About this role
Job Description: ------------------- Essential ---------- - Four years Bachelor’s degree in Software Engineering/Computer Engineering/ Computer Science/ Information/Cyber Security or other relevant field from a reputed university (local or foreign) duly recognized by HEC. (Minimum 3.5 CGPA/ 75% Marks for annual system) Required Experience: ----------------------- - Minimum 05 years post-qualification experience, with at least 2 years in Governance, Risk Management and Compliance roles in private/government/telecom/banking sector. - A minimum of one relevant cybersecurity certification is required (e.g., CGRC, CISA, ECSA, or equivalent). Preference will be given to the candidates having the following: - Master’s degree in Information/Cyber Security or other relevant field from a reputed university (local or foreign) duly recognized by HEC. - Valid registration from Pakistan Engineering Council (PEC) or NCEAC accredited batches (registration card required). - Hands-on experience in conducting cyber security assessments, audits including VAPT of Applications, Web, Network, Systems and Infrastructure. - Understanding of security frameworks, such as ISO 27001, NIST and CIS Controls. - Knowledge of information security principles, practices, & technologies, including understanding of threat landscapes, vulnerabilities, and attack vectors. - Proficient in risk assessment, including identification, analysis, and mitigation. Experienced in creating information security policies and detailed SOPs for effective implementation and compliance. - Experience of Incident response cycle, incident reports generation and usage of SOAR & SIEM to support SOC operations. - Deployment of EPP and EDR solutions on systems and devices. Knowledge of information security principles, practices, & technologies, including understanding of threat landscapes, vulnerabilities, and attack vectors - Proficient in risk assessment, including identification, analysis, and mitigation. Experienced in creating information security policies and detailed SOPs for effective implementation and compliance. - Experience of Incident response cycle, incident reports generation and usage of SOAR & SIEM to support SOC operations. - Deployment of EPP and EDR solutions on systems and devices.