Security & Operational Risk Consultant for Justice Programme

Pakistan Centre for Philanthropy; Islamabad; In loco; PKR 1.800.000 - 2.900.000; Part-time

Descrizione del lavoro

Legal Aid Society (LAS) in Islamabad invites an experienced security risk management consultancy to support its 12-month programme across Punjab, Sindh and Islamabad. The engagement focuses on security planning, incident reporting, IT vulnerability assessment, and coordination with LAS teams to safeguard staff and information systems.

The consultant will deliver a Programme Security Plan, Incident Reporting Protocol, monthly updates, and a remediation verification process, reporting to the

Competenze

• 5+ years of standing in Pakistan in security risk management or related consultancy.
• Team lead with at least 10 years in security risk management.
• Established networks with public institutions in Islamabad and provinces.
• Familiarity with international donor standards on duty of care, security and data protection.
• Capacity to maintain strict confidentiality and do-no-harm approach to sensitive information.
• Capacity to conduct basic digital security reviews of web-based or cloud-hosted platforms.

Mansioni

• Finalise the Programme Security Plan and Incident Reporting Protocol.
• Conduct an IT vulnerability assessment of three platforms and produce a vulnerability report.
• Engage LAS technical teams and platform administrators for review and remediation actions.
• Provide monthly security updates to the Program Manager and flag risks.
• Verify remediation: ensure Critical and High findings are resolved.

Conoscenze

Security risk management

Team leadership

Digital security reviews

Stakeholder coordination

Formazione

CPP / CEH / CompTIA Security+ or equivalent

Descrizione del lavoro

Legal Aid Society (LAS) in Islamabad invites an experienced security risk management consultancy to support its 12-month programme across Punjab, Sindh and Islamabad. The engagement focuses on security planning, incident reporting, IT vulnerability assessment, and coordination with LAS teams to safeguard staff and information systems.

The consultant will deliver a Programme Security Plan, Incident Reporting Protocol, monthly updates, and a remediation verification process, reporting to the