Head IS Risk Management

ThePakEdu; Karachi Division; On-site; PKR 1,674,000 - 2,232,000; Full time

Job summary

National Bank of Pakistan invites applications for a leadership role in Information Security Risk Management. The Head - IS Risk Management (AVP/VP) will design and oversee risk assessment programs for bank-wide digital applications, ensuring adherence to security standards and SBP guidelines.

The position requires strong governance, collaboration with Business Management and IT teams, and a track record of managing security risks and audits in a banking environment.

Qualifications

• 06 years of information security risk management experience.
• Experience in banking or large-scale organizations preferred.
• Masters or CRISC certifications preferred.

Responsibilities

• Execute risk assessment program for bank-wide digital applications based on Information Security standards and industry best practices.
• Coordinate information security risks with Business Management and IT to ensure timely risk mitigation.
• Monitor and track information security issues from self assessment, internal/external audits and SBP audits until closure.

Skills

Information Security

SBP Guidelines

People Management

IT Audits & Controls

Education

Bachelor's degree in CS/CE/Cybersecurity/IT

Masters or CRISC certifications preferred

Job description

Offered Salary: 150,000 - 200,000 PKR Age: 30 - 40 years Gender: Both Skills Level: Expert Location: Karachi, Sindh Organization: National Bank of Pakistan Posted on: 2026-09-13

Job Overview

National Bank of Pakistan offers a dynamic career opportunity for a Head - IS Risk Management (AVP / VP). This position focuses on implementing risk assessment programs and ensuring compliance with security standards.

Educational and Professional Qualification

• Minimum Graduation in Computer Science and / or Computer Engineering and / or Cybersecurity and / or Information Technology from local or international university / college recognized by the HEC of Pakistan.
• Candidates having Masters or CRISC certifications will be preferred.

Experience Requirements

Minimum 06 years of experience in Information Security risk management. Candidates having relevant working experience in banking and / or large scale organization will be preferred.

Other Skills and Knowledge Required

• Good knowledge of Information Security function.
• Well versed with SBP guidelines regarding Information Security.
• Good interpersonal and people management skills.
• Knowledge of performing control assessments of business applications, IT Audits and concerned Business Management.

Outline of Main Duties / Responsibilities

• To execute risk assessment program for bank wide digital applications based on Information Security standards and industry best practices.
• To continuously coordinate information security risks and their impacts to the concerned Business Management, and / or IT.
• To monitor and track all information security issues, till closure, arising from self assessment, internal audit, external audit, SBP audit, risk and vulnerability assessment programs.