Unit Head - IS Digital Channels (AVP / VP)

"The Nation's Bank", National Bank of Pakistan aims to support the financial well-being of the Nation along with enabling sustainable growth and inclusive development through its wide local and international network of branches. Being one of the leading and largest banks of Pakistan, National Bank of Pakistan is contributing significantly towards socioeconomic growth in the country with an objective to transform the institution into a future-fit, agile and sustainable Bank.

In line with our strategy, the Bank is looking for talented, dedicated and experienced professional(s) for the following position inthe area of Risk Management based in Karachi.

The individuals who fulfill the below basic-eligibility criteria may apply for the following position:

Position / Job Title:
Unit Head - IS Digital Channels (AVP / VP)

Reporting to:
Wing Head - IS Risk Management

Educational /Professional Qualification:

• Minimum Graduation in Computer Science and / or Computer Engineering and /
  or Cybersecurity and / or Information Technology from local or international
  university / college / institute recognized by the HEC of Pakistan
• Candidates having Masters or CRISC certifications will be preferred

Experience:

• Minimum 06 years of experience in Information Security Risk management
  pertaining to digital channels of banking
• Candidates having relevant working experience in banking and / or large scale
  organization will be preferred

Other Skills / Expertise / Knowledge Required:

• Good knowledge of Information Security function
• Well versed with SBP guidelines regarding Information Security
• Good interpersonal and people management skills
• Knowledge of performing control assessments of business applications, IT Audits
  processes and IT solutions

Outline of Main Duties / Responsibilities:

• To execute risk assessment program for bank wide digital applications based on
  Information Security standards and industry best practices
• To communicate identified Information Security risks and their impacts to the
  concerned Business Management, and / or IT
• To monitor and track all Information security issues, till closure, arising from self
  assessment, internal audit, external audit, SBP audit, risk and vulnerability
  assessment programs
• To monitor progress of investigations of security incidents and alerts
• To execute application and infrastructure Vulnerability Assessment program
• To assist Wing Head in revising and implementation of security policies and
  procedures
• To lead security reviews of mobile banking, internet banking, digital payments,
  APIs, portals, wallets and digital onboarding platforms
• To ensure security requirements are embedded throughout SDLC / Dev SecOps
  and change management processes
• To oversee applications, API, mobile, and cloud security assessments, including VA
  / PT, SAST, DAST, SCA and threat modeling
• To review controls for authentication, authorization, MFA, encryption, session
  management, API security, IAM and data protection
• To ensure digital platforms comply with OWASP, PCI DSS, ISO 27001, NIST, CIS,
  regulatory requirements and internal security standards
• To assess security risks associated with cloud services, fintechs, payment partners
  and third party integrations
• To perform third party risk management of digital suppliers
• To track security vulnerabilities, exceptions, risks and remediation; escalate critical
  or overdue issues
• To coordinate with SOC, Incident Response, Infrastructure, Fraud Risk
  Development and Cloud teams on digital-channel security issues
• To define security standards, procedures, KPIs / KRIs and management reporting
  for digital channel security
• To lead and develop the Digital Channels Security team and provide security
  guidance for new digital initiatives
• To oversee development of Baselines and checklist for information security
  reviews
• To devise mechanism for timely closure of observations raised during IS Reviews
• To perform any other assignment as assigned by the supervisor(s)

Place of Posting:

Karachi

Assessment Interview(s)

Only shortlisted candidates strictly meeting the above-mentioned basic eligibility criteriawill be invited for panel interview(s).

Employment Type:

The employment will be on contractual basis for three years which may be renewed ondiscretion of the Management. Selected candidates will be offered compensationpackage and other benefits as per Banks Policy / rules.

Apply within 10 working days from the date of this job posting.

Applications received after due date will not be considered in any case. No TA / DA will be admissible for interview.

National Bank of Pakistan is an equal opportunity employer and welcomes applications from all qualified individuals, regardless of gender, religion, or disability.