education consultant

principal consultant - cyber security Jobs in Karachi Jobs In Karachi

principal consultant - cyber security

senior implementation consultant Jobs in Karachi Jobs In Karachi

senior implementation consultant

academic phd consultant (engineering) Jobs in Karachi Jobs In Karachi

academic phd consultant (engineering)

principal consultant cyber security

Inbox Business Technologies

<div>We are seeking a highly experienced Principal Consultant &ndash; Cyber Security to provide strategic direction and delivery leadership across cybersecurity consulting engagements. The role encompasses advisory, assessment, and architecture review services across enterprise IT infrastructure environments, including systems, networks, cloud platforms, endpoints, and associated technologies.
The Principal Consultant will act as a subject matter authority and mentor, guiding consulting teams in delivering high-quality, audit-aligned, and regulator-ready cybersecurity engagements. The role requires strong expertise in enterprise security architecture, governance models, and regulatory frameworks, combined with the ability to elevate team capability and strengthen delivery standards.
Exposure to Operational Technology (OT) security environments will be considered an added advantage.<h3 class="jobSectionHeader">
Responsibilities</h3><ul>
<li>Provide strategic leadership and direction across cybersecurity consulting engagements, ensuring consistent delivery excellence, quality governance, and client satisfaction.</li>
<li>Lead and oversee enterprise-level security assessments across client IT and cloud environments, encompassing infrastructure architecture, identity governance, data protection, resilience mechanisms, and integrated enterprise security controls.</li>
<li>Drive the evaluation and maturity assessment of client security architecture, governance frameworks, and control environments.</li>
<li>Direct structured gap assessments against applicable regulatory and international standards, ensuring alignment with national frameworks and industry best practices.</li>
<li>Develop and shape risk-based remediation strategies and enterprise-level security improvement roadmaps.</li>
<li>Oversee engagement governance, ensuring scope control, risk management, quality assurance, and timely delivery across consulting assignments.</li>
<li>Review and endorse key deliverables, ensuring technical accuracy, regulatory defensibility, and executive-level clarity.</li>
<li>Advise and influence client executive leadership on cybersecurity risk posture, regulatory alignment, and strategic control enhancements.</li>
<li>Guide and mentor consulting teams across multiple security domains, strengthening technical rigor, regulatory interpretation, and reporting quality.</li>
<li>Define and establish assessment methodologies, governance frameworks, and reusable practice assets to enhance consulting maturity.</li>
<li>Support strategic pre-sales initiatives, solution positioning, and executive-level engagements.</li>
<li>Contribute to thought leadership and regulatory insight development, remaining current with evolving cybersecurity standards and emerging risk landscapes.</li>
</ul>
Requirements<ul><li>
Minimum 15&ndash;20 years of progressive experience in cybersecurity consulting, enterprise security architecture, infrastructure security assessments, and regulatory compliance advisory, with proven capability in mentoring and guiding consulting teams.</li></ul><ul>
<li>Proven track record of leading complex, multi-domain cybersecurity engagements across corporate and cloud environments.</li>
<li>Strong expertise in enterprise IT infrastructure security, including systems, network architecture, cloud environments, endpoint security, and governance controls.</li>
<li>Demonstrated experience in identity governance, privileged access management, data protection controls, vulnerability management oversight, and security architecture evaluation.</li>
<li>Hands-on experience conducting compliance-driven and risk-based assessments aligned with national and international regulatory frameworks and standards, including NCA, SAMA, ISO/IEC 27001, NIST, CIS, and related cybersecurity control frameworks.</li>
<li>Strong understanding of risk-based control evaluation methodologies and enterprise security maturity assessments.</li>
<li>Proven ability to mentor and develop consulting teams.</li>
<li>Excellent executive communication, stakeholder engagement, and presentation skills.</li>
<li>Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Information Security, Cybersecurity, or related discipline.</li>
</ul>
Preferred Certifications:<ul>
<li>
CISSP</li>
<li>CCSP or equivalent Cloud Security certification</li>
<li>GIAC certifications (e.g., GSEC, GCED, GCIA, GCIH)</li>
<li>AWS / Azure / GCP Security Specialty certifications</li></ul><h3 class="jobSectionHeader"> 
Equal Opportunity &amp; Inclusion</h3>
We are proud to be an equal opportunity employer. All qualified applicants will receive fair consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, gender identity or expression, national origin, age, disability, genetic information, or pregnancy.
At Inbox Business Technologies, we celebrate diversity and strive to create an inclusive space where every team member is valued. We strongly encourage applicants from underrepresented backgrounds to apply and contribute their unique ideas, experiences, and voices to a company that believes in equality and embraces new ways of thinking.</div>

