Senior Information Security & GRC Leader (vCISO)

Idenfo; Karachi Division; On-site; PKR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

ESOPs

Job summary

Protego is hiring a Senior Information Security Manager to lead security service delivery across governance, risk, and compliance, along with technical assurance and advisory services. You will mentor a Junior Information Security Analyst and drive client engagements with a focus on ISO 27001, regulatory advisory, and security governance.

The role balances hands-on security work with client relationships, reporting, and service quality across four service lines, including advisory and incident

Qualifications

• 6+ years in information security with hands-on depth in at least three areas (compliance/GRC, pentesting, secure code review, IT governance).
• ISO 27001 ISMS implementation or Lead Auditor/Lead Implementer experience preferred.

Responsibilities

• Lead ISO 27001 gap assessments, ISMS implementation and certification-readiness for clients.
• Oversee vCISO engagements and outsourced security leadership for clients.
• Own risk assessment and vendor risk management across client engagements.

Skills

GRC

Penetration testing

Secure code review

IT governance

Stakeholder communication

Cloud security

Tools

SAST tooling

DAST tooling

Cloud security tooling

Job description

Protego is hiring a Senior Information Security Manager to lead security service delivery across governance, risk, and compliance, along with technical assurance and advisory services. You will mentor a Junior Information Security Analyst and drive client engagements with a focus on ISO 27001, regulatory advisory, and security governance.

The role balances hands-on security work with client relationships, reporting, and service quality across four service lines, including advisory and incident