Senior Security Compliance Lead – ISMS & Audits

Pakistan; Islamabad; On-site; PKR 1,200,000 - 2,400,000; Full time

Job summary

Public Procurement Regulatory Authority (PPRA) in Islamabad seeks a seasoned information security professional to coordinate ISMS, regulatory compliance and security governance. The role requires leading audits, risk assessments and policy development across the organization.

The ideal candidate has at least 5 years of post-qualification experience in information security controls, audit evidence management, and reporting to authorities.

Qualifications

• Bachelor's degree in Cyber Security or related ICT discipline from a recognized university.
• Preferred ISO/IEC 27001 Lead Implementer and/or Lead Auditor, CISA or equivalent.
• Minimum 5 years of relevant post-qualification experience in information security compliance, ISMS, risk assessment, audits, control assessments, policy development, audit-evidence management.

Responsibilities

• Coordinate implementation and monitoring of PISF, ISMS and applicable information security policies, standards and regulatory requirements.
• Maintain cybersecurity policies, procedures, compliance matrices, risk registers and risk-treatment records.
• Coordinate security control assessments, internal/external audits and maintenance of audit/compliance evidence.
• Track audit findings, compliance gaps and corrective actions through closure and report status to management.
• Monitor third-party and managed-service security compliance against approved contractual and security requirements.
• Prepare periodic cybersecurity compliance reports, dashboards and documentation for management and relevant authorities.
• Support security awareness, policy compliance and continual improvement of the information security management framework.
• Perform any other cybersecurity responsibility assigned by the Competent Authority.

Skills

Information security

ISMS

Audit management

Regulatory compliance

Education

Bachelor's degree in Cyber Security

BSc Information Systems

MSc Computer Science

BE Software Engineering

Job description

Public Procurement Regulatory Authority (PPRA) in Islamabad seeks a seasoned information security professional to coordinate ISMS, regulatory compliance and security governance. The role requires leading audits, risk assessments and policy development across the organization.

The ideal candidate has at least 5 years of post-qualification experience in information security controls, audit evidence management, and reporting to authorities.