Principal Consultant - Cyber Security

<div>
 We are seeking a highly experienced Principal Consultant - Cyber Security to provide strategic direction and delivery leadership across cybersecurity consulting engagements. The role encompasses advisory, assessment, and architecture review services across enterprise IT infrastructure environments, including systems, networks, cloud platforms, endpoints, and associated technologies.
 
 
 The Principal Consultant will act as a subject matter authority and mentor, guiding consulting teams in delivering high-quality, audit-aligned, and regulator-ready cybersecurity engagements. The role requires strong expertise in enterprise security architecture, governance models, and regulatory frameworks, combined with the ability to elevate team capability and strengthen delivery standards.
 
 
 Exposure to Operational Technology (OT) security environments will be considered an added advantage.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Provide strategic leadership and direction across cybersecurity consulting engagements, ensuring consistent delivery excellence, quality governance, and client satisfaction
 </li>
 <li>
 Lead and oversee enterprise-level security assessments across client IT and cloud environments, encompassing infrastructure architecture, identity governance, data protection, resilience mechanisms, and integrated enterprise security controls
 </li>
 <li>
 Drive the evaluation and maturity assessment of client security architecture, governance frameworks, and control environments
 </li>
 <li>
 Direct structured gap assessments against applicable regulatory and international standards, ensuring alignment with national frameworks and industry best practices
 </li>
 <li>
 Develop and shape risk-based remediation strategies and enterprise-level security improvement roadmaps
 </li>
 <li>
 Oversee engagement governance, ensuring scope control, risk management, quality assurance, and timely delivery across consulting assignments
 </li>
 <li>
 Review and endorse key deliverables, ensuring technical accuracy, regulatory defensibility, and executive-level clarity
 </li>
 <li>
 Advise and influence client executive leadership on cybersecurity risk posture, regulatory alignment, and strategic control enhancements
 </li>
 <li>
 Guide and mentor consulting teams across multiple security domains, strengthening technical rigor, regulatory interpretation, and reporting quality
 </li>
 <li>
 Define and establish assessment methodologies, governance frameworks, and reusable practice assets to enhance consulting maturity
 </li>
 <li>
 Support strategic pre-sales initiatives, solution positioning, and executive-level engagements
 </li>
 <li>
 Contribute to thought leadership and regulatory insight development, remaining current with evolving cybersecurity standards and emerging risk landscapes
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Minimum 15-20 years of progressive experience in cybersecurity consulting, enterprise security architecture, infrastructure security assessments, and regulatory compliance advisory, with proven capability in mentoring and guiding consulting teams
 </li>
 <li>
 Proven track record of leading complex, multi-domain cybersecurity engagements across corporate and cloud environments
 </li>
 <li>
 Strong expertise in enterprise IT infrastructure security, including systems, network architecture, cloud environments, endpoint security, and governance controls
 </li>
 <li>
 Demonstrated experience in identity governance, privileged access management, data protection controls, vulnerability management oversight, and security architecture evaluation
 </li>
 <li>
 Hands-on experience conducting compliance-driven and risk-based assessments aligned with national and international regulatory frameworks and standards, including NCA, SAMA, ISO/IEC 27001, NIST, CIS, and related cybersecurity control frameworks
 </li>
 <li>
 Strong understanding of risk-based control evaluation methodologies and enterprise security maturity assessments
 </li>
 <li>
 Proven ability to mentor and develop consulting teams
 </li>
 <li>
 Excellent executive communication, stakeholder engagement, and presentation skills
 </li>
 <li>
 Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, or related discipline
 
