Head of Systems Security

HBL; Karachi Division; On-site; PKR 2,800,000 - 5,600,000; Full time

Job summary

HBL is seeking a senior information security leader to develop and drive the enterprise-wide security strategy across on-premise and cloud environments. You will define standards, govern architecture, and coordinate with SOC and executive teams to enhance risk posture.

The role requires extensive experience in IT security, multi-cloud controls, and vendor management, with a focus on ISO/NIST/CIS/PCI-DSS frameworks. Karachi-based with strategic responsibilities.

Qualifications

• Bachelor’s in Computer Science or Information Security or MIS.
• Certification: CCSP, CISM, CISSP, ISO, AWS Security Specialty, Azure Security Engineer/Solutions Architect, or GCP Professional Cloud Security Engineer preferred.
• Minimum 8 years of experience in IT/Information Security / IT Risk Management.

Responsibilities

• Develop and implement the enterprise-wide Systems & Cloud Security strategy aligned with the cybersecurity roadmap.
• Establish security standards, baselines, and architectural principles for infra and cloud workloads.
• Provide input to governance forums, steering committees, audit committees, and senior leadership.
• Create policies, procedures, and frameworks for infrastructure and cloud security (ISO 27001, NIST, CIS, PCI-DSS).
• Oversee security posture of data centers, servers, networks, virtualization, endpoints, containers, Kubernetes, and cloud environments (IaaS, PaaS, SaaS).
• Lead security architecture assessments, design validations, and hardening initiatives across IT infrastructure.
• Oversee virtualization security including hypervisor hardening and secure VM templates.
• Lead implementation of cloud-native security controls (AWS, Azure Defender, WAF, DDoS protection, CWPP).
• Govern secure design of cloud networks (Transit Gateway, VPC/VNet segmentation, peering, private link, ingress/egress filtering).
• Oversee CIEM to eliminate excessive permissions and misconfigurations across multi-clouds.
• Ensure continuous security risk assessments, config reviews, and vulnerability management for infrastructure components.
• Drive Zero Trust, IAM, network segmentation, endpoint protection, CSPM adoption.
• Lead cyber defense initiatives in coordination with SOC and IR teams.
• Oversee incident investigations impacting systems, cloud services, servers, and infrastructure.

Skills

Strategic security leadership

Security governance

Cross-functional collaboration

Vendor management

Education

Bachelor’s in Computer Science or Information Security or MIS

Tools

AWS

Azure Defender

Kubernetes

CWPP

CIEM

Job description

• Develop and implement the enterprise-wide Systems & Cloud Security strategy, ensuring alignment with overall cybersecurity roadmap.
• Establish and maintain security standards, baselines, and architectural principles for infrastructure and cloud workloads.
• Provide expert input to security governance forums, steering committees, audit committees, and senior leadership.
• Develop policies, procedures, and frameworks for infrastructure and cloud security consistent with ISO 27001, NIST, CIS, PCI-DSS, etc.
• Oversee the security posture of data centers, servers, networks, virtualization platforms, endpoints, Container, Kubernetes and cloud environments (IaaS, PaaS, SaaS).
• Lead and review security architecture assessments, design validations, and hardening initiatives across IT infrastructure.
• Oversee virtualization platform security including hypervisor hardening and secure VM templates.
• Lead the implementation of cloud-native security controls including AWS, Azure Defender, WAF, DDoS protection, container runtime security, and workload protection solutions (CWPP).
• Govern secure design of cloud network architectures including Transit Gateway, VPC/VNet segmentation, peering, private link services, ingress/egress filtering, and cloud firewalls.
• Oversee Cloud Identity Entitlement Management (CIEM) to eliminate excessive permissions, toxic combinations, and misconfigurations across multi-cloud environments.
• Ensure continuous security risk assessments, configuration reviews, and vulnerability management for infrastructure components.
• Drive implementation of Zero Trust, Identity & Access Security, Network Segmentation, Endpoint Protection, and Cloud Security Posture Management (CSPM)
• Lead cyber defense initiatives for infrastructure and cloud environments in coordination with SOC & incident response teams.
• Oversee incident investigations impacting systems, cloud services, servers, and infrastructure components.
• Ensure rapid remediation of vulnerabilities and audit findings

People Management

• Lead, mentor, and develop a team of security specialists and analysts.
• Collaborate closely with Infrastructure, Cloud Engineering, Network, DevOps, and IT Operations teams.
• Engage senior management, vendors, and business teams for strategic security guidance.
• Manage vendor relationships, contracts, and budgets for infrastructure and cloud security projects.
• Lead annual performance evaluation, goal setting, and capability development for theSystems & Cloud Security team.
• Build and mentor a succession-ready talent pipeline with expertise in multi-cloud security, DevSecOps, and infrastructure protection.

Qualifications

• Bachelor’s in Computer Science or Information Security or MIS
• Preferably at least one of the following professional certification:
  • CCSP
  • CISM
  • CISSP
  • ISO
  • AWS Security Specialty
  • Azure Security Engineer / Solutions Architect
  • GCP Professional Cloud Security Engineer
• Minimum 8 years of experience in Information Technology/ Information Security / IT Risk Management

Job Info

• Job Identification 29616
• Posting Date 09/22/2026, 11:18 AM
• Degree Level Bachelor Honours (16 years)
• Locations Habib Bank Plaza, Karachi, Sindh, PK