Information Security Manager

TPS Worldwide is a reputable global provider of digital payments, banking solutions, and IT infrastructure, serving banks, microfinance institutions, fintech companies, XaaS providers, and non-banking entities across more than 30 markets. With over 30 years of industry experience and a client base exceeding 200 organizations worldwide, TPS delivers secure, scalable systems designed to simplify complex financial processes and enable real-time innovation. Their offerings include digital onboarding, instant payments, and intelligent financial services, empowering institutions to confidently navigate the evolving financial landscape. Headquartered in Pakistan, TPS operates extensively throughout the Middle East, South Asia, Africa, and Europe, with ongoing expansion into new regions.

The Information Security Manager role is a full-time, on-site position based in Karachi. This role involves designing, implementing, and maintaining comprehensive information security policies, standards, and procedures that comply with both organizational goals and regulatory requirements. The manager will be responsible for overseeing the Information Security Management System (ISMS), conducting risk assessments, managing security audits, and coordinating incident response efforts. Collaboration with IT, operations, and business teams is essential to ensure the security of networks, systems, and data through secure configurations and continuous monitoring. Additionally, the role includes leading security awareness programs, evaluating emerging security technologies, and preparing detailed reports for leadership on security posture, compliance status, and improvement initiatives.

Key Responsibilities
- Develop, implement, and maintain information security policies, standards, and procedures aligned with organizational and regulatory frameworks.
- Manage the Information Security Management System (ISMS), ensuring ongoing compliance and effectiveness.
- Conduct regular risk assessments and vulnerability analyses to identify and mitigate security threats.
- Oversee security audits and ensure timely resolution of findings.
- Coordinate incident response activities, including investigation, containment, and remediation of security incidents.
- Collaborate with cross-functional teams to secure networks, systems, and sensitive data through secure configurations and continuous monitoring.
- Lead security awareness and training initiatives to promote a culture of security across the organization.
- Evaluate and recommend new security technologies and tools to enhance the company’s security posture.
- Prepare and present comprehensive security reports to senior leadership, highlighting compliance, risks, and improvement plans.

Required Qualifications
- Proven expertise in Information Security Management and governance, including policy development and enforcement.
- Hands-on experience implementing and maintaining an Information Security Management System (ISMS), preferably aligned with ISO 27001 or equivalent standards.
- Strong knowledge of cybersecurity practices such as threat assessment, vulnerability management, and incident response.
- Solid understanding of network security principles, including firewalls, intrusion detection/prevention systems, VPNs, and secure network architecture.
- Bachelor’s degree in Computer Science, Information Security, or a related discipline.
- Experience working within financial services, fintech, or other regulated industries, with familiarity in compliance and data protection requirements.
- Excellent leadership skills with the ability to drive cross-functional security initiatives and communicate complex security concepts effectively to diverse stakeholders.
- Strong analytical, problem-solving, and documentation skills, with a focus on continuous improvement and secure-by-design methodologies.

Preferred Qualifications
- Advanced degree or professional certifications such as CISSP, CISM, or ISO 27001 Lead Implementer are highly desirable.

TPS Worldwide offers the opportunity to work in a dynamic, growth-oriented environment where innovation and security are prioritized. The role provides a platform to influence the security strategy of a global organization while collaborating with diverse teams across multiple regions.