Organization: National Bank of Pakistan (NBP)
Sector: Government / Banking
Location: Karachi, Pakistan
Employment Type: Full-time (Contractual – 3 Years, Extendable)
Application Deadline: As per NBP career portal
The National Bank of Pakistan (NBP), Pakistan’s largest public sector bank, is inviting applications from talented, experienced, and motivated professionals to support its Information Security Division. These roles aim to strengthen NBP’s cyber defense, digital risk management, and security operations. The bank is an equal opportunity employer and encourages applications from women, minorities, and differently-abled persons.
1. Department Head – Infrastructure Security Review (AVP / VP)
Location: Karachi
Reporting To: Chief Information Security Officer – Information Security Division
Educational / Professional Qualification
- Minimum 16 years of education from an HEC-recognized institution (local/foreign).
- Preferably in Computer Science / IT / Information Security / Telecom / Electrical / Electronics Engineering or related discipline.
- Preferred certifications: CISSP / CISM / CRISC / CEH or equivalent.
Experience
- At least 8 years of experience in Information Security.
- Minimum 3 years in a senior role managing security reviews in large-scale organizations (preferably in banking or finance).
Other Skills / Competencies Required
- Strong knowledge of:
- Information Security architecture
- Network and infrastructure security
- Risk management, threat identification, and vulnerability assessment
- Good understanding of:
- Security frameworks (NIST, ISO 27001, etc.)
- Firewalls, IDS/IPS, SIEM, NAC, VPNs, etc.
Job Responsibilities
- Lead infrastructure security reviews.
- Conduct risk assessments and define security requirements for new infrastructure.
- Recommend mitigation strategies and prepare reports.
- Develop and enforce infrastructure security policies and frameworks.
- Coordinate with internal teams and monitor ongoing infrastructure compliance.
- Stay updated with current trends in cyber threats and technologies.
2. Incident Team Manager (OG-I / AVP)
Location: Karachi
Reporting To: Department Head – Monitoring and Incident Management
Educational / Professional Qualification
- Minimum 16 years of education from an HEC-recognized institution.
- Preferably in Computer Science / IT / Cybersecurity / Telecom.
- Certifications preferred: GCIA / GCIH / CEH / CHFI / ECIH / similar.
Experience
- Minimum 6 years of experience in Information Security with at least 2 years in Incident Management.
- Experience in banking or financial institutions preferred.
Other Skills / Competencies Required
- Sound understanding of:
- Security operations
- Real-time monitoring
- Incident triage and investigation
- Hands-on experience with SIEM tools, forensic analysis tools, threat intel platforms.
Job Responsibilities
- Monitor security alerts and detect malicious activities.
- Perform incident triage, analysis, and response coordination.
- Lead investigations of security breaches and document findings.
- Prepare detailed incident reports for stakeholders and audit purposes.
- Conduct post-incident reviews and suggest improvements.
- Collaborate with relevant departments to ensure incident closure.
- Stay up to date with the latest cyber threats and attack vectors.
Assessment Test / Interview
- Shortlisted candidates will be invited for a written test and interview.
How to Apply
Interested applicants may visit the NBP careers page:
www.nbp.com.pk/careers
- Only online applications will be considered.
- Applications must be submitted within 10 days from the advertisement date.
- Only shortlisted candidates will be contacted.
- No TA/DA will be admissible for the test/interview.
