Senior Information Security Governance Lead

Recruit AI; Lahore; On-site; PKR 2,500,000 - 4,000,000; Full time

Job summary

MCB Bank Limited is seeking an Information Security Governance Manager in Lahore to lead governance, policy development, and regulatory compliance across the organization. You will drive risk management, coordinate audits, and supervise a small cybersecurity team while collaborating with IT, legal, and business units to ensure robust security posture.

The role requires strong knowledge of information security governance, regulatory frameworks, and certifications such as CISM, CISA, or CISSP.

Qualifications

• Minimum of four years of experience in cybersecurity.
• Professional certifications such as CISM, CISA, or CISSP are preferred.
• Working knowledge of SBP Cybersecurity Framework and ISO 27001.

Responsibilities

• Develop, implement, and maintain information security governance frameworks.
• Oversee security policies, procedures, and standards for compliance.
• Manage regulatory compliance activities across cybersecurity laws and guidelines.
• Lead and coordinate audits and assessments to test controls and improve posture.
• Supervise a team of two cybersecurity professionals and provide mentorship.
• Collaborate with IT, legal, and business to embed security requirements.
• Monitor threats, regulatory changes, and industry trends to update governance.
• Report to senior management on governance status, risks, and compliance progress.
• Conduct risk assessments focused on governance and mitigation.
• Facilitate security governance training and awareness programs.

Skills

Information security governance

Regulatory compliance

Risk management

Audits & assessments

Education

Bachelor's degree in Computer Science / Information Technology / Cybersecurity

Job description

MCB Bank Limited is seeking an Information Security Governance Manager in Lahore to lead governance, policy development, and regulatory compliance across the organization. You will drive risk management, coordinate audits, and supervise a small cybersecurity team while collaborating with IT, legal, and business units to ensure robust security posture.

The role requires strong knowledge of information security governance, regulatory frameworks, and certifications such as CISM, CISA, or CISSP.