Information Security Governance Manager - TJ / 1873213

Our client MCB is looking for a Information Security Governance Manager in Lahore

MCB is seeking a skilled Manager Information Security Governance to lead and oversee the organization's information security policies and regulatory compliance programs. This role requires a professional with a solid understanding of information security governance, regulatory frameworks, and standards such as ISO/IEC 27001. The successful candidate will be responsible for developing and implementing security policies, ensuring alignment with regulatory requirements, and managing risk to protect the organizations information assets effectively. This position demands a minimum of four years of experience in the cybersecurity field and advanced qualifications in computer science, information technology, or cybersecurity. The Manager will directly supervise a team, providing strategic leadership and guidance to foster a secure and compliant information security environment. The ideal candidate will hold or be in the pursuit of certifications such as CISM, CISA, or CISSP and have working knowledge of the SBP Cybersecurity Framework alongside ISO 27001 standards. This leadership role involves continuous collaboration across departments to maintain robust cybersecurity governance structures and drive ongoing improvements in security posture.

Responsibilities

• Develop, implement, and maintain information security governance frameworks in alignment with industry standards and regulatory requirements.
• Oversee the creation and management of security policies, procedures, and standards to ensure comprehensive coverage and organizational compliance.
• Manage regulatory compliance activities to ensure the organization meets all applicable cybersecurity laws, standards, and guidelines.
• Lead and coordinate audits and assessments to evaluate the effectiveness of security controls and identify areas for improvement.
• Supervise and support a team of two cybersecurity professionals, guiding their professional development and ensuring high performance.
• Collaborate with IT, legal, and business stakeholders to embed security and compliance requirements into organizational processes.
• Monitor emerging security threats, regulatory changes, and industry trends to update governance practices proactively.
• Report regularly to senior management on information security governance status, risks, and regulatory compliance progress.
• Conduct risk assessments focused on information security governance and recommend mitigation strategies.
• Facilitate training and awareness programs to promote organizational understanding of security governance policies and compliance obligations.