InfoSec GRC Unit Lead: Banking Governance & Risk

U Microfinance Bank Limited; Islamabad; Presencial; PKR 4.000.000 - 6.000.000; Jornada completa

Descripción de la vacante

U Microfinance Bank Limited is seeking an experienced Unit Head Information Security GRC to establish and lead the Governance, Risk and Compliance function. The role ensures alignment of the information security program with business objectives, regulatory requirements and industry best practices.

You will oversee risk assessments, compliance activities, policy governance and control assurance across the bank, collaborating with IT, Risk Management, Compliance and Internal Audit.

Formación

• Bachelor’s degree in computer science, IT, information security or related discipline; Master’s degree preferred.
• Minimum 10 years of progressive experience in Information Security with strong GRC expertise.
• At least 3–5 years in a managerial or leadership role; banking/financial sector experience preferred.
• Certifications: CISM, CISSP, CISA, CRISC, ISO 27001 Lead Auditor/Lead Implementer.

Responsabilidades

• Develop and maintain the Bank's Information Security Governance framework, policies, standards and procedures.
• Lead the information security risk management program, including risk assessments and remediation tracking.
• Ensure compliance with SBP regulations, ISO 27001, and other regulatory requirements.
• Oversee information security compliance assessments and evaluation of control effectiveness.
• Coordinate information security reviews, regulatory inspections and independent assessments; close observations promptly.
• Manage third-party and outsourcing risk assessments and oversight of vendors.
• Monitor cybersecurity risks, control deficiencies and remediation activities; escalate significant issues to senior management.
• Create cybersecurity risk and compliance dashboards and KRIs for senior management.
• Develop and oversee Bank-wide information security awareness and training, including phishing simulations.
• Ensure information security requirements are integrated into technology projects and major initiatives.
• Lead the GRC team and drive ongoing governance, risk management and compliance improvements.

Conocimientos

Information Security Governance

ISO 27001/27002

Risk management

IT audit & compliance

Third-party risk management

Educación

Bachelor’s degree in Computer Science/IT/Information Security

Master’s degree preferred

Descripción del empleo

U Microfinance Bank Limited is seeking an experienced Unit Head Information Security GRC to establish and lead the Governance, Risk and Compliance function. The role ensures alignment of the information security program with business objectives, regulatory requirements and industry best practices.

You will oversee risk assessments, compliance activities, policy governance and control assurance across the bank, collaborating with IT, Risk Management, Compliance and Internal Audit.