Senior Security Architecture & Assurance Lead

Habib Bank AG Zurich; Karachi Division; On-site; PKR 6,000,000 - 12,000,000; Full time

Job summary

Habib Bank AG Zurich seeks a Manager, Security Architecture & Assurance to lead the security architecture review and assurance function across technology projects, platforms, and strategic initiatives. You will ensure risks are addressed early in the solution lifecycle and align investments with security policies and regulatory obligations.

You will manage end-to-end security reviews for cloud, applications, infrastructure, data and third-party solutions, advising stakeholders and mentoring a

Qualifications

• 10+ years of information security, architecture, or cyber security experience.
• 5+ years in security architecture, assurance, or technology risk leadership.
• Experience managing security reviews for large-scale projects.
• Hands-on cloud security across AWS, Azure, and GCP.
• Strong understanding of AI, network, data, identity, and application security.

Responsibilities

• Lead security architecture reviews for projects and initiatives.
• Establish and maintain security standards, reference architectures, and secure design principles.
• Ensure security requirements are integrated into solution designs from inception to implementation.
• Provide formal security approval and sign-off for projects meeting required security standards.
• Oversee security risk assessments across cloud, data centre, network, application, and digital environments.
• Review and challenge technology designs to identify security risks, vulnerabilities, and control gaps.
• Define team objectives, performance measures, and development plans.

Skills

Security architecture

Cloud security

Risk management

Leadership

AI security

Tools

AWS

Azure

GCP

Job description

Habib Bank AG Zurich seeks a Manager, Security Architecture & Assurance to lead the security architecture review and assurance function across technology projects, platforms, and strategic initiatives. You will ensure risks are addressed early in the solution lifecycle and align investments with security policies and regulatory obligations.

You will manage end-to-end security reviews for cloud, applications, infrastructure, data and third-party solutions, advising stakeholders and mentoring a