Manager Information Security

01 Post · Rawalpindi · Full Time

Key Responsibilities

• Develop, implement and maintain the organization’s information security strategy, policies and governance framework.
• Lead security operations including threat monitoring, incident response, vulnerability management and continuous security monitoring using SIEM, EDR and XDR platforms.
• Design, deploy and manage the security monitoring and observability stack for real-time visibility into systems, networks and security events.
• Oversee network and perimeter security, VPN infrastructure and secure remote access controls.
• Manage and secure virtualization and infrastructure environments, ensuring hardening, patching and compliance of system and network assets.
• Coordinate with internal and external teams (SOC, CERT, CSIRT, network and systems teams) for proactive and reactive security measures.
• Ensure compliance with regulatory and certification standards (ISO 27001, NIST, GDPR and others) and support audit readiness.
• Conduct risk assessments, security audits and penetration testing coordination, and drive remediation plans across systems and networks.
• Raise cybersecurity awareness and lead training initiatives across departments, with focus on operational security practices.
• Provide regular reporting and dashboards on security posture, incidents, monitoring metrics and risk status to senior management.

Requirements & Qualifications

• Qualification: BS in Cyber Security, BS Information Technology or MS Information Security. Preference will be given to MS degree holders
• Experience: Minimum 4 years of experience in information security
• Expertise: Proven expertise in risk assessment, incident response and security architecture
• Compliance: Experience managing compliance with ISO 27001, NIST, GDPR and other regulatory standards
• Background: Experience working with SOC, CERT and CSIRT teams
• Age: Maximum 55 years

Skills & Competencies

• Deep understanding of security frameworks, tools and methodologies (for example NIST and CIS Controls)
• Proficiency with SIEM, IDS/IPS, endpoint protection and vulnerability assessment tools
• Excellent communication, leadership and crisis management skills
• Strong knowledge of network security, cloud security and data protection
• Experience in conducting internal audits and managing third-party assessments
• Ability to lead incident response and manage cyber crises effectively
• Strategic mindset with strong analytical and reporting skills

Apply: NLC careers portal