Head of Information Security & Privacy

We are looking for a Head of Information Security & Privacy to build the security control environment required for licensing and institutional trust. This is not a "policy-only" role. You will implement practical controls, harden infrastructure, and make audits painless.

REQ_XX
Security Program Ownership: policies, asset inventory, access controls, key management, incident response.
REQ_XX
Audit Readiness: drive ISO 27001-aligned controls, evidence collection, and continuous compliance.
REQ_XX
Infrastructure Security: Kubernetes hardening, secrets management, network segmentation, logging, and alerting.
REQ_XX
Data Governance: PII handling, encryption, retention, and deletion workflows with engineering.
REQ_XX
Vulnerability Management: scans, patching SLAs, dependency hygiene, and remediation tracking.
REQ_XX
Security-by-Design: enforce secure SDLC, threat modeling, and release gates.

REQ_XX
Experience: 7+ Years Experience in security engineering/GRC within fintech, banking, or high-compliance environments.
REQ_XX
Hands-on Infra Skills: Kubernetes, IAM, secrets, TLS, logging, and incident response.
REQ_XX
Audit Execution Experience: has run audits and built evidence systems that survive scrutiny.
REQ_XX
Strong Judgment: can balance speed with non-negotiable controls.
REQ_XX
Clear Communicator: writes policies people actually follow.

REQ_XX
Salary: Market-competitive (PKR or USD pegged).
BEN_XX
Equity: Early-stage equity.
REQ_XX
Health: Comprehensive medical coverage.
REQ_XX
Perks: High-spec equipment and conference/training budget.