Senior IT Security & Risk Manager

ibex; Lahore; On-site; PKR 3,000,000 - 6,000,000; Full time

Job summary

Ibex in Lahore seeks a senior Information Security professional to lead risk management across IT, cloud, and supplier ecosystems. You will coordinate IT security roadmaps and drive control implementation to protect IBEX Global assets.

Responsibilities include conducting risk assessments, overseeing third-party IT risk, and mentoring the security team while reporting to IT leadership.

Qualifications

• 8-12 years of IT/Information Security experience.
• Strong understanding of ITRM concepts, methodologies, controls and architectures.
• Knowledge of risk frameworks such as ISO 27005, NIST CSF.
• Excellent presentation and communication skills.

Responsibilities

• Lead and perform end-to-end IT Risk Assessments across Infrastructure, Applications, data security and IAM.
• Develop and maintain risk registers, risk heatmaps, and executive risk reporting.
• Support internal and external audits with risk documentation and remediation evidence.
• Conduct Supply Chain / Third-Party IT Risk Assessments and review vendor security responses.
• Lead and mentor the risk team; ensure timely delivery and quality of risk deliverables.
• Present risk findings to IT leadership and risk committees; guide policy development.

Job description

Ibex in Lahore seeks a senior Information Security professional to lead risk management across IT, cloud, and supplier ecosystems. You will coordinate IT security roadmaps and drive control implementation to protect IBEX Global assets.

Responsibilities include conducting risk assessments, overseeing third-party IT risk, and mentoring the security team while reporting to IT leadership.