Cyber Risk Management Analyst – Banking Supervision

sbp.org.pk; Karachi Division; On-site; PKR 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Equal opportunity employer

Job summary

State Bank of Pakistan (SBP) invites talented professionals for a contractual role in the Cyber Risk Management Department (CRMD) based in Karachi. The incumbent will supervise cyber risk, conduct assessments of Regulated Entities, and coordinate with stakeholders to strengthen regulatory oversight.

Education required includes a 16-year degree in related fields, with preference for CISSP/CISA/CISM, and a minimum of two years in information/cybersecurity, IT governance, SOC, or related areas.

Qualifications

• Bachelor’s or Master’s Degree (16 years) in Information Security, IT, Computer Science, Computer Engineering or related field.
• Preference given to candidates with professional certifications such as CISA, CISSP, CISM.
• Minimum 2 years post-qualification experience in information/cybersecurity, IT governance, SOC, network security or related areas.

Responsibilities

• Perform supervision activities for cyber risk of Regulated Entities (REs).
• Conduct on-site and off-site cybersecurity assessments of REs to identify supervisory concerns.
• Collaborate with team members throughout the assessment process.
• Prepare and disseminate updates on cyber risk for senior management and supervisory divisions.
• Liaise with internal and external stakeholders on cyber risk matters.
• Provide feedback on policy matters as required.
• Stay updated with developments in technology and cybersecurity.
• Maintain relevant files and records.
• Perform other duties assigned by the Divisional Head/management.

Skills

Cybersecurity

Information Security

IT governance

Education

Bachelor’s/Master’s Degree (16 years) in Computer-related field

Job description

State Bank of Pakistan (SBP) invites talented professionals for a contractual role in the Cyber Risk Management Department (CRMD) based in Karachi. The incumbent will supervise cyber risk, conduct assessments of Regulated Entities, and coordinate with stakeholders to strengthen regulatory oversight.

Education required includes a 16-year degree in related fields, with preference for CISSP/CISA/CISM, and a minimum of two years in information/cybersecurity, IT governance, SOC, or related areas.