 
 </li>
 </ul>
 
 Preferred Certifications:
 
 
 
 <ul>
 <li>
 CISSP
 </li>
 <li>
 CCSP or equivalent Cloud Security certification
 </li>
 <li>
 GIAC certifications (e.g., GSEC, GCED, GCIA, GCIH)
 </li>
 <li>
 AWS / Azure / GCP Security Specialty certifications
 
 
 </li>
 </ul>
 
 
 Equal Opportunity &amp; Inclusion
 
 
 
 
 We are proud to be an equal opportunity employer. All qualified applicants will receive fair consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, gender identity or expression, national origin, age, disability, genetic information, or pregnancy.
 
 
 At Inbox Business Technologies, we celebrate diversity and strive to create an inclusive space where every team member is valued. We strongly encourage applicants from underrepresented backgrounds to apply and contribute their unique ideas, experiences, and voices to a company that believes in equality and embraces new ways of thinking.
</div>

Ortak Consultants

HIRING: HEAD OF INFORMATION SECURITY / CYBER SECURITYOrtak Consultants (Pvt.) Limited is hiring &quot;Head of Information Security/ Cybersecurity for one of its client.Location: Shahra &ndash; e &ndash; Faisal, KarachiIndustry: Insurance / Financial ServicesRequirements:<ul><li>Bachelor&rsquo;s or Master&rsquo;s degree in IT, Cyber Security, or a related field.</li><li>8&ndash;10 years of experience in IT/Cyber Security, with 1&ndash;2 years in a leadership role.</li><li>Experience in insurance, banking, or other SECP-regulated financial institutions preferred.</li><li>Certifications such as CISSP, CISM, CRISC, or ISO 27001 LA/LI preferred.</li><li>Strong understanding of regulatory-driven security environments and ability to translate technical risks into business impact.</li><li>Excellent stakeholder management, crisis handling and execution-focused leadership skills.</li></ul>Key Responsibilities:<ul><li>Develop and execute the organization&rsquo;s Cyber Security Strategy and Roadmap aligned with business objectives and SECP regulatory requirements.</li><li>Establish and maintain cyber security governance frameworks, policies, and standards (ISO 27001, NIST, SOC 2).</li><li>Embed secure-by-design principles across digital initiatives, systems, and cloud projects.</li><li>Lead enterprise-wide cyber risk assessments and manage the Cyber Risk Register in coordination with Risk Management.</li><li>Ensure compliance with SECP cyber security guidelines and support internal, external, and regulatory audits.</li><li>Manage risks related to data breaches, ransomware, fraud and third-party dependencies.</li><li>Oversee security operations including endpoint, network, and cloud security controls.</li><li>Provide regular cyber risk reporting to senior management and relevant committees.</li><li>Lead and develop the cyber security team and drive organization-wide security awareness programs.</li><li>Perform any additional tasks assigned by management.</li></ul>Job Type: Full-timePay: Rs400,000.00 - Rs500,000.00 per monthWork Location: In person

