Deputy Director (Governance, Risk Assessment & Compliance)

About This Job

NADRA has advertised a Deputy Director (Governance, Risk Assessment & Compliance) position on a contractual basis at its Islamabad headquarters. The role is a senior information-security governance posting responsible for steering NADRA's compliance with major international frameworks — including ISO 27001, ISO 27701, ISO 22301, ISO 31000, several NIST standards, and PCI DSS/PKI controls — while also building out governance structures for the organization's growing use of artificial intelligence and machine learning systems. Specific duties include developing controls for responsible AI, explainability, model-risk management and bias detection, and managing emerging AI-related risks such as prompt injection, large-language-model data leakage, shadow AI usage, and AI supply-chain risk, alongside more traditional information-security audit and risk-assessment work.

Applicants must hold a four-year Bachelor's degree in Computer Science, Information Technology, Cyber Security, Information Security, Data Science, or Artificial Intelligence, or an equivalent field, from an HEC-recognized university, with degrees required to carry HEC attestation. Between six and ten years of post-graduation experience is required, including at least three years specifically in Governance, Risk Management and Compliance (GRC) roles, and candidates holding ISO 27001, CISM, CISA, or CISSP certification will be given preference. The maximum age limit is set at 44 years, a figure that already incorporates the standard five-year general age relaxation. The position is open to both men and women, with NADRA encouraging applications from female, minority, transgender, and differently-abled candidates, and government or semi-government employees must submit a No Objection Certificate at the interview stage.

Candidates should apply online through NADRA's official careers portal at careers.nadra.gov.pk; no application fee has been specified for this post. The selected candidate will undergo a six-month probationary period, extendable based on performance, and only shortlisted applicants will be invited for test and interview, where HEC-attested degrees, medical fitness, and character certificates will be required. The deadline to submit an online application is 20 September 2026, so qualified governance and compliance professionals are encouraged to apply before the closing date.

Job Information

Commission / Board

NADRA

Place of posting

Anywhere in Federal

City

Islamabad

Postal Code

44000

Domicile

All Punjab Basis

Age (Male)

18–44 years

Age (Female)

18–44 years

Age note

Maximum age 44 years; 5-year general age relaxation already included in this figure.

Salary / BPS

Contract basis - Salary as per contract terms and experience

Advt. date

6 September 2026

Last date

20 September 2026

Qualification Required

• Qualification: Bachelor's (4 years) in Computer Science, Information Technology, Cyber Security, Information Security, Data Science, or Artificial Intelligence, or equivalent from an HEC-recognized university; degrees must be HEC-attested.
• Experience: Minimum 6 to 10 years post-graduation experience, including at least 3 years in Governance, Risk Management and Compliance roles; ISO 27001, CISM, CISA or CISSP certification preferred.

Important Dates

Advertisement date

6 September 2026

How to Apply

1. Visit official website at www.nadra.gov.pk
2. Create account or login with your CNIC number
3. Fill online application form with CNIC, domicile and education details
4. Upload required documents and submit before last date — 20 September 2026

Additional Details

Terms Summary

6-month probation period, extendable subject to performance,5-year general age relaxation already included in the stated age limit,Government/semi-government employees must submit a No Objection Certificate (NOC) at interview,Only shortlisted candidates will be called for test/interview; no TA/DA admissible,Attested HEC/regulatory-body educational documents required at joining,Females, minorities, transgender and differently-abled candidates encouraged to apply,Electronic gadgets (mobile phones, smart watches) not allowed during test/interview

Responsibilities

Lead compliance with ISO 27001, ISO 27701, ISO 22301, ISO 31000, NIST CSF/RMF/AI RMF, PCI DSS and PKI/Web Trust controls,Establish AI governance frameworks for AI/ML/Gen AI systems, including responsible AI, explainability and model risk management,Manage AI-specific risks such as prompt injection, LLM data leakage, shadow AI and AI supply-chain risk,Conduct information security audits and formulate audit reports as per ISO requirements,Apply risk-assessment methodologies for risk identification, analysis and mitigation,Develop information-security policies, SOPs and instructions, and communicate findings to senior management and technical teams

Share This Job

Know someone eligible for this post? Share it with them.