Cyber Security Lead: Strategy, Incident Response & Risk

Sui Southern Gas Company Limited; Karachi Division; On-site; PKR 2,400,000 - 4,200,000; Full time

Job summary

Sui Southern Gas Company Limited is seeking a seasoned Cyber Security Lead to shape and drive the organization’s security strategy. You will supervise day-to-day operations, monitor threats, and guide incident response and vulnerability programs across the enterprise.

The role requires building risk-based security controls, ensuring regulatory compliance, and mentoring a growing cyber security team while collaborating with vendors and stakeholders to strengthen defenses.

Qualifications

• Bachelor's in Computer Engineering / IT / Cyber Security with 4+ years of relevant experience or
• BCS / BSCS with 7+ years of relevant experience.

Responsibilities

• Develop, implement, and maintain the organization’s cyber security strategy and roadmap.
• Lead day-to-day security operations, including monitoring, detection, and response.
• Manage and improve incident response, threat intelligence, and vulnerability management programs.
• Conduct risk assessments, security audits, and penetration test reviews.
• Ensure compliance with security frameworks and regulations (e.g., ISO 27001, NIST, SOC 2, GDPR).
• Oversee identity and access management, network security, endpoint security, and cloud security.
• Create and enforce security policies, standards, and procedures.
• Lead, mentor, and develop the cyber security team.
• Work with vendors, partners, and third-party service providers on security matters.
• Provide security awareness training to employees and stakeholders.
• Report on security posture, risks, and incidents to senior leadership.

Education

Bachelors in Computer Engineering / IT / Cyber Security

BCS / BSCS

Job description

Sui Southern Gas Company Limited is seeking a seasoned Cyber Security Lead to shape and drive the organization’s security strategy. You will supervise day-to-day operations, monitor threats, and guide incident response and vulnerability programs across the enterprise.

The role requires building risk-based security controls, ensuring regulatory compliance, and mentoring a growing cyber security team while collaborating with vendors and stakeholders to strengthen defenses.