Security Engineer – Payments & Compliance

qlub; Lahore; On-site; PKR 1,800,000 - 3,200,000; Full time

Benefits offered by this job

Ownership over products that impact a\

Job summary

qlub is expanding its security team to own day-to-day security compliance, ISMS management across ISO 27001, PCI DSS readiness, and customer assurance. The role spans audits, evidence validation, and coordinating with auditors and cross-functional teams.

You’ll contribute to threat detection, application security, cloud security, and DevSecOps initiatives, including secure SDLC practices and vulnerability management, while leveraging automation and AI to streamline processes.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 3+ years of hands-on experience in cybersecurity, compliance, or GRC.
• Experience maintaining an ISO 27001 ISMS and coordinating audits.
• Experience handling customer security questionnaires and audits with cross-functional teams.
• Knowledge of PCI DSS, NIST CSF, and cloud security.

Responsibilities

• Own day-to-day security compliance and ISMS activities across ISO 27001, PCI DSS, SOC 2 readiness and applicable regulatory requirements.
• Manage internal and external audits, certifications and assessments end to end including auditor engagement and evidence validation.
• Own customer security questionnaires, due diligence and security assessments with business stakeholders.
• Maintain security policies, risk assessments and control documentation, drive findings to closure.
• Coordinate third-party security reviews and security awareness activities; monitor continuous compliance.
• Contribute to security operations including SIEM/EDR monitoring, threat detection, incidents, cloud security and vulnerability management.

Skills

GRC

ISO 27001

Audits

PCI DSS

Cloud security

Threat detection

DevSecOps

SAST/DAST

Education

Bachelor’s in Information Security/CS

Tools

AWS

GCP

SIEM

ISO 27001 ISMS

Job description

qlub is expanding its security team to own day-to-day security compliance, ISMS management across ISO 27001, PCI DSS readiness, and customer assurance. The role spans audits, evidence validation, and coordinating with auditors and cross-functional teams.

You’ll contribute to threat detection, application security, cloud security, and DevSecOps initiatives, including secure SDLC practices and vulnerability management, while leveraging automation and AI to streamline processes.