Head of Systems Security

HBL People; Pakistan; On-site; PKR 9,000,000 - 14,000,000; Full time

Job summary

HBL People invites applications for a senior enterprise security leader responsible for designing and implementing the organization-wide Systems and Cloud Security strategy across data centers, networks, virtualization, containers, and cloud workloads. You will drive standards, risk assessments, and architecture reviews to strengthen the security posture.

The role requires 8+ years in IT/Security, and certifications such as CCSP/CISM/CISSP, with hands-on experience in multi-cloud security, IAM,

Qualifications

• Bachelor’s in Computer Science or Information Security or MIS.
• Minimum 8 years of experience in Information Technology/Information Security/IT Risk Management.
• Professional certifications: CCSP, CISM, CISSP, ISO, AWS Security Specialty, Azure Security Engineer / Solutions Architect, GCP Professional Cloud Security Engineer.

Responsibilities

• Develop and implement the enterprise-wide Systems & Cloud Security strategy.
• Establish security standards, baselines, and architectural principles for infra and cloud workloads.
• Lead security architecture assessments and hardening across IT infrastructure.
• Oversee CIEM and cloud security controls across multi-cloud environments.
• Drive Zero Trust, IAM, network segmentation, CSPM initiatives and incident response coordination.

Education

Bachelor in Computer Science / Information Security / MIS

CCSP

CISM

CISSP

ISO

AWS Security Specialty

Azure Security Engineer / Solutions Architect

GCP Professional Cloud Security Engineer

Job description

• Develop and implement the enterprise-wide Systems & Cloud Security strategy, ensuring alignment with overall cybersecurity roadmap.
• Establish and maintain security standards, baselines, and architectural principles for infrastructure and cloud workloads.
• Provide expert input to security governance forums, steering committees, audit committees, and senior leadership.
• Develop policies, procedures, and frameworks for infrastructure and cloud security consistent with ISO 27001, NIST, CIS, PCI-DSS, etc.
• Oversee the security posture of data centers, servers, networks, virtualization platforms, endpoints, Container, Kubernetes and cloud environments (IaaS, PaaS, SaaS).
• Lead and review security architecture assessments, design validations, and hardening initiatives across IT infrastructure.
• Oversee virtualization platform security including hypervisor hardening and secure VM templates.
• Lead the implementation of cloud-native security controls including AWS, Azure Defender, WAF, DDoS protection, container runtime security, and workload protection solutions (CWPP).
• Govern secure design of cloud network architectures including Transit Gateway, VPC/VNet segmentation, peering, private link services, ingress/egress filtering, and cloud firewalls.
• Oversee Cloud Identity Entitlement Management (CIEM) to eliminate excessive permissions, toxic combinations, and misconfigurations across multi-cloud environments.
• Ensure continuous security risk assessments, configuration reviews, and vulnerability management for infrastructure components.
• Drive implementation of Zero Trust, Identity & Access Security, Network Segmentation, Endpoint Protection, and Cloud Security Posture Management (CSPM)
• Lead cyber defense initiatives for infrastructure and cloud environments in coordination with SOC & incident response teams.
• Oversee incident investigations impacting systems, cloud services, servers, and infrastructure components.
• Ensure rapid remediation of vulnerabilities and audit findings

People Management

• Lead, mentor, and develop a team of security specialists and analysts.
• Collaborate closely with Infrastructure, Cloud Engineering, Network, DevOps, and IT Operations teams.
• Engage senior management, vendors, and business teams for strategic security guidance.
• Manage vendor relationships, contracts, and budgets for infrastructure and cloud security projects.
• Lead annual performance evaluation, goal setting, and capability development for theSystems & Cloud Security team.
• Build and mentor a succession-ready talent pipeline with expertise in multi-cloud security, DevSecOps, and infrastructure protection.

Qualifications

• Bachelor’s in Computer Science or Information Security or MIS
• Preferably at least one of the following professional certification:
  • CCSP
  • CISM
  • CISSP
  • ISO
  • AWS Security Specialty
  • Azure Security Engineer / Solutions Architect
  • GCP Professional Cloud Security Engineer
• Minimum 8 years of experience in Information Technology/ Information Security / IT Risk Management

Job Info

• Job Identification 29616
• Posting Date 09/22/2026, 11:18 AM
• Degree Level Bachelor Honours (16 years)
• Locations Habib Bank Plaza, Karachi, Sindh, PK