Information Security Manager

Based in Karachi, this full-time role requires an experienced information security professional with over 8 years in the field. The successful candidate will be responsible for establishing and leading a comprehensive security program aimed at safeguarding critical assets such as source code, customer data, intellectual property, and sensitive financial and HR records. This position demands a proactive leader who can manage identity and access controls, data protection strategies, and incident response protocols while ensuring compliance with international security standards.

Key Responsibilities:
- Develop, implement, and lead Astera’s security program to protect vital organizational assets.
- Manage identity and access management (IAM) systems, data loss prevention (DLP) measures, and incident response activities.
- Ensure ongoing compliance with industry standards and regulations including ISO 27001, SOC 2, NIST Cybersecurity Framework (CSF), and GDPR.
- Provide leadership and mentorship to the Information Security (IS) team, fostering a culture of security awareness and continuous improvement.

Required Qualifications:
- Minimum of 8 years of experience in information security, with at least 3 years in a leadership role managing security programs or teams.
- Hands-on expertise in IAM, DLP, cloud and SaaS security, as well as conducting compliance audits.
- Professional certifications such as CISSP, ISO 27001 Lead Implementer, or CIPM are mandatory. Additionally, ITIL v4 certification is required to support IT service management practices.

This role offers a competitive compensation package, which will be determined based on the candidate’s experience and qualifications. The position is onsite in Karachi and provides an excellent opportunity for a seasoned security professional to make a significant impact on the company’s security posture.