Head of SOC

easypaisa digital bank; Islamabad; On-site; PKR 4,000,000 - 8,000,000; Full time

Job summary

easypaisa digital bank in Islamabad seeks a strategic Head of SOC to safeguard the company’s digital assets against cyber threats. You will lead the Security Operations Center, manage a team of cybersecurity professionals, monitor security systems, respond to incidents, and drive the security posture forward under the Head IS.

You will oversee threat intelligence, log management, SIEM tuning, incident handling, crisis coordination with stakeholders, and the development of playbooks and SOPs in

Qualifications

• Bachelor’s or Master’s in CS/Information Security or CS-focused engineering.
• Experience leading SOC, incident handling, and log investigations.
• Strong knowledge of SIEM, SOAR, threat intel, and incident response.
• Understanding of network & application security and governance.

Responsibilities

• Lead the SOC, monitor security posture, and coordinate incident response.
• Develop and implement strategic SOC plans aligned with security goals.
• Manage SOC team performance and professional development.
• Define security policies, procedures, and SOPs; ensure timely reporting.
• Oversee log management, SIEM tuning, and threat intelligence efforts.
• Coordinate with stakeholders during crises and security events.
• Create incident playbooks and ensure ITIL-aligned change governance.
• Ensure compliance with regulatory requirements and risk management.

Skills

Security leadership

SOC monitoring

Incident response

SIEM tuning

Threat hunting

Education

BS/MS in CS or InfoSec / BE in CS

Tools

SIEM

SOAR

Job description

About easypaisa digital bank:

easypaisa is Pakistan’s first digital bank and has advanced Pakistan’s digital finance landscape. Backed by our shareholders, Telenor Group-a leading telecom operator in Asia and the Nordics- and Ant Group-the force behind Alipay, the world’s leading open internet platform, easypaisa deliver secure, convenient financial solutions to millions of Pakistanis.

Summary:

The Head of SOC plays a critical leadership role in safeguarding the company's digital assets from cyber threats. This position involves managing the Security Operations Center and leading a team of cybersecurity professionals in monitoring security systems, responding to security incidents, and improving the organization’s overall security posture. The role will own monitoring of cyber security posture of organization and all lead incidents response from discovery until resolution. Standard operating procedures should be followed for detecting, classifying, and reporting incidents under the supervision of Head IS.

The incumbent shall ensure to support all activities of TMB Cert in order to identify, protect, detect, respond, and recover from IS & Cyber Security events/incidents. Communication/ intimation of threat alerts, configuration of Logs, Management of SOC & SIEM and additional roles assigned from Head IS from time to time.

DUTIES & RESPONSIBILITIES:

1. Develop and implement strategic plans for the SOC that align with the organization’s overall security strategies.
2. Lead, motivate, and develop the SOC team, ensuring high levels of performance, reliability, and job satisfaction.
3. Work closely with other department heads and senior management to define security policies and procedures.
4. Responsible for Monitoring of cyber security posture of organization and generating actionable reports.
5. Responsible for overall incident handling of cyber security incidents and reporting to senior management including crisis management team and extensive coordination with Group stakeholders.
6. Ensure that sufficient detection and response capabilities are in place and drive the deployment of relevant security tools across the environment and optimize the processes to respond and investigate attacks and cyber security frauds.
7. Support and guide on organizational, technical, operational, and corporate challenges resulting from incidents.
8. Ensure team is motivated to deliver on ad hoc schedule and generate reports on timely basis Ability to prioritize and handle multiple tasks in a high- pressure environment. Innovation in presentation layer to enable business stakeholders better. Should be able to analyze, understand and recommend solutions to complex problems.
9. Provide analysis and trending of security log data from a large number of heterogeneous IT security devices.
10. Provide Incident Response (IR) support when analysis confirms actionable incident.
11. To generate the daily reports, weekly reports, and monthly reports on time.
12. To perform gap analysis of SIEM and integrate missing infrastructure components.
13. To improve threat intelligence capability by identifying IOCs and other relevant information from external and internal sources and taking immediate actions for mitigations.
14. Examines and monitors for attacks, intrusions and unusual, unauthorized, or illegal activity.
15. Investigate and solve security breaches and other cyber security incidents and provide incident response.
16. To create Incident handling playbooks as per NIST and other standard practices.
17. Support IS team in operational activities including but not limited to access management governance and security audits.
18. Recommend enhancements to SOC security process, procedures, and policies/SOP.
19. Works as part of a team to ensure that corporate data and technology platform components are safeguarded from known threats.
20. Communicate effectively with customers, teammates, and management.
21. Follow ITIL practices regarding incident, problem and change management.
22. Document and maintain customer build documents, security procedures and processes.
23. Staying up-to-date with emerging security threats including applicable regulatory security requirements.
24. Other responsibilities and additional duties as assigned by CISO.

QUALIFICATION & EXPERIENCE:

• BS or MS (computer Science, Information Security)/ BE (computer Science).
• The Job role of Head of SOC entails exposure and growth within multiple information security domains and conducting security investigations, in SIEM tuning, Log Management, Configuration, Analysis and Alert Configuration, implementing SOAR.
• 7+ Years of hands-on experience of Server, Database and Application Vulnerability Scanning and Penetration Testing is an added advantage.
• Preferred Information Security professional on SOC, Incident handling, Computer forensics and log investigations and vendor specific training and certs on SIEM.
• Understanding of Network & Application Security and Systems Administration/programming, Data Networks, Security Operations and Incident reporting and management.