Senior IT Risk & Controls Engineer

Sui Southern Gas Company Limited; Karachi Division; On-site; PKR 1,800,000 - 3,200,000; Full time

Job summary

Sui Southern Gas Company Limited is seeking an Engineer / Deputy Manager – IT Risk Management to coordinate with the IT department on risk registers and reporting. The role focuses on identifying controls, supporting control design and monitoring control effectiveness across IT processes.

The incumbent will prepare monthly risk reports for management and contribute to enterprise risk management initiatives in alignment with relevant standards and regulators.

Qualifications

• In-depth knowledge of IT risk management, cyber security and related standards/regulations (NIST 800-53, ISO-2700X, COBIT, ITIL).
• Preferred certifications: CISA, CRISC, CISSP.
• PEC registration mandatory for engineers.

Responsibilities

• Coordinate with IT to prepare and update departmental risk registers.
• Prepare periodic progress reports from risk registers for management.
• Identify controls based on risks for IT business processes.
• Support design, implementation and amendment of controls.
• Monitor IT control performance across the business for timely execution.
• Report on risks and control effectiveness to Risk Management Committee.

Skills

IT Risk Management

Cyber Security

Security Standards

NIST/ISO standards

Risk Reporting

Education

Bachelors in Computer Science/IT (4+ yrs)

Bachelors in Computer Engineering (2+ yrs)

Job description

Sui Southern Gas Company Limited is seeking an Engineer / Deputy Manager – IT Risk Management to coordinate with the IT department on risk registers and reporting. The role focuses on identifying controls, supporting control design and monitoring control effectiveness across IT processes.

The incumbent will prepare monthly risk reports for management and contribute to enterprise risk management initiatives in alignment with relevant standards and regulators.