InfoSec GRC Manager: Governance & Risk

easypaisa digital bank; Islamabad; On-site; PKR 2,400,000 - 4,800,000; Full time

Job summary

easypaisa is Pakistan’s first digital bank and leads in digital finance. The incumbent will manage the Information Security Governance, Risk & Compliance (GRC) function, ensuring policy implementation, risk management, regulatory compliance, and robust security governance across the organization.

The role supports the Head of GRC/CISO in identifying, assessing, monitoring, and reporting information security risks, maintaining risk registers, coordinating audits, and ensuring SBP and industry

Qualifications

• Bachelor’s degree; certifications such as CISM/CRISC/CISA preferred.
• Experience with SBP regulations, ISO 27001, NIST CSF and PCI DSS.
• Strong governance, risk and compliance (GRC) capabilities.

Responsibilities

• Manage Information Security GRC framework and risk assessments.
• Maintain SBP regulatory compliance and information security policies.
• Coordinate internal and external audits and regulatory inspections.
• Develop KRIs, KPIs and MIS for senior management.
• Lead and develop the GRC team and collaborate with stakeholders.

Skills

GRC governance

Risk management

Regulatory compliance

Information security policies

Audit coordination

Third-party risk assessment

SBP regulations

ISO/IEC 27001

NIST CSF

PCI DSS

Vendor due diligence

GRC tooling experience

Education

Bachelor's degree

Tools

GRC tools

Job description

easypaisa is Pakistan’s first digital bank and leads in digital finance. The incumbent will manage the Information Security Governance, Risk & Compliance (GRC) function, ensuring policy implementation, risk management, regulatory compliance, and robust security governance across the organization.

The role supports the Head of GRC/CISO in identifying, assessing, monitoring, and reporting information security risks, maintaining risk registers, coordinating audits, and ensuring SBP and industry