Unit Head - Information Security & SaaS (AVP / VP) - TJ / 1865751

"The Nation's Bank", National Bank of Pakistan aims to support the financial well-being of the Nation along with enabling sustainable growth and inclusive development through its wide local and international network of branches. Being one of the leading and largest banks of Pakistan, National Bank of Pakistan is contributing significantly towards socioeconomic growth in the country with an objective to transform the institution into a future-fit, agile and sustainable Bank.

In line with our strategy, the Bank is looking for talented, dedicated and experienced professional(s) for the following position in the area of Digital Banking .

The individuals who fulfill the below basic-eligibility criteria may apply for the following position:

Position / Job Title : Unit Head Information Security & SaaS (AVP / VP)

Reporting to:

Wing Head Digital Solution Governance & Regulatory Compliance

Educational / Professional Qualification:

• Minimum Graduation or equivalent from a local or international university / college /
  Institute recognized by the HEC of Pakistan
• Candidates having a Master's degree in Business Administration and / or Computer Science and / or Information Technology and / or Information Security and / or relevant certification will be preferred

Experience:

• Minimum 06 years of experience in Digital Product Development and / or InformationSecurity and / or Cyber Security and / or Technology Governance and / or Digital BankingTechnology implementation and / or SaaS Platforms Management, or related domains,preferably within banking and / or financial services and / or fintech and / or regulatedenvironments
• Out of the total experience, at least 01 year in a supervisory role managing Digital ProductDevelopment and / or Information Security and / or Cloud Security and / or SaaS Security,and / or Digital Platform Risk

Other Skills / Expertise / Knowledge Required:

• Excellent communication skill
• In-depth analytical and problem-solving skills
• Adaptability to evolving project need
• Tech Savvy, including proficient in MS Office and related software
• Strong understanding of digital banking architecture, APIs, mobile & internet banking
  security controls, and customer data protection mechanisms
• Experience in risk assessment and / or control design and / or security governance fordigital channels and third-party integrations
• Sound knowledge of data classification, encryption standards, Data Loss Prevention (DLP),and secure data lifecycle management

Outline of Main Duties / Responsibilities:

• To develop and execute Information Security and SaaS security strategy in alignment withthe Banks digital banking, cloud adoption, and digital transformation roadmap
• To lead Information Security assessments covering cloud platforms, SaaS solutions, digitalbanking systems, and third-party integrations, including security governance, controlimplementation, and continuous monitoring
• To collaborate closely with Technology partners, Information Security, Risk Management,Compliance, and business stakeholders to ensure secure solution design, regulatorycompliance, and alignment with SBP and other applicable security standards
• To drive security-by-design practices across digital initiatives, ensuring secure architecture,secure SDLC integration, and proactive risk mitigation for digital channels, APIs, and SaaSplatforms
• To oversee security governance of SaaS and third-party platforms, including security duediligence, risk assessments, vendor security reviews, contract / security clause evaluation,and ongoing compliance monitoring
• To plan and integrate Information Security and SaaS security in project management byleveraging Agile / DevSecOps approaches to integrate security into development anddeployment lifecycles
• To develop and manage budgets, forecasts, and financial plans related to security tools,SaaS security controls, monitoring solutions, and risk mitigation initiatives as needed fromtime to time
• To monitor and analyze security performance metrics, including vulnerabilities, incidents,risk ratings, control effectiveness, audit findings, and compliance status
• To ensure smooth day-to-day operations of security controls and monitoring mechanisms,including cloud security controls, data protection mechanisms, vulnerability management,and incident response coordination
• To lead cyber risk assessments for digital banking channels, mobile / internet banking
  platforms, APIs, and cloud-hosted systems. Ensure customer data protection, encryptionpractices, and secure data lifecycle management
• To act as the primary liaison for internal audit, external auditors, regulators, and
  technology vendors on matters related to information security, SaaS risk, and cloud
  security compliance
• To establish and maintain security policies, standards, SOPs, and guidelines related tocloud usage, SaaS adoption, data security, access management, and secure development
• To drive security awareness and advisory support for technology and business teams toembed a strong security culture and ensure informed risk-based decision-making
• To prepare regular security dashboards, risk reports, and strategic updates for seniormanagement and relevant committees. Present key risks, incidents, remediation progress,and security posture improvements
• To perform any other assignments as assigned by the supervisor(s)

Place of Posting:

Karachi

Assessment Interview(s)

Only shortlisted candidates strictly meeting the above-mentioned basic eligibility criteriawill be invited for panel interview(s).

Employment Type:

The employment will be on contractual basis for three years which may be renewed ondiscretion of the Management. Selected candidates will be offered compensationpackage and other benefits as per Banks Policy / rules.

Apply within 10 working days from the date of this job posting.

Applications received after due date will not be considered in any case. No TA / DA will be admissible for interview.

National Bank of Pakistan is an equal opportunity employer and welcomes applications from all qualified individuals, regardless of gender, religion, or disability.