Deputy Director (Governance, Risk Assessment & Compliance)
← Back to Jobs
Logo

Deputy Director (Governance, Risk Assessment & Compliance)

National Database and Registration Authority (NADRA) - Website
City: Lahore District: Lahore Province: Punjab Job Type: Full-Time Posted 8 days ago Apply Now

Job Description

Job Type: Contractual Age Limit: 44 Years 

Job Description

NADRA is seeking a qualified and experienced professional for the position of Deputy Director (Governance, Risk Assessment & Compliance) in the Lahore Region. The selected candidate will oversee information security governance, risk assessments, compliance audits, security policies, and risk mitigation strategies while ensuring compliance with recognized international security standards.

Eligibility Criteria

Education:

  • Four-year Bachelor's degree in Computer Science, Information Technology, Cyber Security, Information Security, Data Science, Artificial Intelligence, or an equivalent relevant field.

  • Degree must be from an HEC-recognized university.

  • Educational documents must be attested by HEC.

Experience:

  • Minimum 6–10 years of post-graduation professional experience.

  • At least 3 years of experience in Governance, Risk Management, and Compliance (GRC) roles.

  • Experience in compliance audits, information security, risk assessment, and security controls.

  • Experience with EPP/EDR solutions, incident response, and SOAR technology is required.

Preferred Certifications:

  • ISO 27001

  • CISM

  • CISA

  • CISSP

Key Responsibilities

  • Ensure compliance with ISO 27001, ISO 27701, ISO 22301, NIST, and CIS Controls.

  • Conduct compliance audits and support information security assessments.

  • Develop information security policies, SOPs, and operational instructions.

  • Design Responsible AI controls, including explainability, model risk management, bias detection, and privacy preservation.

  • Identify security threats, vulnerabilities, and risks and implement mitigation strategies.

  • Support incident response, incident reporting, and Security Operations Center (SOC) operations.

  • Work with Endpoint Protection Platform (EPP) and Endpoint Detection and Response (EDR) solutions.

  • Deliver information security training to technical and non-technical teams.

  • Lead teams and coordinate between senior management and operational staff.

  • Communicate security and compliance requirements effectively.

Skills Required

  • Information Security Governance and Compliance

  • Risk Assessment and Risk Management

  • Security Auditing and ISO Standards

  • Information Security Policy Development

  • Incident Response and SOAR

  • EPP/EDR Solutions

  • Responsible AI and Model Risk Management

  • Leadership and Team Management

  • Written and Verbal Communication

Terms and Conditions

  • The selected candidate will undergo a six-month probation period, which may be extended based on performance.

  • Only shortlisted candidates will be contacted for tests and interviews.

  • False information may result in disqualification.

  • Government and semi-government employees must provide an NOC at the interview.

  • The stated age limit already includes five years of general age relaxation.

  • Attested educational documents must be provided at the time of joining.

  • Medical fitness and character certificates are required.

  • Reserve candidates may be offered the position if the selected candidate declines.

  • No TA/DA will be provided for tests or interviews.

  • Mobile phones, smartwatches, and other electronic gadgets are not allowed during tests or interviews.

  • Female, minority, transgender, and differently-abled candidates are encouraged to apply.

  • Only online applications will be accepted.

  • Management reserves the right to cancel or withhold the recruitment process or reject applications at any stage.

How to Apply

Interested candidates should submit their applications online through the official NADRA Careers Portal.

🔎 Source: Official Careers Portal ⚠️ We only share verified job listings and are not the hiring authority.