Chief Information Security Officer (CISO) – SVP | Banking Sector

Fulcrum Pvt Ltd is seeking a highly experienced and strategic Chief Information Security Officer (CISO) for a prominent client in the banking sector based in Karachi, Pakistan. This senior leadership role, reporting directly to the Chief Information Officer (CIO), requires a cybersecurity expert capable of driving the bank’s information security strategy, enhancing cyber resilience, managing technology risks, and ensuring full compliance with regulatory standards and industry best practices. The ideal candidate will have a strong background in managing complex cybersecurity environments, particularly within banking or financial services, and will lead initiatives to protect the organization’s information assets and infrastructure.

Key Responsibilities

- Develop and implement the bank’s comprehensive information security strategy, policies, and governance framework to safeguard critical assets.
- Ensure strict compliance with the State Bank of Pakistan (SBP) regulations as well as international standards such as ISO 27001 and PCI DSS.
- Identify, assess, and mitigate cybersecurity threats, vulnerabilities, and technology risks across the enterprise.
- Oversee security architecture, including cloud security, identity and access management, data protection, and network security.
- Lead security operations, including threat monitoring, incident response, vulnerability management, and initiatives to enhance cyber resilience.
- Evaluate security risks associated with third-party vendors, cloud services, SaaS platforms, and other technology providers.
- Coordinate regulatory audits, penetration testing, security assessments, and ensure timely remediation of identified issues.
- Promote cybersecurity awareness throughout the organization and regularly present risk and control updates to senior management and relevant Board committees.

Required Qualifications

- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- Professional certifications such as CISSP, CISM, CISA, or CRISC are highly preferred.

Required Experience and Skills

- Minimum of 12 years of experience in IT risk management, cybersecurity, or information security.
- At least 4 to 5 years of managerial experience in a relevant cybersecurity or risk management role.
- Proven track record in managing cybersecurity risks and incidents within complex environments, preferably in the banking or financial services sector.
- Deep understanding of cybersecurity frameworks such as NIST and ISO 27001, along with applicable regulatory requirements.
- Expertise in security architecture, risk assessment, vulnerability management, cloud security, and data protection.
- Strong analytical abilities combined with excellent leadership, communication, and stakeholder management skills.

This role offers the opportunity to lead information security at a senior executive level within a leading financial institution, shaping the cybersecurity posture and resilience of the bank in a dynamic and challenging environment. Candidates with a strategic mindset and a proactive approach to cybersecurity risk management will find this position rewarding and impactful.