Head of Systems Security

HBL; Pakistan; On-site; PKR 14,000,000 - 20,000,000; Full time

Job summary

Habib Bank Limited is seeking a senior security leader to develop and implement an enterprise-wide Systems & Cloud Security strategy. You will set standards, guide governance forums, and oversee security across data centers, networks, virtualization, endpoints, containers, Kubernetes, and cloud environments.

The role requires steering architecture reviews, hypervisor hardening, and security controls across AWS, Azure, and other platforms.

Qualifications

• Bachelor’s in Computer Science or Information Security or MIS.
• CCSP, CISM, CISSP, ISO, AWS Security Specialty, Azure Security Engineer / Solutions Architect, or GCP Professional Cloud Security Engineer certifications.
• Minimum 8 years of experience in Information Technology/Information Security/IT Risk Management.

Responsibilities

• Develop and implement the enterprise-wide Systems & Cloud Security strategy.
• Establish and maintain security standards, baselines, and architectural principles for infrastructure and cloud workloads.
• Provide input to security governance forums, steering committees, audit committees, and senior leadership.
• Oversee security posture of data centers, servers, networks, virtualization platforms, endpoints, containers, Kubernetes and cloud environments (IaaS, PaaS, SaaS).
• Lead security architecture assessments, design validations, and hardening initiatives across IT infrastructure.
• Oversee virtualization platform security including hypervisor hardening and secure VM templates.
• Lead the implementation of cloud-native security controls (AWS/Azure Defender, WAF, DDoS protection, CWPP).
• Govern secure design of cloud network architectures (Transit Gateway, VPC/VNet segmentation, peering, private link services).
• Oversee CIEM to minimize excessive permissions and misconfigurations across multi-clouds.
• Ensure continuous security risk assessments, configuration reviews, and vulnerability management.
• Drive Zero Trust, IAM security, network segmentation, endpoint protection, CSPM.
• Coordinate cyber defense initiatives with SOC and IR teams.
• Oversee incident investigations and rapid remediation of findings.

Skills

Security strategy

Cloud security

Security governance

Security risk management

Zero Trust

Education

Bachelor's in CS/InfoSec/MIS

CCSP

CISM

CISSP

AWS Security Specialty

Azure Security Engineer/solutions architect

GCP Professional Cloud Security Engineer

Tools

AWS

Azure

Kubernetes

CWPP

CIEM

Job description

• Develop and implement the enterprise-wide Systems & Cloud Security strategy, ensuring alignment with overall cybersecurity roadmap.
• Establish and maintain security standards, baselines, and architectural principles for infrastructure and cloud workloads.
• Provide expert input to security governance forums, steering committees, audit committees, and senior leadership.
• Develop policies, procedures, and frameworks for infrastructure and cloud security consistent with ISO 27001, NIST, CIS, PCI-DSS, etc.
• Oversee the security posture of data centers, servers, networks, virtualization platforms, endpoints, Container, Kubernetes and cloud environments (IaaS, PaaS, SaaS).
• Lead and review security architecture assessments, design validations, and hardening initiatives across IT infrastructure.
• Oversee virtualization platform security including hypervisor hardening and secure VM templates.
• Lead the implementation of cloud‑native security controls including AWS, Azure Defender, WAF, DDoS protection, container runtime security, and workload protection solutions (CWPP).
• Govern secure design of cloud network architectures including Transit Gateway, VPC/VNet segmentation, peering, private link services, ingress/egress filtering, and cloud firewalls.
• Oversee Cloud Identity Entitlement Management (CIEM) to eliminate excessive permissions, toxic combinations, and misconfigurations across multi‑cloud environments.
• Ensure continuous security risk assessments, configuration reviews, and vulnerability management for infrastructure components.
• Drive implementation of Zero Trust, Identity & Access Security, Network Segmentation, Endpoint Protection, and Cloud Security Posture Management (CSPM)
• Lead cyber defense initiatives for infrastructure and cloud environments in coordination with SOC & incident response teams.
• Oversee incident investigations impacting systems, cloud services, servers, and infrastructure components.
• Ensure rapid remediation of vulnerabilities and audit findings

People Management

• Lead, mentor, and develop a team of security specialists and analysts.
• Collaborate closely with Infrastructure, Cloud Engineering, Network, DevOps, and IT Operations teams.
• Engage senior management, vendors, and business teams for strategic security guidance.
• Manage vendor relationships, contracts, and budgets for infrastructure and cloud security projects.
• Lead annual performance evaluation, goal setting, and capability development for theSystems & Cloud Security team.
• Build and mentor a succession-ready talent pipeline with expertise in multi-cloud security, DevSecOps, and infrastructure protection.

Qualifications

• Bachelor’s in Computer Science or Information Security or MIS
• Preferably at least one of the following professional certification:
  • CCSP
  • CISM
  • CISSP
  • ISO
  • AWS Security Specialty
  • Azure Security Engineer / Solutions Architect
  • GCP Professional Cloud Security Engineer
• Minimum 8 years of experience in Information Technology/ Information Security / IT Risk Management

Job Info

• Job Identification 29616
• Posting Date 09/22/2026, 11:18 AM
• Degree Level Bachelor Honours (16 years)
• Locations Habib Bank Plaza, Karachi, Sindh, PK