Head of Information Security/ Cyber security

Simpaisa Payment Gateway

Tapmad is looking for a proactive and Anti-Piracy Intern to support Tapmad&rsquo;s efforts in monitoring, identifying, and reporting unauthorized distribution of our digital content across online platforms. This role offers hands-on exposure to digital rights protection, content security, and anti-piracy operations in a fast-paced media-tech environment.Key ResponsibilitiesMonitor online platforms (websites, social media, apps, IPTV, and streaming services) for pirated Tapmad contentIdentify and document copyright infringements and unauthorized content usageAssist in issuing takedown notices to platforms and service providersMaintain records and reports of piracy incidents and enforcement actionsSupport coordination with internal legal, technical, and content teamsAssist in researching emerging piracy trends and toolsHelp improve internal anti-piracy workflows and reporting mechanismsRequirementsCurrently enrolled in or recently graduated from a Bachelor&rsquo;s program (Law, Media Studies, IT, Cyber Security, Business, or related field)Strong attention to detail and analytical skillsBasic understanding of digital media, streaming platforms, and online piracy (preferred)Familiarity with social media platforms and online content sharing websitesGood written and verbal communication skillsAbility to handle sensitive information confidentiallyProactive, responsible, and eager to learnJob Type: Full-timeWork Location: In person

Anti - Piracy Intern

InfoTech Group

<div>
 
 Job Description
 
 
 
 We are looking for a motivated and detail-oriented
 
 Technical Intern
 
 to join our
 
 Banking Technology Unit
 
 . This role is ideal for a fresh Computer Science graduate with a strong interest in
 
 Software Quality Assurance, application testing, and banking systems
 
 . The intern will support the technology team in ensuring the reliability, security, and performance of banking applications.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Assist in testing banking and financial applications to ensure functionality, performance, and security
 </li>
 <li>
 Create and execute test cases, test scenarios, and test reports for web-based systems
 </li>
 <li>
 Perform manual and basic automation testing using tools such as Selenium
 </li>
 <li>
 Validate application workflows including user authentication, transactions, navigation, and forms
 </li>
 <li>
 Identify, document, and track software defects and bugs
 </li>
 <li>
 Support database-related tasks including data validation and basic SQL queries
 </li>
 <li>
 Collaborate with developers and senior QA team members to improve software quality
 </li>
 <li>
 Ensure applications comply with banking standards, data integrity, and security best practices
 </li>
 <li>
 Assist in testing new features, enhancements, and system upgrades
 
 
 </li>
 </ul>
 
 Required Qualifications
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science / Software Engineering / IT (Fresh Graduate or Final Year Student)
 </li>
 <li>
 Basic understanding of Software Quality Assurance (SQA) concepts and testing methodologies
 </li>
 <li>
 Knowledge of manual testing, regression testing, and functional testing
 </li>
 <li>
 Familiarity with HTML/CSS and web application workflows
 </li>
 <li>
 Basic knowledge of SQL / relational databases
 </li>
 <li>
 Understanding of software development life cycle (SDLC)
 </li>
 <li>
 Interest in banking systems and financial technology
 
 
 </li>
 </ul>
 
 Technical Skills (Preferred)
 
 
 
 <ul>
 <li>
 Manual &amp; Automation Testing
 </li>
 <li>
 Selenium (Basic)
 </li>
 <li>
 React.js (Basic understanding)
 </li>
 <li>
 MySQL / Database concepts
 </li>
 <li>
 ER Modeling &amp; Data Validation
 </li>
 <li>
 Introduction to Cyber Security concepts
 
 
 </li>
 </ul>
 
 Soft Skills
 
 
 
 <ul>
 <li>
 Strong attention to detail
 </li>
 <li>
 Analytical and problem-solving skills
 </li>
 <li>
 Good communication and documentation skills
 </li>
 <li>
 Willingness to learn and adapt in a regulated banking environment
 </li>
 <li>
 Ability to work collaboratively in a team
 </li>
 </ul>
</div>

