Information Security Officer

Raqami Islamic Digital Bank Ltd.; Karachi Division; On-site; PKR 1,000,000 - 2,000,000; Full time

Job summary

Raqami Bank is seeking an Information Security Officer to safeguard applications, APIs and IT assets, focusing on user access management, PAM, vulnerability assessments and security testing. You will help ensure SBP, ISO/IEC 27001, PCI DSS compliance and adherence to internal information security policies.

The role supports access provisioning, reviews, and evidence remediation across banking systems, with collaboration on VAPT activities and security reviews of new technologies.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field.
• 1-3 years of relevant experience in IAM/PAM or Information Security.

Responsibilities

• Support user access provisioning, modification, de-provisioning and periodic access reviews across banking applications and IT systems.
• Support PAM operations and privileged account reviews, and assist in enforcing least privilege, RBAC and segregation of duties (SoD).
• Assist in maintaining access records, review evidence and remediation trackers.
• Assist in vulnerability assessments and security testing of applications, APIs, infrastructure and IT assets, including support for API security testing (authentication, authorization and access control validation).
• Support the coordination of VAPT activities, track vulnerabilities, and assist in remediation validation and retesting.
• Assist in security reviews of new applications, APIs and technology changes.
• Support security incidents, risk assessments, compliance activities and third-party security reviews as required.
• Assist in maintaining security documentation and support audits and regulatory assessments; support compliance with applicable SBP requirements, ISO/IEC 27001, PCI DSS and internal Information Security policies.

Skills

Access governance

RBAC

PAM

API security

OWASP Top 10

Active Directory

Entra ID

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Postman

Burp Suite

Job description

Job Title: Information Security Officer

Department: Information Security

Job Overview

To support the Information Security function in safeguarding the Bank’s applications, APIs and IT assets by assisting with user access management, privileged access controls, vulnerability assessment and security testing, and by supporting compliance with SBP requirements, ISO/IEC 27001, PCI DSS and internal Information Security policies.

Key Responsibilities

• Support user access provisioning, modification, de-provisioning and periodic access reviews across banking applications and IT systems.
• Support PAM operations and privileged account reviews, and assist in enforcing least privilege, RBAC and segregation of duties (SoD).
• Assist in maintaining access records, review evidence and remediation trackers.
• Assist in vulnerability assessments and security testing of applications, APIs, infrastructure and IT assets, including support for API security testing (authentication, authorization and access control validation).
• Support the coordination of VAPT activities, track vulnerabilities, and assist in remediation validation and retesting.
• Assist in security reviews of new applications, APIs and technology changes.
• Support security incidents, risk assessments, compliance activities and third-party security reviews as required.
• Assist in maintaining security documentation and support audits and regulatory assessments; support compliance with applicable SBP requirements, ISO/IEC 27001, PCI DSS and internal Information Security policies.

Experience & Qualification Required

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field.
• 1-3 years of relevant experience in IAM/PAM or Information Security.

Skills & Competencies

• Knowledge of user access reviews, RBAC, PAM and access governance.
• Basic hands-on experience with API security testing tools such as Postman or Burp Suite.
• Knowledge of vulnerability assessment, OWASP Top 10 and OWASP API Security Top 10.
• Familiarity with Active Directory, Microsoft Entra ID, IAM/PAM or equivalent platforms is preferred.

Raqami Bank is an equal opportunity employer. We welcome applications from all qualified individuals, including Persons with Disabilities (PWDs), and are committed to fostering an inclusive workplace where everyone has the opportunity to succeed.

Last date to apply: November 16, 2026.