VP, Information Security & Risk Leadership

PMCL-JAZZ; Karachi Division; On-site; PKR 6,000,000 - 10,000,000; Full time

Job summary

TPL Insurance is seeking a VP-level Head of Information Security to lead risk management, governance, and security controls across networks, apps, and infrastructure in Karachi. You will drive ISO 27001 certification, policy design, and incident response, coordinating with developers and admins to remediate findings.

The role demands 10+ years for Information Security, strong certifications, and hands-on leadership in security architecture and operations.

Qualifications

• Bachelor's degree in computer science, information security, or related field.
• At least 10 years of experience in information security, technology governance, VAPT or IT Security.
• Certifications or training in CISM, CGEIT, ISO 27001 LI/LA, CEH, OSCP, CoBIT, NIST cyber security framework.
• Knowledgeable about information security management, IS governance, compliance principles, laws, rules and regulations, architecture, design, operations, controls, solutions, and service orchestration.
• Strong problem-solving and analytical skills, with the ability to work independently and effectively meet deadlines.
• Collaborative team player with the ability to investigate and resolve security incidents effectively.

Responsibilities

• Evaluates risks and develops security standards, procedures, and controls to manage risks.
• Improves security positioning through process improvement, policy, automation, and the continuous evolution of capabilities.
• Implements processes such as GRC (Governance Risk & Compliance) to automate and continuously monitor Information Security controls, exceptions, risk, testing. Develops reporting metrics, dashboards and evidence artifacts.
• Lead the end-to-end implementation and certification process for ISO 27001.
• Conduct regular risk assessments and treat identified information security risk, manage internal and external ISO 27001 audits, addressing findings and non-conformities.
• Develop, maintain security testing plans automate penetration and other security testing on networks, systems and applications.
• Assist with third-party IT vulnerability assessments and Penetration testing and also remediate the vulnerabilities with the communication to concern departments and their owners.
• Act as a source of direction, training, and guidance for less experienced staff.
• Documents and reports control failures and gaps to stakeholders.
• Provides remediation guidance and prepares management reports to track remediation activities.
• Consult with application developers, systems administrators, and management to demonstrate security testing results, explain the threat presented by the results, and consult on remediation.
• Deliver the annual penetration testing schedule and conducting awareness campaigns to ensure proper budgeting by business lines for annual tests.
• Performs other related duties as assigned

Skills

Information security

Risk management

GRC

Security governance

Education

Bachelor's degree in CS/Information Security

Tools

ISO 27001

Penetration testing

Job description

TPL Insurance is seeking a VP-level Head of Information Security to lead risk management, governance, and security controls across networks, apps, and infrastructure in Karachi. You will drive ISO 27001 certification, policy design, and incident response, coordinating with developers and admins to remediate findings.

The role demands 10+ years for Information Security, strong certifications, and hands-on leadership in security architecture and operations.