Senior InfoSec & Privacy Leader

Bridge Intelligence; Lahore; On-site; PKR 9,000,000 - 13,000,000; Full time

Benefits offered by this job

High-spec equipment and conference/trg

Job summary

Bridge Intelligence in Lahore is seeking a Head of Information Security & Privacy to build a practical security program for a regulated fintech infrastructure. This role transcends policy and requires implementing controls, hardening systems, and ensuring audit readiness.

You will own security programs, drive ISO 27001–aligned controls, manage Kubernetes security, data governance, and threat modeling, balancing speed with non-negotiable controls.

Qualifications

• 7+ years experience in security engineering/GRC within fintech, banking, or high-compliance environments.
• Hands-on Infra Skills: Kubernetes, IAM, secrets, TLS, logging, and incident response.
• Audit Execution Experience: has run audits and built evidence systems that survive scrutiny.
• Strong Judgment: can balance speed with non-negotiable controls.
• Clear Communicator: writes policies people actually follow.

Responsibilities

• Security Program Ownership: policies, asset inventory, access controls, key management, incident response.
• Audit Readiness: drive ISO 27001-aligned controls, evidence collection, and continuous compliance.
• Infrastructure Security: Kubernetes hardening, secrets management, network segmentation, logging, and alerting.
• Data Governance: PII handling, encryption, retention, and deletion workflows with engineering.
• Vulnerability Management: scans, patching SLAs, dependency hygiene, and remediation tracking.
• Security-by-Design: enforce secure SDLC, threat modeling, and release gates.

Skills

Strong Judgment

Clear Communicator

Security Program Ownership

Audit Readiness

Vulnerability Management

Data Governance

Tools

Kubernetes

IAM

Secrets Management

TLS

Logging

Incident Response

Job description

Bridge Intelligence in Lahore is seeking a Head of Information Security & Privacy to build a practical security program for a regulated fintech infrastructure. This role transcends policy and requires implementing controls, hardening systems, and ensuring audit readiness.

You will own security programs, drive ISO 27001–aligned controls, manage Kubernetes security, data governance, and threat modeling, balancing speed with non-negotiable controls.