-Act as a key liaison during security audits and assessments.-Promote awareness and training to build a strong internal security culture.--Strong understanding of SDLC.Requirements:-Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or a related field (Master&rsquo;s degree is a plus).-Minimum 8 years of experience in Information Security, with at least 4 years in a leadership or managerial role.-Strong understanding of security frameworks like ISO 27001, NIST, and risk management methodologies.-Hands-on experience with SOC tools, SIEM platforms, vulnerability scanning, and DevSecOps practices.-Proven track record in security compliance, governance, and risk management.-Experience working with or managing Wazuh or similar SIEM platforms is highly desirable.-Industry certifications such as CISSP, CISM, or CISA are a strong plus.Job Type: Full-timeWork Location: In person

Information Security Manager

Job Title: Information Security Manager Location: Karachi (on-site) Shift: 9 AM to 6 PM We&rsquo;re looking for an experienced Information Security Manager to lead our organization&rsquo;s security operations, compliance efforts, and governance strategy while fostering a culture of cyber resilience across all departments. You&rsquo;ll be responsible for designing and implementing robust security frameworks, ensuring regulatory compliance, managing risks, and driving proactive threat detection and response strategies. Key Responsibilities: -Lead and manage enterprise-wide information security initiatives. -Oversee SOC operations and implement SIEM solutions (experience with Wazuh is highly preferred). -Drive vulnerability management and coordinate with DevOps teams to embed security in CI/CD pipelines (DevSecOps). -Develop, maintain, and enforce information security policies, standards, and procedures aligned with frameworks such as ISO 27001, NIST, and other industry best practices. -Own the organization&rsquo;s GRC (Governance, Risk, and Compliance) function and ensure adherence to relevant laws, regulations, and frameworks. -Act as a key liaison during security audits and assessments. -Promote awareness and training to build a strong internal security culture. -Strong understanding of SDLC. Requirements: -Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or a related field (Master&rsquo;s degree is a plus). -Minimum 8 years of experience in Information Security, with at least 4 years in a leadership or managerial role. -Strong understanding of security frameworks like ISO 27001, NIST, and risk management methodologies. -Hands-on experience with SOC tools, SIEM platforms, vulnerability scanning, and DevSecOps practices. -Proven track record in security compliance, governance, and risk management. -Experience working with or managing Wazuh or similar SIEM platforms is highly desirable. -Industry certifications such as CISSP, CISM, or CISA are a strong plus. Strong understanding of SDLC. Job Type: Full-timeWork Location: In personJob Type: Full-timeWork Location: In person

