Public Procurement Regulatory Authority (PPRA) Hiring: Security Compliance Officer

Public Procurement Regulatory Authority (PPRA); Pakistan; On-site; PKR 1,200,000 - 1,800,000; Part time

Job summary

Public Procurement Regulatory Authority (PPRA) invites applications for the post of Security Compliance Officer on a lump-sum pay contract in Pakistan. The candidate will coordinate ISMS implementations, monitor security policies, and manage audit evidence across the organization.

Applicants should hold a Bachelor's degree in a related ICT field, with ISO/IEC 27001 certifications preferred and at least 5 years of relevant experience in information security, compliance, and risk assessment.

Qualifications

• Bachelor's degree in Cyber Security, Information Security, Computer Science, Information Technology, Information Systems, Software Engineering, or related ICT field from a recognized university.
• ISO/IEC 27001 Lead Implementer and/or Lead Auditor, CISA or equivalent information security certification.
• Minimum 5 years of post-qualification experience in information security, ISMS, risk assessment, audits, policy development and evidence management.

Responsibilities

• Coordinate implementation and monitoring of PISF, ISMS and applicable information security policies.
• Maintain cybersecurity policies, procedures, compliance matrices, risk registers and risk-treatment records.
• Coordinate security control assessments, internal/external audits and maintenance of audit/compliance evidence.
• Track audit findings, compliance gaps and corrective actions through closure and report status to management.
• Monitor third-party and managed-service security compliance against approved contractual and security requirements.
• Prepare periodic cybersecurity compliance reports, dashboards and documentation for management and relevant authorities.
• Support security awareness, policy compliance and continual improvement of the information security management framework.
• Perform any other cybersecurity responsibility assigned by the Competent Authority.

Skills

Information security

Cybersecurity

Risk assessment

Audits

Policy development

Education

Bachelor's degree in Cyber Security or related ICT discipline

Job description

About the Job

Public Procurement Regulatory Authority (PPRA) has announced 1 vacancy for the post of Security Compliance Officer (Lump-sum pay).

Job Details

• Department / Organisation: Public Procurement Regulatory Authority (PPRA)
• Post: Security Compliance Officer
• Grade: Lump-sum pay
• Job type: Contract
• Vacancies: 1
• Qualification: Qualification: Minimum a Bachelor's degree (16 years of education) in Cyber Security, Information Security, Computer Science, Information Technology, Information Systems, Software Engineering, or a related ICT discipline from an HEC-recognized high-ranked university/institution and foreign universities. Preferred Certifications: ISO/IEC 27001 Lead Implementer and/or ISO/IEC 27001 Lead Auditor, CISA, or equivalent relevant information security compliance/audit certification. Experience: Minimum 5 years of relevant and verifiable post-qualification experience, preferably including information security compliance, ISMS, risk assessment, security audits, control assessments, policy/procedure development and audit-evidence management. Job Description: Coordinate implementation and monitoring of PISF, ISMS and applicable information security policies, standards and regulatory requirements. Maintain cybersecurity policies, procedures, compliance matrices, risk registers and risk-treatment records. Coordinate security control assessments, internal/external audits and maintenance of audit/compliance evidence. Track audit findings, compliance gaps and corrective actions through closure and report status to management. Monitor third-party and managed-service security compliance against approved contractual and security requirements. Prepare periodic cybersecurity compliance reports, dashboards and documentation for management and relevant authorities. Support security awareness, policy compliance and continual improvement of the information security management framework. Perform any other cybersecurity responsibility assigned by the Competent Authority.
• Age limit: Up to 40 years
• Location: Pakistan
• Last date to apply: 20 Nov 2026