Manager Application Security

ThePakEdu; Karachi Division; On-site; PKR 1,674,000 - 2,232,000; Full time

Job summary

National Bank of Pakistan is seeking a Manager Application Security (AVP) to lead the Application Security Unit. The role focuses on driving app security initiatives, governance, and secure coding practices to mitigate vulnerabilities across enterprise systems, APIs, and cloud environments.

The ideal candidate will have 6+ years in IT/security, strong knowledge of OWASP, NIST CSF, ISO 27001, PCI SSF, and offensive security tools, and demonstrate teamwork under tight deadlines.

Qualifications

• Minimum Graduation in Computer Science and/or Computer Engineering and/or Cybersecurity and/or Information Technology.
• Master's in Information Security or relevant professional certifications preferred (PJPT, OSCP, GPEN, OSWE, CWRT, OSEP).

Responsibilities

• Implement and continuously enhance the organization's Application Security Program in alignment with business objectives and regulatory requirements.
• Develop, implement, and maintain Application Security governance, policies, standards, procedures and secure coding practices across the organization.
• Drive adoption and enforcement of Secure Software Development Lifecycle (SSDLC) across all development, deployment and DevOps initiatives.

Skills

OS & networks

Cloud platforms

Security testing

Education

Bachelor in CS/CE/IT/Cybersecurity

Master's in Information Security or professional certs (PJPT/OSCP/GPEN/OSWE/OSEP)

Tools

OWASP Top 10

NIST Cybersecurity Framework

ISO/IEC 27001

PCI SSF

Job description

Offered Salary: 150,000 - 200,000 PKR Age: 30 - 40 years Gender: Both Skills Level: Expert Location: Karachi, Sindh Organization: National Bank of Pakistan Posted on: 2026-09-13

Job Overview

National Bank of Pakistan requires a Manager Application Security (AVP) under Unit Head - Application Security to drive application security initiatives and vulnerability testing.

Educational and Professional Qualification

• Minimum Graduation in Computer Science and / or Computer Engineering and / or Cybersecurity and / or Information Technology from local or international university / college institute recognized by the HEC of Pakistan.
• Candidates have Master's in Information Security or have any other relevant professional certification such as PJPT, OSCP, OSCP+, GPEN, OSWE, CWRT, OSEP etc. will be preferred.

Experience Requirements

Minimum 06 years of experience in Information Technology and / or Information Security preferably in identifying, evaluating, and mitigating cyber security weaknesses in software & mobile applications / APIs, APK, enterprise systems, cloud and network environments.

Other Skills and Knowledge Required

• Understanding of operating systems (Linux / Windows), networks and could platforms.
• Understanding of OWASP Top 10, NIST Cybersecurity Framework, ISO / IEC 27001 and PCI SSF and essential offensive security tools and techniques.
• Good interpersonal skills and an active team player with ability to prioritize and meet strict deadlines.

Outline of Main Duties / Responsibilities

• To implement and continuously enhance the organization's Application Security Program in alignment with business objectives, cybersecurity strategy and regulatory requirements.
• To develop, implement, and maintain Application Security governance, policies, standards, procedures and secure coding practices across the organization.
• To drive the adoption and enforcement of Secure Software Development Lifecycle (SSDLC) across all development deployment and DevOps initiatives.