Cybersecurity Engineer - Real Ownership in Fintech Security

qlub; Karachi Division; Hybrid; PKR 1,800,000 - 3,200,000; Full time

Job summary

qlub is seeking a Cybersecurity Engineer to own day-to-day security compliance and customer assurance. You will manage ISO 27001ISMS, audits, and evidence, while coordinating with auditors and cross-functional teams across a fast-scaling fintech platform.

You’ll work on threat detection, application security, cloud security, DevSecOps, and automation to improve security posture. Strong judgment, curiosity, and English communication are essential.

Qualifications

• 3+ years of hands-on experience in cybersecurity or information security, including security compliance, assurance or GRC.
• Experience maintaining an ISO 27001 ISMS, coordinating audits, validating controls and managing compliance evidence.
• Experience handling customer security questionnaires, due diligence assessments and working with auditors and cross-functional teams.

Responsibilities

• Own day-to-day security compliance and ISMS activities across ISO 27001, PCI DSS, SOC 2 readiness and applicable regulatory requirements.
• Manage internal and external audits, certifications and assessments end to end including auditor engagement, evidence validation and corrective action closure.
• Own customer security questionnaires, due diligence and security assessments, working directly with business stakeholders and customer security teams.
• Maintain security policies, risk assessments and control documentation, assess control effectiveness and drive compliance findings to closure.
• Coordinate third-party security reviews, support data protection and security awareness activities and maintain continuous compliance monitoring.
• Contribute to security operations including SIEM/EDR monitoring, threat detection, incident investigations, cloud security and vulnerability management.
• Support application security and DevSecOps initiatives including secure SDLC practices, CI/CD security integration, SAST/DAST/SCA and vulnerability validation.
• Leverage automation and AI to streamline security assessments, compliance activities and operational workflows.

Skills

Cybersecurity experience

ISO 27001 ISMS

Audits & evidence management

Security questionnaires

Cloud security (AWS/GCP)

SAST/DAST/SCA

Education

Bachelors in Information Security or Computer Science

Tools

CrowdStrike

Splunk

GRC platforms

Job description

qlub is seeking a Cybersecurity Engineer to own day-to-day security compliance and customer assurance. You will manage ISO 27001ISMS, audits, and evidence, while coordinating with auditors and cross-functional teams across a fast-scaling fintech platform.

You’ll work on threat detection, application security, cloud security, DevSecOps, and automation to improve security posture. Strong judgment, curiosity, and English communication are essential.