Senior IT & Operational Risk Leader

SSGC LPG Limited; Karachi Division; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

Sui Southern Gas Company Limited seeks a Chief Manager / Engineer – IT and Operational Risk to lead enterprise risk management and information security initiatives. The role requires engineering or computing credentials with extensive experience in risk governance, compliance, and ISO standards.

The successful candidate will drive ERM maturity, assess security controls, and oversee IT/OT risk programs. As a senior professional, you will mentor teams, coordinate cross-functional risk efforts and

Qualifications

• Engineering degree in Mechanical or Electrical with 9+ years of relevant experience or BCS/equivalent with 10+ years of experience.
• Registration with PEC mandatory for engineers. Certifications such as CISA/CRISC/CISSP preferred. ISO 31000 training would be a plus.

Responsibilities

• Establishes and communicates the Enterprise Risk Management Framework and guides ERM maturity.
• Implements ERM framework, risk culture, risk policies and risk appetite with senior management.
• Designs ERM methodologies, tools and techniques across the organization.
• Manages enterprise-wide risk assessments and monitors priority risks.
• Leads risk management for information security programs and ISO 2700X implementation.
• Develops IT risk metrics, reports, and configuration/standards management.
• Assesses security controls and risks for information and technology systems.
• Leads information security compliance program and regulatory alignment.
• Coordinates IT/OT risk assessments, timelines, and outcomes.
• Provides guidance to IT processes and projects on security best practices.

Skills

ERM

Information security

Risk management

PEC registration

Education

Engineering degree (Mechanical/Electrical)

BCS or equivalent

Job description

Sui Southern Gas Company Limited seeks a Chief Manager / Engineer – IT and Operational Risk to lead enterprise risk management and information security initiatives. The role requires engineering or computing credentials with extensive experience in risk governance, compliance, and ISO standards.

The successful candidate will drive ERM maturity, assess security controls, and oversee IT/OT risk programs. As a senior professional, you will mentor teams, coordinate cross-functional risk efforts and