Information Security Manager/ Pre-sales Manager Information Security

aQovia

<div>About Aqovia:
At the Intersection of Innovation and Impact, introducing Aqovia. Aqovia is an international technology firm dedicated to creating tangible value through the power of AI, data-driven, and bespoke software solutions and services.
Our unique approach extends beyond traditional service and solutions delivery, we strategically invest in and nurture a diverse portfolio of promising companies operating across vital sectors including; financial services, health, infrastructure management, sustainability, education, and business intelligence.
This commitment to fostering innovation across a broad spectrum allows Aqovia to stay at the cutting edge, delivering transformative solutions and creating significant impact. For our clients and strategic partners.
Job Description:
Aqovia is seeking a Security Officer to lead and enhance our Information Security Management System (ISMS) and strengthen our global security posture. This role is responsible for ensuring compliance and accreditation with relevant international security standards and frameworks.
You will oversee security governance, risk management, and operational security processes, ensuring the protection of our platforms, data, and services, including fintech and cloud-based solutions used across our client base.
As Aqovia continues to scale, this role will naturally evolve with the organisation. The successful candidate will have the opportunity to grow into expanded leadership responsibilities, with potential progression toward a CISO-level or equivalent senior security leadership position as our security function matures.
Key Responsibilities:<ul><li>
Oversee the organisation&rsquo;s security infrastructure, governance, and operational security across all operating territories (currently Pakistan, UAE, and UK), including all client engagements.</li><li>
Author, review, and maintain comprehensive security policies, procedures, and standards aligned to recognised frameworks such as ISO 27001, NIST CSF and OWASP ASVS..</li><li>
Conduct regular risk assessments, audits, monitoring and compliance reviews and reports to meet international and regional regulatory expectations.</li><li>
Perform security awareness training for employees including during both onboarding and on an ongoing basis.</li><li>
Ensure achievement and renewal of all necessary security accreditations including ISO 27001, Cyber Essentials and PCI-DSS.</li><li>
Manage corrective action plans and lead remediation efforts for identified security risks.</li><li>
Perform due diligence for supply chain and vendor security, including third-party risk assessments for partners in Pakistan, UAE, and the UK.</li><li>
Produce SOC2 reports.</li><li>
Collaborate closely with engineering, delivery, and client teams to improve overall security maturity and awareness across the organisation with a DevSecOps approach.</li><li>
Monitor emerging cybersecurity threats, technologies, and compliance requirements to proactively enhance the security framework.</li><li>
Support security requirements for cloud, SaaS, fintech, and platform-based deployments across multiple markets.</li></ul>
Qualifications:<ul><li>
Significant experience in information security, ideally in fintech, telecom, digital platforms, or technology services.</li><li>
Proven experience implementing ISO27001 and securing accreditation in an agile software development environment.</li><li>
Familiarity with, and commitment to, a DevSecOps approach to software security..</li><li>
Demonstrate understanding of cyber security frameworks such as NIST CSF or Cyber Essentials and web application security frameworks such as OWASP ASVS..</li><li>
Strong knowledge of assurance and auditing frameworks, especially SOC2.</li><li>
Demonstrated experience in developing and maintaining information security policies and operational security procedures.</li><li>
Experience leading risk management initiatives and managing corrective action plans.</li><li>
Familiarity with third-party risk management and supply chain security.</li><li>
Strong stakeholder management and the ability to partner effectively with cross-functional and international teams.</li><li>
Professional certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor are preferred.</li><li>
Broad technical understanding across Cloud, SaaS, SDLC, Identity &amp; Access Management (IAM), networking, and vulnerability management.</li></ul>
Skills:<ul><li>
Excellent communication skills, with the ability to articulate risk and security concepts to both technical and non-technical audiences.</li><li>
Strong analytical, investigative, and problem-solving abilities.</li><li>
Ability to work collaboratively and lead initiatives in a fast-paced, multi-regional environment.</li><li>
High level of integrity, discretion, and professionalism in handling sensitive information.</li></ul> 
 
Joining Aqovia means:<ul><li>
Making a real difference: You'll be part of a team developing solutions that empower businesses while contributing to sustainable practices.</li><li>
Growth opportunities: We invest in our employees' development and offer a path for career advancement.</li><li>
Collaborative culture: We value teamwork, open communication, and a supportive environment.</li><li>
Competitive benefits package: TBC and discussed with the talent team</li></ul>
If you're a problem-solver who thrives in a fast-paced environment and shares our commitment to positive impact, we encourage you to apply!
Equal Opportunity Employer:
At Aqovia, we believe in the strength of diversity. We strive to reflect the varied markets we serve and foster an inclusive culture where everyone feels welcome, valued, and empowered to be their authentic selves. As an equal opportunity employer, we are committed to embracing all forms of diversity across our organisation.</div>

IT Security Officer

Etisalat

<div><div>Information Security Senior Analyst.Enterprise Security - (240001AD)</div><div>
Description<div></div> 
Job Purpose
Responsible for developing and implementing Etisalat's information security program and security strategy to protect Etisalat&rsquo;s information assets and minimize risk
Report To Position Name
&bull; Support the Senior Team Leader Information Security/ Manager in implementing and developing the Information Security Program.&bull; Research and assist in the evaluation of products and technologies to protect Etisalat&rsquo;s Information Security assets and capable of evaluating products/technologies independently.&bull; Keep abreast of the latest threats and practices to address security exposures and threats and propose solutions.&bull; Perform penetration testing and auditing activities under the supervision of the Senior Team Leader Information Security/ Manager.&bull; Assist in the development and implementation of the information security awareness program.&bull; Lead incident handling, response and investigation activities.&bull; Perform application security related activities including integrating security throughout the application development lifecycle.&bull; Develop and review information security policies, standards, and guidelines under the supervision of the Senior Team Leader Information Security/ Manager.&bull; Perform other information security related duties as assigned (capable of working with minimal guidance and support).<div> 
</div></div><div>
Qualifications<div></div> 
QUALIFICATIONS_ESSENTIAL
&bull; University Degree in BSC in Communication Engineering or Computer Engineering&bull; Previous experience should be in one of the following areas: Network Security, Application Development, Information Security, System Administration&bull; Very Good Computer skills&bull; Fast learner and reader with the ability to understand diverse technologies&bull; Very Good in Arabic &amp; English (Reading, Writing &amp; Oral). 
QUALIFICATIONS_DESIRABLE
Good knowledge of system administration, web application development, and auditing. 
EXPERIENCE_ESSENTIAL
Minimum 4 years experience (with at least 18 months of information security experience) 
EXPERIENCE_DESIRABLE
N/A 
CERTIFICATIONS_ESSENTIAL
&bull; Certified Information Systems Security Professional (CISSP).&bull; Certified Information Systems Auditor (CISA).&bull; ISO 27001 Lead Auditor.&bull; Penetration testing certifications.<div> 
</div></div><div>
Job: Senior Analyst</div><div>
Organization: Etisalat-Misr</div><div>
 Non-Management</div><div>
Job Posting: 28/Dec/2025, 5:05:51 AM</div></div>

