Cyber Defence Lead: Vulnerability & Incident Management

iSystems Ltd; Islamabad; On-site; PKR 2,500,000 - 4,500,000; Full time

Job summary

iSystems Ltd is seeking an experienced Cyber Defence Manager to oversee vulnerability management, security findings, incident coordination, and post-incident governance across a global enterprise environment.

You will lead risk-based prioritisation, remediation tracking, regulatory compliance, and drive security actions to closure while collaborating with Cyber Defence, Security Operations, Infrastructure, and Risk teams.

Qualifications

• Proven experience in vulnerability management and cyber defence in large, regulated environments.
• Hands-on with vulnerability platforms (Tenable/Qualys) and cloud security tooling.
• Strong ability to translate risk into remediation priorities and action plans.
• Experience coordinating security incidents and governance with senior stakeholders.

Responsibilities

• Own consolidate security findings from vulnerabilities, pentests, and cloud assessments.
• Prioritise remediation using CVSS, threat intel, asset criticality, and CIF status.
• Coordinate remediation with infrastructure, patching, and app owners while tracking SLAs.
• Monitor remediation progress, KPIs, and incidents to ensure timely closure.
• Lead post-incident reviews, root-cause analysis, and lessons learned.
• Prepare security posture reports and KRIs for governance bodies.
• Coordinate cyber incidents from invocation to closure and maintain incident records.

Skills

Vulnerability management

Security operations

Cyber defence

Stakeholder management

Regulatory awareness

Tools

Tenable

Qualys

Vulcan

ServiceNow

Job description

iSystems Ltd is seeking an experienced Cyber Defence Manager to oversee vulnerability management, security findings, incident coordination, and post-incident governance across a global enterprise environment.

You will lead risk-based prioritisation, remediation tracking, regulatory compliance, and drive security actions to closure while collaborating with Cyber Defence, Security Operations, Infrastructure, and Risk teams.