Introduction

"The Nation's Bank," National Bank of Pakistan (NBP), is committed to supporting the financial well-being of the nation while enabling sustainable growth and inclusive development. With its vast local and international network of branches, NBP stands as one of Pakistan's leading and largest banks. The bank plays a significant role in the socio-economic growth of the country, with a vision to transform into a future-fit, agile, and sustainable institution.

In line with this vision, NBP is looking to hire talented, dedicated, and experienced professionals for the position outlined below, located in Karachi, within the area of Risk Management.

Position: Cards Security Officer (OG-II / OG-I)

  • Location: Karachi, Pakistan
  • Department: IS Digital Channels
  • Reporting to: Department Head - IS Digital Channels

Eligibility Criteria

Educational/Professional Qualification

  • Minimum graduation or equivalent from a university/college/institute recognized by the Higher Education Commission (HEC).
  • Preference will be given to candidates holding a Bachelor’s or Master’s degree in Computer Science, Information Systems, Information Technology, Technology Engineering, or any relevant professional certification(s).

Experience

  • A minimum of 2 years of experience in Information Technology and/or Information Security, preferably within the domain of cards security.
  • Experience in implementing PCI-DSS (Payment Card Industry Data Security Standard) controls in a financial institution will be an added advantage.

Other Skills/Expertise/Knowledge Required

  • Strong understanding of Information Security functions and practices.
  • Excellent interpersonal skills with the ability to work in a team.
  • Ability to prioritize tasks and meet strict deadlines.
  • Familiarity with control assessments for business applications, processes, and IT solutions.

Outline of Main Duties/Responsibilities

  • Risk Assessment: Execute the risk assessment program for bank-wide digital applications based on information security standards and industry best practices.
  • Develop Security Requirements: Develop relevant information security requirements for each business and digitalization project. Share these requirements with stakeholders after approval from the Department Head.
  • Functional Specifications: Ensure that information security requirements are reflected in the Functional Specification Document for the concerned project and obtain sign-off from the Department Head.
  • Support in Implementation: Assist vendors and business stakeholders in the implementation of defined information security requirements. Perform manual testing during the UAT (User Acceptance Testing) phase.
  • Vulnerability Assessment: Conduct application and infrastructure Vulnerability Assessments and Penetration Testing.
  • Third-Party Testing: Ensure that well-known vulnerabilities are adequately covered in penetration testing conducted by third-party vendors.
  • Risk and Vulnerability Scanning: Execute annual risk assessments and quarterly vulnerability scans for the cardholder data environment.
  • Reporting: Develop detailed reports based on security assessment results for review and approval by the Department Head.
  • Compliance with PCI-DSS: Assist in the development of policies and procedures for the effective implementation of PCI-DSS within the bank.
  • Other Duties: Perform any other tasks as assigned by supervisors.

Assessment and Interview Process

  • Assessment Test: Only shortlisted candidates who strictly meet the above eligibility criteria will be invited for an assessment test and/or panel interview(s).
  • Employment Type: The position is on a contractual basis for a term of three years, with the possibility of renewal at the discretion of the management.
  • Compensation & Benefits: The selected candidates will be offered a competitive compensation package and other benefits as per the Bank's policies.

How to Apply

Interested candidates are invited to apply online through the bank's careers portal. Visit the website:
www.sidathyder.com.pk/careers

Application Deadline:
Candidates must submit their applications within 10 working days from the publication of this advertisement. Late submissions will not be considered.

Note:

No TA/DA will be admissible for the test/interview.

National Bank of Pakistan is an Equal Opportunity Employer and welcomes applications from all qualified individuals, regardless of gender, religion, or disability.

                            Advertisement Reference