Senior GRC & InfoSec Governance Lead

Mobilink Microfinance Bank Limited; Islamabad; On-site; PKR 3,500,000 - 5,200,000; Full time

Job summary

Mobilink Bank is seeking an AVP to lead Information Security Governance, Risk & Compliance (GRC) at head office in Islamabad. You will coordinate risk assessments, regulatory compliance, audits and security controls across IAM, SIEM, DLP and more.

Ideal candidate holds a related degree with certifications like CISM/CISA and ISO 27001 Lead Auditor/Implementer, and has extensive governance and stakeholder management experience in a banking environment.

Qualifications

• Bachelor's or Master's degree in Information Security, Cybersecurity, Computer Science, Information Technology or related discipline.
• CISM, CISA, ISO/IEC 27001 Lead Auditor/Implementer or equivalent desirable.
• Experience in information security governance, cybersecurity risk, compliance, audit, regulatory compliance or technology risk management.
• Knowledge of ISO/IEC 27001, NIST CSF, PCI DSS, information security risk management and cybersecurity governance.

Responsibilities

• Manage and continuously improve the Information Security Governance, Risk & Compliance (GRC) framework.
• Develop, review and maintain information security policies, standards, procedures and control frameworks.
• Coordinate information security and cybersecurity risk assessments, maintain the risk register, and monitor risk treatment, acceptance and remediation.
• Manage regulatory and security compliance activities, including SBP, Group/VEON, ISO 27001 and PCI DSS requirements.
• Coordinate ISO 27001 ISMS activities, audits, certification/surveillance requirements and continual improvement initiatives.
• Monitor key security controls across IAM, PAM, Vulnerability Management, SIEM/SOC, Endpoint Security, DLP and Security Monitoring.
• Coordinate third-party, cloud and technology security risk assessments and track remediation of identified risks and exceptions.
• Coordinate internal and external security audits, evidence collection, management responses and closure of audit findings.
• Maintain governance trackers for risks, compliance gaps, audit findings, exceptions, initiatives and remediation actions.
• Prepare management dashboards and reports covering security risks, compliance, control effectiveness, KPIs/KRIs and remediation progress.
• Support security governance forums and ensure timely escalation of significant risks, compliance issues and overdue actions.

Skills

GRC management

Regulatory compliance

Stakeholder management

Audit coordination

Risk assessment

Education

Bachelor's or Master's in Information Security or related

Tools

CISM

CISA

ISO/IEC 27001 Lead Auditor/Implementer

Job description

Mobilink Bank is seeking an AVP to lead Information Security Governance, Risk & Compliance (GRC) at head office in Islamabad. You will coordinate risk assessments, regulatory compliance, audits and security controls across IAM, SIEM, DLP and more.

Ideal candidate holds a related degree with certifications like CISM/CISA and ISO 27001 Lead Auditor/Implementer, and has extensive governance and stakeholder management experience in a banking environment.