We’re Hiring!
MCB Islamic Bank is inviting applications for the position of “Unit Head IS Compliance / Governance & IT Security Awareness”.
Location : Lahore
Education : Bachelors or Master’s degree in Computer Science, Information Security or a related field.
Experience & Competencies
➡️ Minimum 5-8 years of progressive experience in Information Security Governance, Risk & Compliance with at least 2 years in a leadership or supervisory role within banking or financial institution.
➡️ Strong background in risk assessment methodologies, compliance reporting, and regulatory liaison.
➡️ Excellent leadership, analytical, and problem-solving skills, with the ability to engage with senior stakeholders, regulators, and auditors.
➡️ Effective communication and presentation skills, with the ability to translate complex technical and regulatory requirements into actionable insights.
➡️ Professional certifications such as CISM, CISSP, CRISC, or ISO 27001 Lead Implementer / Lead Auditor (required).
➡️ Demonstrated expertise in ISO 27001 ISMS implementation, PCI DSS compliance, and SBP regulatory frameworks related to information security and risk management.
Job role & Responsibilities
➡️ Lead the Information Security Governance, Risk & Compliance (GRC) unit to ensure effective implementation of the bank’s ISMS and regulatory compliance programs.
➡️ Develop, implement, and maintain cybersecurity policies, standards, and procedures aligned with ISO 27001, SBP IT Governance & Risk Management Framework, SBP Cybersecurity Framework, and PCI DSS.
➡️ Ensure continuous compliance with SBP regulatory requirements, PCI DSS controls, and other applicable security standards.
➡️ Maintain the Information Security Risk Register and prepare periodic risk dashboards and reports for the Department Head – IS GRC and CISO.
➡️ Lead incident post-analysis and ensure lessons learned are incorporated into governance and control enhancements.
➡️ Collaborate with IT, Risk, Compliance, and Business units to ensure alignment of GRC activities and enterprise-wide risk governance.
➡️ Supervise and mentor team members within the IS GRC unit, fostering a culture of accountability, compliance, and continuous improvement.
➡️ Engage with external stakeholders, including auditors, regulators, and business partners, to address compliance requirements and maintain positive relationships.
➡️ Developing and delivering cybersecurity training programs for employees to raise awareness about cybersecurity best practices and promote a culture of security within the organization.
➡️ Work with IT and security teams to ensure compliance with applicable information security standards and regulations, such as ISO 27001, NIST, GDPR, etc.