• Department: Information Security
• Grade: SVP
• Job Type: Permanent
• Total Positions: 1

Mobilink Microfinance Bank Ltd. is looking for an experienced and strategic professional for the position of Head of IS Governance in the Information Security department. The role is focused on strengthening enterprise cybersecurity governance, regulatory compliance, risk management, audit coordination, and information security assurance across the organization.

This opportunity is ideal for cybersecurity leaders passionate about governance, compliance, and driving secure digital transformation in the banking sector.

Key Responsibilities

Governance & Security Leadership

• Lead the bank’s Information Security Governance function.
• Develop and implement enterprise-wide cybersecurity governance frameworks, policies, standards, and procedures.
• Advise senior management on cyber risks, governance improvements, and regulatory obligations.
• Conduct cybersecurity awareness sessions for employees and stakeholders.
• Mentor and develop Governance, Risk & Compliance (GRC) teams.
• Oversee Identity & Access Management (IAM) governance activities.

Risk Management & Compliance

• Establish cybersecurity risk assessment and treatment processes.
• Identify and report security risks, vulnerabilities, and compliance gaps.
• Ensure compliance with SBP regulations and international security standards.
• Align controls with ISO 27001, PCI DSS, NIST, and related frameworks.
• Oversee third-party and vendor security risk assessments.

Policy & Control Management

• Develop and maintain security policies, standards, and procedures.
• Ensure periodic review and updates of governance documentation.
• Monitor implementation and effectiveness of security controls.
• Promote enterprise-wide security awareness and policy compliance.

Audit & Regulatory Coordination

• Lead internal and external security audits and regulatory inspections.
• Coordinate with Audit, Compliance, Legal, Risk, and business teams.
• Ensure timely closure of audit observations and corrective actions.
• Maintain compliance evidence repositories and governance dashboards.
• Drive enterprise-wide cybersecurity awareness and compliance programs.

Eligibility Criteria

Education

• Bachelor’s or Master’s degree in Information Security, Computer Science, or a related field.

Preferred Certifications

• CISM
• CISA
• CISSP
• ISO 27001 Lead Implementer / Lead Auditor
• CRISC (Preferred)

Experience Required

• 10–12 years of overall cybersecurity experience.
• Strong expertise in:
  • Identity & Access Management (IAM)
  • Privileged Access Management (PAM)
  • Segregation of Duties (SoD)
  • Role-Based Access Control (RBAC)
  • Identity Lifecycle Management
• Experience leading enterprise governance, compliance, audit remediation, and security transformation projects.

Technical & Professional Skills

• Information Security Governance Frameworks
• ISO 27001, PCI DSS, and NIST Frameworks
• Regulatory Compliance & Audit Coordination
• Third-Party Risk Management
• Security Awareness & Governance Reporting
• Strategic leadership and mentoring capabilities
• Strong business and risk management understanding

About MMBL

Mobilink Microfinance Bank Ltd. serves over 48 million registered users across Pakistan through digital and branchless banking solutions. The bank operates with 114+ branches and over 270,000 branchless banking agents, promoting financial inclusion through innovative banking technologies and customer-centric services.

MMBL promotes a workplace culture focused on:

• Innovation & entrepreneurship
• Teamwork & collaboration
• Customer-centric excellence
• Digital transformation

Why Join MMBL?

This role offers the opportunity to:

• Lead enterprise cybersecurity governance initiatives
• Work on large-scale digital banking security operations
• Drive regulatory compliance and governance transformation
• Contribute to Pakistan’s growing digital financial ecosystem
• Mentor and lead high-performing cybersecurity teams

🔎 Source: Official Careers Portal
⚠️ We only share verified job listings and are not the hiring authority.