Chief Information Security Officer

About the role

The National Database & Registration Authority (NADRA), under the Ministry of Interior and Narcotics Control, is seeking an experienced Chief Information Security Officer for Islamabad. Recruitment is under Regulations 9, 10 and 11 of the NADRA Employees (Service) Regulations, 2002.

The officer will steer information security and cyber security strategy in line with NADRA's vision, identify gaps and implement corrective measures. Responsibilities include:

• Planning and implementing data security frameworks and technology.

• Managing information governance, risk assessment and compliance frameworks.

• Developing and managing the Security Operation Centre and integrating its technology with organizational IT infrastructure.

• Developing IT forensic investigation frameworks and incident response mechanisms for a large organization.

• Operating cyber threat intelligence platforms and assessing their potential organizational impact.

• Guiding software and application vulnerability assessments and network penetration testing.

• Planning information security training and awareness activities.

• Collaborating with internal stakeholders, external partners and national and international regulatory bodies.

• Promoting continuous quality improvement through industry best practices and evidence-based policy changes.

Posts and vacancies

• Chief Information Security Officer

• Duty station: Islamabad

The selected candidate will undergo a six-month probation period, extendable subject to performance.

Eligibility

Applicants must hold a master's degree in Information Security, Information Technology, Computer Science, Software Engineering or an equivalent field from an institution recognized by the Higher Education Commission (HEC). Degrees must be attested by HEC. Candidates holding a Ph.D. or doctorate will receive preference, as will those with relevant information security audit certifications, particularly CISA or CISM.

At least 10 years of experience in senior information security operations and management positions is required. Candidates must understand national and international regulatory requirements, technological developments and international best practices. They should demonstrate strong communication, interpersonal and leadership skills, experience leading information security professionals, and the ability to analyze complex issues and make timely decisions. The role also requires the ability to represent NADRA at local and international information security and cyber security forums.

The maximum age is 55 years, including five years of general age relaxation. Female, minority, transgender and differently-abled candidates are encouraged to apply.

How to apply

Submit an online application through https://careers.nadra.gov.pk/ Only online applications will be accepted. The application guide is available in the portal's Downloads section.

Only shortlisted candidates will be called for interview. Employees of government or semi-government departments must provide a No Objection Certificate at the interview. Mobile phones, smart watches and other electronic gadgets are prohibited during the interview. No travel or daily allowance will be admissible.

Attested educational documents from HEC or the respective regulatory body must be provided at joining. The selected candidate must also provide medical fitness and character certificates.

Providing false information at any stage will result in disqualification. Management may withhold or cancel recruitment, or accept or reject any application at any stage without assigning a reason. If the selected candidate declines the offer, it may be extended to reserve candidates.

The recruiting office is the HR Directorate, National Database & Registration Authority, State Bank of Pakistan Building, Shahrah-e-Jamhuriat, Sector G-5/2, Islamabad.

Important dates

The deadline for submitting an online application is 11 November 2026.