Technical Intern

HugoBank

<div>As the Chief Information Security Officer (CISO) for HugoBank, a cloud-native digital bank operating in Pakistan, one will play a pivotal leadership role in safeguarding the bank&rsquo;s digital ecosystem. The CISO is responsible for defining and executing the enterprise information security strategy, managing cyber and technology risks, and ensuring compliance with applicable regulatory and supervisory requirements. This role ensures the confidentiality, integrity, and availability of customer data, critical systems, and bank assets across cloud (AWS), on-premises, and third-party environments.
DUTIES &amp; RESPONSIBILITIES:
Information Security Strategy &amp; Governance<ul>
<li>
Define and execute the bank&rsquo;s enterprise information security strategy and governance framework, ensuring alignment with business objectives, cloud-native architecture, and regulatory requirements.</li>
<li>Provide oversight and reporting of information security risks, controls, and posture to senior management and the Board, embedding security into enterprise risk management and decision-making.</li>
</ul>
Risk Management &amp; Compliance<ul>
<li>
Identify, assess, and prioritize security risks, implementing measures to mitigate vulnerabilities.</li>
<li>Ensure ongoing compliance with applicable regulatory, legal, and industry requirements, and act as the primary interface for information security matters with regulators, auditors, and internal risk and compliance functions.</li>
</ul>
Security Operations<ul>
<li>
Oversee day-to-day security operations including incident response, threat detection, and vulnerability management.</li>
<li>Develop and maintain an incident response plan to ensure timely and effective handling of security incidents or breaches.</li>
</ul>
Security Architecture &amp; Vendor Management<ul>
<li>
Define and govern the bank&rsquo;s security architecture, ensuring secure-by-design controls across cloud-native platforms, applications, infrastructure, and data environments.</li>
<li>Oversee third-party and vendor security risk management, including due diligence, onboarding, continuous monitoring, and contractual security obligations for critical and outsourced services.</li>
</ul>
Security Awareness &amp; Culture<ul><li>
To promote a culture of security awareness through training and communication, embedding security responsibility across the organization.</li></ul>
Budget &amp; Resource Management<ul><li>
Manage the cybersecurity budget, ensuring efficient allocation and utilization of resources.</li></ul>
Access Management &amp; Controls<ul>
<li>
Define and enforce access management policies, including user-provisioning, de-provisioning and privileged access controls.</li>
<li>Implement and maintain a trusted software list, regularly reviewing and updating controls.</li>
<li>Evaluate employee software requests and ensure all tools meet internal security standards.
</li></ul>Security tools and the evolving ecosystem<ul><li>
Define and continuously evolve the bank&rsquo;s information security tooling and platforms (e.g., IAM, SIEM/SOC, EDR/XDR, PAM, DLP, cloud security, application security), ensuring effective coverage, integration, and scalability as the bank grows.</li></ul>
ROLE RELATIONSHIP:
Internal<ul>
<li>
Executive Leadership</li>
<li>IT and Operation Teams</li>
<li>Compliance and Risk Management</li>
<li>Internal Audit</li>
</ul>
External<ul>
<li>
Regulatory Authorities (SBP)</li>
<li>Security Vendors and Consultants</li>
<li>Third-Party Partners &amp; Auditors</li>
</ul>
Requirements<ul><li>
Bachelor&rsquo;s or Master&rsquo;s degree in Information Security, Cybersecurity, or related field.
</li></ul><ul><li>Industry certifications such as CISSP, CISM, or CISA are highly desirable.
</li><li>Minimum 15 years of experience in Information Security or related domains.</li>
<li>Proven leadership experience in senior information security roles, preferably in the financial sector.</li>
<li>In-depth knowledge of cybersecurity principles, technologies, and regulatory frameworks.</li>
<li>Banking or FinTech experience prefered</li></ul></div>

Chief Information Security Officer (CISO)

<div>
 As the Chief Information Security Officer (CISO) for HugoBank, a cloud-native digital bank operating in Pakistan, one will play a pivotal leadership role in safeguarding the bank's digital ecosystem. The CISO is responsible for defining and executing the enterprise information security strategy, managing cyber and technology risks, and ensuring compliance with applicable regulatory and supervisory requirements. This role ensures the confidentiality, integrity, and availability of customer data, critical systems, and bank assets across cloud (AWS), on-premises, and third-party environments.
 
