Security Compliance Officer

Pakistan; Islamabad; On-site; PKR 1,200,000 - 2,400,000; Full time

Job summary

Public Procurement Regulatory Authority (PPRA) in Islamabad seeks a seasoned information security professional to coordinate ISMS, regulatory compliance and security governance. The role requires leading audits, risk assessments and policy development across the organization.

The ideal candidate has at least 5 years of post-qualification experience in information security controls, audit evidence management, and reporting to authorities.

Qualifications

• Bachelor's degree in Cyber Security or related ICT discipline from a recognized university.
• Preferred ISO/IEC 27001 Lead Implementer and/or Lead Auditor, CISA or equivalent.
• Minimum 5 years of relevant post-qualification experience in information security compliance, ISMS, risk assessment, audits, control assessments, policy development, audit-evidence management.

Responsibilities

• Coordinate implementation and monitoring of PISF, ISMS and applicable information security policies, standards and regulatory requirements.
• Maintain cybersecurity policies, procedures, compliance matrices, risk registers and risk-treatment records.
• Coordinate security control assessments, internal/external audits and maintenance of audit/compliance evidence.
• Track audit findings, compliance gaps and corrective actions through closure and report status to management.
• Monitor third-party and managed-service security compliance against approved contractual and security requirements.
• Prepare periodic cybersecurity compliance reports, dashboards and documentation for management and relevant authorities.
• Support security awareness, policy compliance and continual improvement of the information security management framework.
• Perform any other cybersecurity responsibility assigned by the Competent Authority.

Skills

Information security

ISMS

Audit management

Regulatory compliance

Education

Bachelor's degree in Cyber Security

BSc Information Systems

MSc Computer Science

BE Software Engineering

Job description

Public Procurement Regulatory Authority (PPRA)

Minimum a Bachelor's degree (16 years of education) in Cyber Security, Information Security, Computer Science, Information Technology, Information Systems, Software Engineering, or a related ICT discipline from an HEC-recognized high-ranked university/institution and foreign universities.

Preferred Certifications:

ISO/IEC 27001 Lead Implementer and/or ISO/IEC 27001 Lead Auditor, CISA, or equivalent relevant information security compliance/audit certification.

Experience:

Minimum 5 years of relevant and verifiable post-qualification experience, preferably including information security compliance, ISMS, risk assessment, security audits, control assessments, policy/procedure development and audit-evidence management.

Job Description:

• Coordinate implementation and monitoring of PISF, ISMS and applicable information security policies, standards and regulatory requirements.
• Maintain cybersecurity policies, procedures, compliance matrices, risk registers and risk-treatment records.
• Coordinate security control assessments, internal/external audits and maintenance of audit/compliance evidence.
• Track audit findings, compliance gaps and corrective actions through closure and report status to management.
• Monitor third-party and managed-service security compliance against approved contractual and security requirements.
• Prepare periodic cybersecurity compliance reports, dashboards and documentation for management and relevant authorities.
• Support security awareness, policy compliance and continual improvement of the information security management framework.
• Perform any other cybersecurity responsibility assigned by the Competent Authority.

Eligibility Criteria

Qualifications

BS Computer Science (BSCS) BS Software Engineering BS Cybersecurity BS Information Systems BS Cyber Security & Digital Forensics MSc Computer Science MS Computer Science (MSCS) MS Information Technology (MSIT) Master of Computer Science (MCS) BE Computer Science MSc Information Technology MS Computer Software Engineering BE Software Engineering MPhil Software Engineering MS Information Security MS Cybersecurity MPhil Computer Science Master of Engineering (Information Technology) MS Software Engineering Master of Information Technology- MIT Msc Cybersecurity and Data governance Master of Engineering (Software Engineering) Masters of science in Information Systems BSc Software Engineering Master of Computer Science (Executive) EMCS MS Computer and Information Technology Bachelors of Computer Science BE Computers Systems and Software Engineering BS Information Security Msc in Artificial Intelligence and Computer Science MPhil Information Systems MS Information Systems MS Software Engineering and Information System MS Computer Science and Information Technology

Experience

5 Years

Age Limit

Max: 40 years

Quick Overview

Experience: 5+ years

Age Limit: Max: 40

About Employer

Public Procurement Regulatory Authority (PPRA)