Chief Information Security & Risk Officer

Taraki; Lahore; On-site; PKR 8,000,000 - 16,000,000; Full time

Job summary

Confidential is seeking a Head of Information Security in Lahore to lead the company’s security, risk and compliance posture. The role partners with executives to enable product innovation while protecting sensitive borrower data and ensuring SBP audit readiness.

You will own enterprise risk management, drive ISO 27001 and other certifications, and oversee incident response, continuity planning and vendor security risk. This role reports to the CEO and interacts with the Board.

Qualifications

• 15+ years in information security, risk and compliance in regulated environments.
• Track record managing regulator audits (SBP or equivalent).
• Ability to enable business through risk-based security decisions.
• Must stand firm on material risk and governance.
• Certifications and strong security framework knowledge (ISO27001/NIST/CIS).

Responsibilities

• Lead security strategy and risk posture aligned to ISO27001/NIST/CIS.
• Own SBP relationship for security audits and inspections.
• Develop and maintain security policies, controls and governance.
• Plan incident response, disaster recovery, and resilience.
• Manage third-party security risk and enable secure innovation.

Skills

Information security leadership

Regulatory risk management

Business-minded security leadership

Threat and incident response

Communication with regulators

Education

CISSP, CISM, CRISC and ISO 27001 Lead Auditor/Implementer certifications

Tools

SIEM

SOAR

Firewalls

Encryption

DLP

Job description

Confidential is seeking a Head of Information Security in Lahore to lead the company’s security, risk and compliance posture. The role partners with executives to enable product innovation while protecting sensitive borrower data and ensuring SBP audit readiness.

You will own enterprise risk management, drive ISO 27001 and other certifications, and oversee incident response, continuity planning and vendor security risk. This role reports to the CEO and interacts with the Board.