Head of Information Security

HRSI; Islamabad; On-site; PKR 2,750,000 - 3,500,000; Full time

Job summary

A leading E&P company in Islamabad is seeking a Head of Information Security to lead enterprise-wide cybersecurity strategies. The role requires at least 14 years of experience in IT, relevant certifications (CISSP/CISM), and a strong knowledge of cybersecurity governance. The successful candidate will oversee critical security functions and report directly to top management. Skills in developing SOC and incident response plans are essential.

Qualifications

• At least 14 years of relevant IT experience, preferably in information security leadership.
• CISSP/CISM certifications are mandatory.

Responsibilities

• Develop and implement cybersecurity strategies.
• Build a 24/7 Security Operations Center.
• Lead cybersecurity governance and frameworks.

Skills

Expertise in Cybersecurity

Strategic Planning

Incident Response

Education

Bachelor's or Master's in Computer Science or related field

Job description

About the job Head of Information Security

Company Overview

A leading E&P Company invites applications for the position of Head of Information Security.

Qualification & Experience

Bachelor's degree in Information Security/Cyber Security/Engineering (Electrical/Electronics/Telecom/Computer/System/Software/)/Computer Science/IT OR M.Sc. (Computer Science)/MS Information Security/ Cyber Security/MCS/MIT. Degree must be recognized from HEC/PEC.

Relevant Certifications

CISSP/CISM is mandatory, candidates possessing relevant advanced certifications like CISA, CRISC, CEH, ISO/IEC 27001 Lead Implementer/Auditor will be preferred.

At least 14 years of relevant experience in information technology and cybersecurity preferably having prior experience of heading an Information Security Function along with OT infrastructure.

Purpose of Position

The Head of Information Security will lead the enterprise-wide cybersecurity and industrial control systems (ICS/OT) security strategy. The role is responsible for ensuring the confidentiality, integrity, and availability of IT and OT assets. The Head of Information Security must align security efforts with global standards while fostering a cyber‑resilient culture.

Key Responsibilities/Functions

• Develop and implement cybersecurity & OT security strategy covering IT/OT Infrastructure, aligned with the business, operational, and regulatory objectives.
• Build /enhance Security Operations Center (SOC) to support 24/7 incident detection and response.
• Lead enterprise-wide implementation of cybersecurity governance frameworks, policies and control mechanisms.
• Identify and prioritize protection of Critical Information Infrastructure (CII).
• Develop a real‑time threat intelligence and monitoring capability.
• Lead the organizations Disaster Recovery (DR) and Business Continuity Planning (BCP) as per global standards.
• Present cybersecurity posture, risks, and investment requirements to the top management.
• Establish and maintain ISMS in line with ISO/IEC 27001:2022 and risk assessments per ISO 31000.
• Develop and test Cyber Incident Response Plans (CIRP).
• Drive Cybersecurity awareness and training programs specific to IT/OT cyber risks.
• Develop and enforce network segmentation and access controls between IT and OT environments.

NOTE

• The initial term of employment will be three (03) years extendable by mutual consent.
• In case of foreign degree, an equivalence certificate from HEC must be provided.
• Only shortlisted candidates will be called for evaluation/assessment.
• The Company reserves the right to fill or not to fill the advertised position.
• No TA/DA will be admissible for evaluation/assessment.

Age Limit

The candidate should not be more than 50 years of age as of last date of submission of application.

If you have the required experience and educational qualification to take up the challenging role, you are requested to apply by November 30, 2025 at http://jobs.hrs-int.com/

Only shortlisted candidates will be contacted. www.hrs-int.com