 
 
 DUTIES &amp; RESPONSIBILITIES:
 
 
 
 Information Security Strategy &amp; Governance
 
 
 <ul>
 <li>
 Define and execute the bank's enterprise information security strategy and governance framework, ensuring alignment with business objectives, cloud-native architecture, and regulatory requirements
 </li>
 <li>
 Provide oversight and reporting of information security risks, controls, and posture to senior management and the Board, embedding security into enterprise risk management and decision-making
 
 
 </li>
 </ul>
 Risk Management &amp; Compliance
 
 
 <ul>
 <li>
 Identify, assess, and prioritize security risks, implementing measures to mitigate vulnerabilities
 </li>
 <li>
 Ensure ongoing compliance with applicable regulatory, legal, and industry requirements, and act as the primary interface for information security matters with regulators, auditors, and internal risk and compliance functions
 
 
 </li>
 </ul>
 Security Operations
 
 
 <ul>
 <li>
 Oversee day-to-day security operations including incident response, threat detection, and vulnerability management
 </li>
 <li>
 Develop and maintain an incident response plan to ensure timely and effective handling of security incidents or breaches
 
 
 </li>
 </ul>
 Security Architecture &amp; Vendor Management
 
 
 <ul>
 <li>
 Define and govern the bank's security architecture, ensuring secure-by-design controls across cloud-native platforms, applications, infrastructure, and data environments
 </li>
 <li>
 Oversee third-party and vendor security risk management, including due diligence, onboarding, continuous monitoring, and contractual security obligations for critical and outsourced services
 
 
 </li>
 </ul>
 Security Awareness &amp; Culture
 
 
 <ul>
 <li>
 To promote a culture of security awareness through training and communication, embedding security responsibility across the organization
 
 
 </li>
 </ul>
 Budget &amp; Resource Management
 
 
 <ul>
 <li>
 Manage the cybersecurity budget, ensuring efficient allocation and utilization of resources
 
 
 </li>
 </ul>
 Access Management &amp; Controls
 
 
 <ul>
 <li>
 Define and enforce access management policies, including user-provisioning, de-provisioning and privileged access controls
 </li>
 <li>
 Implement and maintain a trusted software list, regularly reviewing and updating controls
 </li>
 <li>
 Evaluate employee software requests and ensure all tools meet internal security standards.
 
 
 </li>
 </ul>
 Security tools and the evolving ecosystem
 
 
 <ul>
 <li>
 Define and continuously evolve the bank's information security tooling and platforms (e.g., IAM, SIEM/SOC, EDR/XDR, PAM, DLP, cloud security, application security), ensuring effective coverage, integration, and scalability as the bank grows
 
 
 </li>
 </ul>
 
 ROLE RELATIONSHIP:
 
 
 
 
 Internal
 
 
 
 <ul>
 <li>
 Executive Leadership
 </li>
 <li>
 IT and Operation Teams
 </li>
 <li>
 Compliance and Risk Management
 </li>
 <li>
 Internal Audit
 
 
 </li>
 </ul>
 
 External
 
 
 
 <ul>
 <li>
 Regulatory Authorities (SBP)
 </li>
 <li>
 Security Vendors and Consultants
 </li>
 <li>
 Third-Party Partners &amp; Auditors
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Bachelor's or Master's degree in Information Security, Cybersecurity, or related field.
 </li>
 <li>
 Industry certifications such as CISSP, CISM, or CISA are highly desirable.
 </li>
 <li>
 Minimum 15 years of experience in Information Security or related domains
 </li>
 <li>
 Proven leadership experience in senior information security roles, preferably in the financial sector
 </li>
 <li>
 In-depth knowledge of cybersecurity principles, technologies, and regulatory frameworks
 </li>
 <li>
 Banking or FinTech experience prefered
 </li>
 </ul>
</div>

Explore 338+ Principal consultant cyber security in Karachi Jobs In Karachi this March. Find roles across top companies and apply now to boost your career.

338 principal consultant cyber security jobs In Karachi Jobs In Karachi

Principal Consultant - Cyber Security

Principal Consultant - Cyber Security

Head of Information Security/ Cyber security

Anti - Piracy Intern

Technical Intern

Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)