Information Security Senior Analyst.Enterprise Security

Stitch

Job Title: Cyber Security Officer &ndash; Compliance, Risk &amp; CryptographyLocation: United Arab EmiratesExperience Level: 8+ yearsDepartment: Information Security / Risk &amp; ComplianceReports To: Chief Information Security Officer (CISO) / Head of Security GovernancePosition OverviewWe are seeking a seasoned Cyber Security Officer to lead and maintain our organization&rsquo;s information security, compliance, and cryptographic infrastructure. The ideal candidate will bring deep expertise in PCI DSS, ISO 27001, SOC 1 &amp; 2, and privacy-related standards, combined with a strong understanding of SAMA Cyber Security Framework (CSF), NCA ECC and CCC, and Sarie security controls.This role will drive cybersecurity strategy, governance, and architecture, ensuring the organization&rsquo;s systems, data, and payment infrastructure remain secure, compliant, and resilient to emerging threats.Key ResponsibilitiesInformation Security Governance &amp; Strategy<ul><li>Develop and maintain the organization&rsquo;s cybersecurity strategy, roadmap, and governance framework.</li><li>Define, implement, and maintain security policies, standards, and procedures in alignment with international best practices (ISO, PCI, NIST).</li><li>Lead risk assessments, gap analyses, and develop mitigation strategies across business units.</li><li>Oversee internal and external cybersecurity audits and coordinate responses and remediation.</li><li>Report key risk and compliance metrics to executive management and regulatory stakeholders.</li></ul>Compliance &amp; Certifications<ul><li>Maintain and ensure ongoing compliance with:</li><li>PCI DSS (including PCI PIN and P2PE)</li><li>ISO 27001, SOC 1 &amp; SOC 2, ISO 27701 (Privacy Information Management)</li><li>SAMA Cyber Security Framework (CSF) and NCA ECC/CCC</li><li>Sarie and UAE Central Bank regulatory requirements</li><li>Oversee audit readiness, manage evidence collection, and coordinate with QSA and internal audit teams.</li><li>Drive continuous improvement in security maturity and compliance posture.</li></ul>Cryptography &amp; Key Management<ul><li>Manage HSM operations, cryptographic key generation, rotation, and destruction procedures in compliance with PCI PIN and PCI DSS.</li><li>Maintain Key Management Systems (KMS) and enforce strict segregation of duties and dual control mechanisms.</li><li>Develop and review Key Management Policies (KMP) and ensure secure storage, handling, and lifecycle documentation.</li><li>Support encryption architecture, ensuring data confidentiality and integrity across systems and payment channels.</li></ul>Cybersecurity Architecture &amp; Operations<ul><li>Define and maintain cybersecurity architecture and ensure integration of secure design principles across IT and fintech platforms.</li><li>Collaborate with infrastructure, DevOps, and product teams to embed security by design in new systems and applications.</li><li>Evaluate and implement security tools such as SIEM, DLP, IAM, EDR, and vulnerability management solutions.</li><li>Lead incident response and root cause analysis (RCA) for major security events and ensure lessons learned are institutionalized.</li></ul>Internal Audit &amp; Risk Management<ul><li>Conduct periodic internal audits of critical systems, data flows, and control environments.</li><li>Identify control gaps and lead remediation plans in coordination with technology and compliance teams.</li><li>Support third-party risk assessments, ensuring vendors adhere to corporate and regulatory security standards.</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in information security, Computer Science, or related field</li><li>8+ years of experience in cybersecurity, compliance, and information security governance, preferably in fintech, banking, or payment processing.</li><li>Proven expertise in maintaining compliance with PCI DSS, PCI PIN, ISO 27001, SOC 1 &amp; 2, ISO 27701, and related privacy standards.</li><li>Strong working knowledge of SAMA CSF, NCA ECC/CCC, and Sarie frameworks in the GCC context.</li><li>Hands-on experience with HSMs (Thales, Utimaco, SafeNet, etc.), cryptographic key management, and secure key ceremonies.</li><li>Familiarity with cybersecurity architecture, risk management, and threat mitigation frameworks (NIST CSF, CIS, ISO 27005).</li><li>Strong understanding of network security, encryption standards, incident response, and vulnerability management.</li><li>Excellent communication, leadership, and stakeholder management skills.</li></ul>Preferred Qualifications<ul><li>Relevant certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer / Auditor, PCI ISA / QSA.</li><li>Experience working with financial regulators in the GCC and managing multi-audit environments.</li><li>Exposure to Cloud Security (ISO 27017/27018, CSA CCM) and privacy regulations (GDPR, DIFC, ADGM DP Law).</li><li>Strong presentation and executive reporting capabilities.</li></ul>Key Performance Indicators (KPIs)<ul><li>Audit and certification renewal success rate (PCI DSS, ISO, SOC, etc.)</li><li>Security incident rate reduction and MTTR (Mean Time to Resolve)</li><li>Compliance gap closure and risk mitigation timelines</li><li>Security architecture and roadmap maturity level improvements</li><li>Stakeholder satisfaction and regulatory compliance audit outcomes</li></ul>Job Type: Full-time

