Head of Information Security & Privacy

Bridge Intelligence; Lahore; On-site; PKR 9,000,000 - 13,000,000; Full time

Benefits offered by this job

High-spec equipment and conference/trg

Job summary

Bridge Intelligence in Lahore is seeking a Head of Information Security & Privacy to build a practical security program for a regulated fintech infrastructure. This role transcends policy and requires implementing controls, hardening systems, and ensuring audit readiness.

You will own security programs, drive ISO 27001–aligned controls, manage Kubernetes security, data governance, and threat modeling, balancing speed with non-negotiable controls.

Qualifications

• 7+ years experience in security engineering/GRC within fintech, banking, or high-compliance environments.
• Hands-on Infra Skills: Kubernetes, IAM, secrets, TLS, logging, and incident response.
• Audit Execution Experience: has run audits and built evidence systems that survive scrutiny.
• Strong Judgment: can balance speed with non-negotiable controls.
• Clear Communicator: writes policies people actually follow.

Responsibilities

• Security Program Ownership: policies, asset inventory, access controls, key management, incident response.
• Audit Readiness: drive ISO 27001-aligned controls, evidence collection, and continuous compliance.
• Infrastructure Security: Kubernetes hardening, secrets management, network segmentation, logging, and alerting.
• Data Governance: PII handling, encryption, retention, and deletion workflows with engineering.
• Vulnerability Management: scans, patching SLAs, dependency hygiene, and remediation tracking.
• Security-by-Design: enforce secure SDLC, threat modeling, and release gates.

Skills

Strong Judgment

Clear Communicator

Security Program Ownership

Audit Readiness

Vulnerability Management

Data Governance

Tools

Kubernetes

IAM

Secrets Management

TLS

Logging

Incident Response

Job description

INSTITUTIONAL_HIRE // HEAD-INFORMATION-SECURITY-PRIVACY

Head of Information Security & Privacy

DEPARTMENT

Security

LOCATION

On-Site (Lahore)

TYPE

Full-time

The Role

We are looking for a Head of Information Security & Privacy to build the security control environment required for licensing and institutional trust. This is not a "policy-only" role. You will implement practical controls, harden infrastructure, and make audits painless.

What You'll Do

REQ_XX

Security Program Ownership: policies, asset inventory, access controls, key management, incident response.

REQ_XX

Audit Readiness: drive ISO 27001-aligned controls, evidence collection, and continuous compliance.

REQ_XX

Infrastructure Security: Kubernetes hardening, secrets management, network segmentation, logging, and alerting.

REQ_XX

Data Governance: PII handling, encryption, retention, and deletion workflows with engineering.

REQ_XX

Vulnerability Management: scans, patching SLAs, dependency hygiene, and remediation tracking.

REQ_XX

Security-by-Design: enforce secure SDLC, threat modeling, and release gates.

What We're Looking For

REQ_XX

Experience: 7+ Years Experience in security engineering/GRC within fintech, banking, or high-compliance environments.

REQ_XX

Hands-on Infra Skills: Kubernetes, IAM, secrets, TLS, logging, and incident response.

REQ_XX

Audit Execution Experience: has run audits and built evidence systems that survive scrutiny.

REQ_XX

Strong Judgment: can balance speed with non-negotiable controls.

REQ_XX

Clear Communicator: writes policies people actually follow.

Compensation and Benefits

REQ_XX

Salary: Market-competitive (PKR or USD pegged).

BEN_XX

REQ_XX

REQ_XX

Perks: High-spec equipment and conference/training budget.

HIRING_PROTOCOL // MEET_THE_TEAM

Founder CEO

"Founder at Bridge Intelligence. Building regulated custody and settlement infrastructure. I’m looking for people who can turn ambiguity into simple, auditable systems that scale."

This could be you. If you care about shipping high-trust fintech products with real-world impact, we should talk.

Ready to build?

Help us engineer the next generation of financial rails. We review applications on a rolling basis.