Chief Information Security & Risk Strategy Leader

JazzWorld; Karachi Division; On-site; PKR 4,200,000 - 6,200,000; Full time

Job summary

TPL Insurance is seeking a Head of Information Security to lead the design and monitoring of security controls across networks and infrastructure. The role drives risk management, business continuity, and ISO 27001 implementation, while coordinating audits and remediation.

The candidate will guide senior teams, develop testing plans, and oversee threat assessments with a focus on governance, compliance, and incident response.

Qualifications

• Bachelor's degree in CS or information security or related field.
• At least 10 years in information security, governance, VAPT or IT Security.
• Certifications in CISM, CGEIT, ISO 27001 LI/LA, CEH, OSCP, CoBIT, NIST framework.
• Knowledge of information security management, IS governance and compliance.
• Strong problem-solving skills and ability to work independently.
• Collaborative team player with incident investigation and remediation experience.

Responsibilities

• Collaborate on designing network and infrastructure security and monitor controls.
• Lead risk management and mitigation for information and physical security.
• Own ISO 27001 implementation, audits and continuous improvement.
• Develop and automate security testing plans, including penetration testing.
• Provide direction, training, and guidance to junior staff.
• Produce management reports and dashboards tracking remediation.

Skills

Risk management

Security governance

GRC automation

ISO 27001 knowledge

Security testing

Leadership

Stakeholder communication

Education

Bachelor's in computer science, information security, or related field

Tools

ISO 27001

Job description

TPL Insurance is seeking a Head of Information Security to lead the design and monitoring of security controls across networks and infrastructure. The role drives risk management, business continuity, and ISO 27001 implementation, while coordinating audits and remediation.

The candidate will guide senior teams, develop testing plans, and oversee threat assessments with a focus on governance, compliance, and incident response.