cyber security officer

TechDefence Labs

<div><div>Title: Manager &ndash; Information Security Compliance</div><div>
Location: Ahmedabad</div><div>
Exp: 5-7 Years 
</div><div></div> 
<div>Educational Qualification:</div><div></div><div> 
Graduate/ postgraduate in Information security/ cyber security/ information technology/ computer science/ computer application</div><div></div><div> 
Professional Qualification:</div><ul><li>
Certified Information Security Manager (CISM) and ISO/ IEC 27001 Lead Implementer/ Auditor</li><li>
Certification specific to data privacy will be an added advantage.</li></ul><div></div><div> 
Job Description:</div><ul><li>
Lead and drive Information security/ cyber security and data privacy implementation projects/ assignments for clients.</li><li>
Conduct cyber security maturity assessment with technical evaluation in a highly technical environment.</li><li>
Perform risk assessment, business impact analysis (BIA), Privacy Impact Assessment (PIA) and data protection impact assessment (DPIA) as per client's organization context.</li><li>
Drive and enhance third party risk management program.</li><li>
Lead and drive ISO/ IEC 27001 audit, SOC 2 Type 2 and other GRC framework/ standard/ regulation implementation/ assessment.</li><li>
Manage client communication, including documentation of requirement gathering, scoping, and deliverables.</li><li>
Lead, guide and mentor the team of GRC professionals.</li><li>
Track project deliverables and provide status updates to the management on a periodic basis.</li></ul><div></div><div> 
Experience:</div><ul><li>
Five to seven years of dedicated experience in Governance, Risk and Compliance (GRC) domain with hands-on experience on implementation, technical assessment of requirements of standards/ frameworks/ regulations such as ISO/ IEC 27001, NIST, SOC2, CERT-IN, RBI, SEBI, IRDAI in highly technical environment.
</li><li>Prior experience in a consulting firm as a client-facing role.</li><li>
Proven experience in end-to-end implementation of GRC frameworks, development, and enforcement of policy/ strategy tailored to client needs.
</li><li>Exposure in DPDPA, PDPL, GDPR, NCA-ECC (Essential Cybersecurity Controls) and NCA-CCC (Cloud Cybersecurity Controls) will be an added advantage.</li><li>
Deep working knowledge of security solutions, technology platforms and controls such as identity and access management including privilege identity/ access management, active directory services, SIEM-SOAR, EDR/ XDR, cloud security, firewalls, IPS/ IDS, WAF, DDOS, Data leakage prevention, Mobile device management (MDM), virtualization.</li><li>
Deep working knowledge of Incident Management, Patch Management, VA/ PT, Change Management, Configuration Management
</li><li>Ability to validate effectiveness of implemented controls.</li><li>
Candidates with IT security background with above mentioned experience and exposure to manage and monitor compliance dashboard &amp; posture through GRC tools will be preferred.</li></ul><div></div><div> 
Desired attributes</div><ul><li>
Proven stakeholder management skills.</li><li>
Excellent communication and presentation skills with the ability to articulate technical matters effectively to audiences in technical, non-technical and leadership capability.</li></ul></div><div></div>

Manager - INFOSEC Compliance

Lesha Bank

<div>
 
 Lesha Bank is searching for the greatest talent and brightest minds to contribute to the current growth phase at our bank. We are looking for top-tier individuals who are passionate and hungry to add value from day one. Every day at Lesha is different, presenting a new challenge with the opportunity to contribute and grow. We are looking for an Information Security Officer (ISO).
 
