Pakistan International Airlines (PIA) is seeking a seasoned cybersecurity professional to join as General Manager Cybersecurity & Technology Risk (CISO) based in Islamabad. Reporting directly to the Chief Information Officer (CIO), this leadership role is pivotal in protecting the airline’s digital infrastructure, critical systems, and sensitive data. The successful candidate will be responsible for shaping and executing the enterprise-wide cybersecurity strategy, managing technology risks, ensuring governance and regulatory compliance, and enhancing the overall security posture and resilience of the airline’s operations.
Key Responsibilities
- Lead the development and implementation of the enterprise cybersecurity strategy, security architecture, and cybersecurity roadmap.
- Oversee security operations including threat monitoring, incident response, and vulnerability management in collaboration with managed security service providers.
- Maintain and update an enterprise-wide technology risk register, develop risk treatment plans, and provide governance reporting to senior management.
- Direct technology security policies, ensure compliance, coordinate audits, and manage regulatory engagements.
- Collaborate with Flight Safety and Engineering teams to protect the integrity of critical airworthiness and crew regulatory records.
- Manage identity and access management frameworks, privileged access controls, and technology disaster recovery plans.
- Evaluate vendor and delivery-partner security postures and lead the airline’s security certification initiatives.
- Provide independent assurance over technology delivery and platform teams, ensuring objective oversight of enterprise security and risk management.
Required Qualifications
- Minimum of 15 years’ experience in cybersecurity and technology risk, including senior leadership roles within large enterprises.
- A degree in a relevant discipline.
- Recognized cybersecurity leadership certification such as CISSP, CISM, or an equivalent professional credential.
- Proven experience in regulated or safety-critical industries; aviation or critical infrastructure sector experience is highly preferred.
- Demonstrated ability to direct managed security services and lead large-scale cybersecurity incident response efforts.
Preferred Qualifications and Benefits
- Additional qualifications in risk management or governance are advantageous.
- The position offers competitive remuneration, including a company car with maintenance and fuel, as well as air tickets in accordance with company policy.
- The role is based in Islamabad with travel requirements across the domestic and international network.
PIA is committed to a fair, transparent, and merit-based recruitment process. Only shortlisted candidates will be contacted. Submission of an application does not guarantee shortlisting or appointment. Interested candidates who meet the above criteria are encouraged to apply through the official application link before the closing date of 31st October 2026.