Senior Manager - Cyber Security Assurance

The Bank of Punjab is one of the fastest-growing banks in Pakistan with over 35+ years of profound existence. It operates through a network of over 900+ real-time online branches and ATMs across the country. The Bank has established a strong foundation while offering premium banking services with a major focus on unsurpassed value-added services for its customers through advanced solutions.

In line with the Bank’s progression strategy, we invite applications from experienced, dedicated, and performance-driven professionals for the following position in our Information Systems Audit Division (Internal Audit Group). This job profile offers an excellent opportunity for the right candidates desirous of building a long-term career in a dynamic organization:

Location: Lahore

Grade: Band-7 to Band-5

Job Summary / Major Responsibilities:

• Assist the Head of IS Audit in evaluating the risk of cybersecurity hygiene (Information security & allied applications), IS and IT applications, and prepare a risk-based IS audit plan along with an execution plan considering scope and budget.
• Manage the execution of engagements within budgetary targets for each engagement. Lead the team for the execution of significant engagements where necessary to evaluate the policy framework and their implementation in respective areas.
• Evaluate and assess the cybersecurity environment of the bank in line with regulators' policies/framework.
• Validate audit exceptions highlighted during internal/external/regulatory audits/reviews.
• Allocate resources according to the risk profile of the auditable entity/application. Manage overall performance of the engagement to ensure smooth completion. Monitor staffing needs and schedules to ensure optimal utilization of audit resources.
• Facilitate communication with management to enable discussions on audit engagements through conclusion meetings.
• Conduct information system & allied applications audits to assess independently and objectively the controls, reliability, and integrity of the bank’s IT environment. These assessments can help maintain and/or improve the efficiency and effectiveness of IT risk management, internal controls, and corporate governance.
• Maintain cordial and professional working relationships with internal customers at all times and discuss workable management action plans in response to audit findings with the Head of IS Audit.
• Ensure that engagements are carried out in a manner to provide consultancy services to internal clients where required to correct deficiencies noted during the IS audit, thus improving the system of internal controls, process workflows, procedures, risk management, and best corporate governance practices.
• Keep abreast of the latest developments/changes and enhance professional knowledge while adjusting constructively to the changing environment and emerging trends. Be alert for new developments and assess their significance/implications for audit procedures.
• Initiate new ideas and discuss with senior members/counterparts for their implementation/escalation.
• Provide training/guidance to reporting staff and internal clients if required, focusing on improvement in internal control systems & procedures, risk management, and best corporate governance practices.
• Ensure that the audit work has been adequately completed and all significant issues have been reported/escalated, and follow up for corrective actions.
• Prepare periodic reporting packages for outstanding significant deficiencies and substantive issues noted during IS audits for the CIA and the Board Audit Committee, with updates on management action plans.
• Review the engagement file to determine if the work is appropriately documented and reviewed according to the engagement plan. Ensure that the working paper file is adequately prepared for archiving.

Eligibility Criteria:

Qualification: Minimum Bachelor's or equivalent degree from an HEC recognized local/foreign university. (IT/CS/SE Graduates, CISA / CEH / ISO 27001 / CISM Certified individuals will be preferred)

Experience: Minimum 07 to 09 years of Banking/Non-Banking experience.

Age: Up to 55 years as of July 07, 2026.

Important Note:

a) Only shortlisted candidates shall be called for an interview. No TA/DA will be admissible.

b) The Bank of Punjab reserves the right to accept or reject any application(s) without assigning any reason(s) thereof.

c) The Bank is an equal-opportunity employer. Females, Differently Abled Persons (DAPs), and Transgender individuals are encouraged to apply.

d) The above position carries market-based competitive remuneration.

e) Individuals fulfilling the above-mentioned criteria are encouraged to apply online through BOP career portal bop.rozee.pk latest by July 7th, 2026.