National Bank of Pakistan Seeks Experienced Information Security Professionals

Further Details

National Bank of Pakistan is hiring for key positions within its Information Security division. These roles are crucial for maintaining the integrity and confidentiality of the bank's digital assets. The positions require a deep understanding of cybersecurity principles and practical experience in implementing security solutions. This is an excellent opportunity for professionals looking to advance their careers in the government banking sector. We are looking for candidates with a proven track record in areas such as GRC, Data Loss Prevention, and Infrastructure Security. The bank is dedicated to providing a challenging yet rewarding work environment, offering competitive compensation and professional development. Explore these government jobs in Pakistan and become part of a leading financial institution.

National Bank of Pakistan Career Opportunities

The National Bank of Pakistan is seeking highly motivated and experienced professionals for several critical roles within its Risk Management and IT departments. These positions are integral to the bank's ongoing commitment to enhancing its cybersecurity posture and supporting its strategic growth objectives. If you are looking for a challenging career in the government banking sector, these opportunities offer significant potential for professional development and contribution.

We are specifically recruiting for positions such as Unit Head - IS GRC International, Department Head - Data Loss Prevention Policy, Manager IS Strategy & Policies, and Manager Infrastructure Security. Additionally, vacancies are available for qualified candidates. These roles demand a strong foundation in information security principles, extensive experience, and relevant qualifications. The bank is an equal opportunity employer, encouraging applications from all qualified individuals.

Key Positions Available:

• Unit Head - IS GRC International (AVP / VP)
• Department Head - Data Loss Prevention Policy
• Manager IS Strategy & Policies (AVP)
• Manager Infrastructure Security (AVP)

Essential Requirements:

• Minimum Graduation in Computer Science, Computer Engineering, or Information Technology from a recognized institution.
• Master's degree or relevant professional certifications are preferred.
• Minimum 06 years of experience in Information Security, Risk Management, or related fields.
• Strong knowledge of international security frameworks, regulatory requirements, and data protection.
• Proven ability to manage complex security projects and lead teams.

Skills

• Strong knowledge of regulatory requirements and security standards
• Good understanding of information security governance, enterprise risk management, and technology risk
• Ability to work effectively as a team player
• Ability to work in a competitive environment
• Strong knowledge of enterprise-wide Data Loss Prevention and related programs
• Proficiency in ISO 27001, NIST, COBIT, PCI DSS, SWIFT CSP
• Good interpersonal skills
• Ability to prioritize and meet strict deadlines
• Understanding of Information Security function
• Awareness of risk frameworks and infrastructure security related policies
• Understanding of essential infrastructure security related security tools and techniques

Duties and Responsibilities:

• To lead and manage the Information Security Governance, Risk & Compliance (GRC) and Data Protection function for the Bank's international operations
• To develop, implement and maintain information security governance frameworks, policies, standards, procedures and guidelines in accordance with Bank's international operations
• To conduct and oversee information security compliance assessments relating to international initiatives
• To prepare and present governance dashboards, Risk Indicators (KRIs) and Key Performance Indicators (KPIs) to senior management and relevant governance committees
• To oversee continuous improvement initiatives, including DLP, Vulnerability Assessment, Penetration Testing, Infrastructure and Application Security controls across international branches and representative offices
• To coordinate international certifications and attestations (e.g., ISO / IEC 27001, SWIFT CSP, PCI DSS, where applicable)
• To oversee remediation of information security regulatory inspections, and compliance reviews across international branches
• To monitor third party and outsourcing operations, where applicable
• To lead awareness and training initiatives on information security, privacy and data protection requirements across international branches and representative offices
• To represent the Information Security Division in meetings with regulators, external auditors, international branches, business units, and other stakeholders on Bank's overall information security governance and control environment
• To perform any other assignment as assigned by the supervisor(s)
• To manage and continuously enhance the organization's Infrastructure Security Program, ensuring alignment with business objectives, cybersecurity strategy, regulatory requirements, and industry best practices
• To manage security architecture reviews for infrastructure projects and provide strategic guidance on secure design principles for servers, virtualization platforms, cloud services, storage systems, and enterprise network infrastructure
• To manage infrastructure security assessment activities, including Vulnerability Assessments (VA), configuration compliance reviews, penetration testing coordination, CIS benchmark assessments, operating system hardening and security validation of servers, cloud infrastructure, virtualization platforms and enterprise systems
• To prepare and maintain infrastructure security vulnerability MIS, track remediation activities, and ensure timely closure of identified security findings in accordance with organizational risk management requirements
• To prepare infrastructure security assessment reports, vulnerability dashboards, compliance reports and management summaries for periodic review by senior management
• To conduct financial, operational and maintain infrastructure security for all relevant policies, standards, procedures and security baselines for servers, operating systems, ATMs, virtualization platforms, cloud environments, storage and systems infrastructure
• To lead the implementation and enforcement of secure infrastructure hardening standards based on recognized benchmarks (e.g., CIS Benchmarks) across the bank's environment
• To coordinate with IT Infrastructure, Systems, Cloud, Database, System Administration and other technology teams to ensure security controls are effectively implemented and maintained across the infrastructure
• To ensure secure configuration, hardening, continuous monitoring and compliance of enterprise infrastructure, including Windows and Linux servers, databases, virtualization platforms, cloud workloads, storage systems and Active Directory
• To support internal and external audits by providing infrastructure security evidence, compliance documentation, remediation status, and technical guidance
• To perform any other assignment as assigned by the supervisor(s)

How to apply

Interested candidates who meet the basic eligibility criteria are invited to apply online. Please ensure you submit your application within the stipulated timeframe.

• Visit the Official Career Portal: Navigate to the National Bank of Pakistan's career website at https://nbp.rozeegpt.ai/
• Submit Online Application: Complete the online application form with accurate and up-to-date information.
• Application Deadline: Applications must be submitted online within 10 working days from the date of advertisement publication. The last date to apply is 05 June, 2024.
• Required Documents: While not explicitly mentioned for the initial online application, candidates are advised to have their updated CV, educational certificates, CNIC, and any relevant professional certifications ready.
• Interview Process: Only shortlisted candidates who strictly meet the above-mentioned basic eligibility criteria will be contacted for a panel interview.
• Important Note: Applications received after the due date will not be considered. No TA/DA will be admissible for the interview.
• Employment Basis: The employment will be on a contractual basis for three years, which may be renewed at the discretion of the Management. Selected candidates will be offered a compensation package and other benefits as per the Bank's Policy/rules.

Note: National Bank of Pakistan is an equal opportunity employer and welcomes applications from all qualified individuals, regardless of gender, religion, or disability.

Advertisement Source