AVP, Infrastructure Security — Lead Secure Infrastructure

Recruit AI; Karachi Division; On-site; PKR 9,000,000 - 13,000,000; Full time

Job summary

National Bank of Pakistan is seeking an experienced Manager Infrastructure Security (AVP) in Karachi to lead the bank’s infrastructure security program. The role focuses on secure design, vulnerability management, and governance across servers, cloud, virtualization, and networks.

The ideal candidate has 6+ years in information security, strong risk management skills, and familiarity with CIS benchmarks. The position is contractual for three years, with competitive compensation and benefits.

Qualifications

• Minimum 6 years of experience in Information Technology and/or Information Security.
• Experience identifying, assessing, and mitigating infrastructure security vulnerabilities across enterprise IT infrastructure.
• Familiarity with servers, SAN/NAS, containers, IAM, data security lifecycle, virtualization, cloud environments, and other critical infrastructure components.

Responsibilities

• Manage and enhance the Infrastructure Security Program aligned with business objectives and regulatory requirements.
• Oversee security architecture reviews for infrastructure projects and provide guidance on secure design principles for servers, virtualization, cloud, storage, and network infrastructure.
• Coordinate vulnerability assessments, configuration compliance reviews, and penetration testing for infrastructure security.
• Prepare vulnerability MIS, remediation tracking, and timely closure of findings per risk management requirements.
• Create infrastructure security assessment reports, dashboards, and management summaries for senior leadership.
• Define and maintain governance, policies, standards, and baselines for servers, OS, ATMs, virtualization, cloud, storage, and systems.
• Lead risk assessments and ensure risks are identified, evaluated, treated, and mitigated before production deployment.
• Enforce secure hardening standards (CIS Benchmarks) across the bank’s environment.
• Collaborate with IT Infrastructure, Systems, Cloud, Database, and other teams to ensure security controls are implemented and maintained.
• Ensure secure configuration, hardening, monitoring, and compliance of enterprise infrastructure (Windows/Linux servers, databases, virtualization, cloud workloads, storage, Active Directory).
• Support internal and external audits with infrastructure security evidence, documentation, and remediation status.

Education

Bachelor’s degree in Computer Science or Computer Engineering or Cybersecurity or Information Technology

Master’s in Information Security or relevant professional certifications (e.g., GSEC, SC-100, AZ-500, VMware VCP-DCV, RHCE, CompTIA CySA+)

Job description

National Bank of Pakistan is seeking an experienced Manager Infrastructure Security (AVP) in Karachi to lead the bank’s infrastructure security program. The role focuses on secure design, vulnerability management, and governance across servers, cloud, virtualization, and networks.

The ideal candidate has 6+ years in information security, strong risk management skills, and familiarity with CIS benchmarks. The position is contractual for three years, with competitive compensation and benefits.