Opportunity Information
1
Federal Government Corporation/ Public Sector Company
Managerial/ Experienced Professional
On Site
Rawalpindi
The Role
Manager Information Security at National Logistics Corporation, Rawalpindi, to lead the organization's information security strategy, security operations and compliance.
•Develop, implement and maintain the organization's information security strategy, policies and governance framework •Lead security operations including threat monitoring, incident response, vulnerability management and continuous security monitoring using tools such as SIEM, EDR and XDR platforms •Design, deploy and manage security monitoring and observability stack to ensure real-time visibility into systems, networks and security events •Oversee network and perimeter security, VPN infrastructure and secure remote access controls •Manage and secure virtualization and infrastructure environments, ensuring hardening, patching and compliance of system and network assets •Coordinate with internal and external teams (SOC, CERT, CSIRT, network and systems teams) to deliver proactive and reactive security measures •Ensure compliance with relevant regulatory and certification standards (ISO 27001, NIST, GDPR and others) and support audit readiness •Conduct risk assessments, security audits and penetration testing coordination and drive remediation plans across systems and networks •Raise cybersecurity awareness and lead training initiatives across departments •Provide regular reporting and dashboards on security posture, incidents, monitoring metrics and risk status to senior management
Applicants General Eligibility & Requirements
4+ years
Up to 55 years
Education, Experience and Skills Requirements
- Bachelor 16 Years: Cyber Security, Information Technology
- Masters: Information Security
Minimum 4 years of experience in information security, with proven expertise in risk assessment, incident response and security architecture; experience managing compliance with ISO 27001, NIST, GDPR and other regulatory standards; background in working with SOC, CERT and CSIRT teams
Security Frameworks (NIST, CIS Controls), SIEM, IDS/ IPS, Endpoint Protection, Vulnerability Assessment, Network Security, Cloud Security, Data Protection, Internal Audits, Incident Response
National Logistics Corporation (NLC)