 
 
 
 
 
 Role Purpose
 
 
 
 The Information Security Officer (ISO) will develop, implement, and oversee the bank&rsquo;s information security strategy, policies, and controls. The ISO ensures that the bank&rsquo;s data, systems, applications, and infrastructure are safeguarded against internal and external threats while complying with local regulatory requirements (QCB, QFCRA, NCSA-Q) and international standards (ISO 27001, NIST, GDPR, PCI-DSS).
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 Governance &amp; Compliance
 
 
 <ul>
 <li>
 Establish, maintain, and enforce the bank&rsquo;s information security framework in alignment with QCB, QFCRA, and local cybersecurity regulations.
 </li>
 <li>
 Ensure compliance with international standards (ISO 27001, NIST CSF, COBIT, PCI-DSS) and conduct regular gap analyses.
 </li>
 <li>
 Prepare and present security risk assessments and reports to senior management, regulators, and the Board Risk Committee.
 </li>
 <li>
 Design, implement, and enforce security policies, procedures, and controls to safeguard the bank&rsquo;s infrastructure and data.
 </li>
 </ul>
 
 
 
 
 
 Security Operations
 
 
 <ul>
 <li>
 Oversee Security Operations Center (SOC) activities, incident response, and threat intelligence monitoring.
 </li>
 <li>
 Develop and maintain business continuity, disaster recovery, and incident response plans.
 </li>
 <li>
 Implement and monitor Data Loss Prevention (DLP), intrusion detection/prevention (IDS/IPS), endpoint protection, and other security tools.
 </li>
 <li>
 Lead investigations of security breaches, develop mitigation strategies, and ensure lessons learned are integrated into policies and processes.
 </li>
 <li>
 Conduct regular staff training on security awareness, best practices, and incident procedures.
 </li>
 <li>
 Collaborate with IT and business teams to continuously enhance security culture and controls.
 </li>
 </ul>
 
 
 
 
 
 Risk Management
 
 
 <ul>
 <li>
 Conduct enterprise-wide risk assessments for systems, applications, vendors, and third-party service providers.
 </li>
 <li>
 Identify vulnerabilities and ensure timely remediation through patch management and secure configurations.
 </li>
 <li>
 Partner with IT and business units to integrate security into new products and initiatives.
 </li>
 </ul>
 
 
 
 
 
 Vendor &amp; Technology Oversight
 
 
 <ul>
 <li>
 Evaluate and approve technology vendors, outsourcing partners, and cloud solutions for security compliance.
 </li>
 <li>
 Manage penetration tests, vulnerability assessments, and external audits.
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field. Master&rsquo;s degree preferred.
 </li>
 <li>
 Professional certifications: CISSP or CISM required; CISA and ISO 27001 Lead Implementer preferred.
 </li>
 <li>
 Cloud security certifications (e.g., CCSP, AWS Security) are a plus.
 </li>
 <li>
 8&ndash;12 years in information security, with at least 5 years in the financial-services sector.
 </li>
 <li>
 Strong background in banking systems, digital channels, payment systems, and regulatory compliance.
 </li>
 <li>
 Proven experience engaging with regulators (QCB, QFCRA, CMA, or equivalent).
 </li>
 <li>
 Proven experience in implementing SIEM solutions and managing SOC teams.
 </li>
 <li>
 Expertise in cybersecurity frameworks, network security, cryptography, and identity &amp; access management.
 </li>
 <li>
 Strong risk management, analytical, and problem-solving skills.
 </li>
 <li>
 Excellent communication and stakeholder-management skills, capable of engaging effectively with regulators, auditors, and the Board.
 </li>
 <li>
 Ability to influence across departments, drive a culture of security, and lead change initiatives without direct authority.
 </li>
 </ul>
 
 
</div>

Information Security Officer (ISO)

Search 10000+ Information security lead jobs near you this January. New roles added regularly across leading industries. Apply today.