Deputy Director (Governance, Risk Assessment & Compliance) - Lahore Region (Contractual)

About This Job

The National Database and Registration Authority (NADRA) has opened a contractual vacancy for Deputy Director (Governance, Risk Assessment & Compliance) for its Lahore Region, with the job based in Lahore. The advertisement does not mention the number of seats. This is a senior information security governance role in which the selected officer will lead compliance with ISO 27001, ISO 27701, ISO 22301, NIST and CIS Controls, support security assessments, write information security policies, SOPs and instructions, and develop controls for responsible AI, explainability, model risk management, bias detection and privacy preservation. The role also involves applying knowledge of threat landscapes, vulnerabilities and attack vectors to risk management, running risk assessment and mitigation, handling the incident response cycle and incident reporting with SOAR technology in support of SOC operations, working with EPP/EDR solutions, and delivering information security training to both technical and non-technical audiences.

Candidates need a four-year Bachelor's degree in computer science, information technology, cyber security, information security, data science or artificial intelligence, or an equivalent related degree from an HEC-recognised university, attested by HEC. The advertisement asks for a minimum of six to ten years of post-graduation experience, of which at least three years must be in governance, risk management and compliance roles, along with the ability to conduct independent compliance audits against ISO standards and the organisation's information security policies. Certifications such as ISO 27001, CISM, CISA and CISSP will be preferred. NADRA also wants someone who can work independently, lead teams, act as a link between top management and team members, and communicate security and compliance matters clearly in writing and speech to technical staff and senior management. The maximum age limit is 44 years, with a five-year general relaxation already included in that limit, and there is no stated gender or domicile restriction. Females, minorities, transgender persons and differently-abled candidates are encouraged to apply.

The application process is online only through the NADRA careers portal at careers.nadra.gov.pk, and the last date to apply is 25 October 2026. Applicants must first set up and biometrically verify a PAKID account on the mobile app, then sign in to the careers portal using their citizen number as the login ID and apply for the vacancy, with an application guide available in the portal's Downloads section. Shortlisted candidates will be called for test and interview, and serving government or semi-government employees must present a No Objection Certificate at the interview. The selected candidate will undergo a six-month probation period, extendable subject to performance, and must provide medical fitness and character certificates and HEC-attested documents at the time of joining. No TA/DA is admissible, electronic gadgets are not allowed during the test or interview, and the offer may go to reserve candidates if declined. No application fee is mentioned. GRC and information security professionals in Lahore should apply before the deadline.

Job Information

Commission / Board

NADRA

Place of posting

Lahore

City

Lahore

Postal Code

54000

Domicile

All Punjab Basis

Age (Male)

18–44 years

Age (Female)

18–44 years

Age note

5 years' general age relaxation is already included in the stated maximum age limit.

Salary / BPS

Contract basis - Salary as per contract terms and experience

Advt. date

11 October 2026

Last date

25 October 2026

Qualification Required

• Qualification: Bachelors (4 Years) in Computer Science/Information Technology/Cyber Security/Information Security/Data Science/Artificial Intelligence or equivalent in a related field from an HEC recognized university (Degrees must be attested by HEC)
• Experience: Minimum 6 to 10 years post-graduation experience, with at least 3 years in Governance, Risk Management, and Compliance roles. Ability to conduct independent compliance audits as per ISO Standards and organization's Information Security policies. Certification in ISO-27001, CISM, CISA and CISSP will be preferred.

Test / Selection Process

Test/Interview (shortlisted candidates only)

Important Dates

1. Advertisement Published11 October 2026
2. Last Date to Apply25 October 2026

How to Apply

1. Create your account on the PAKID Mobile App.
2. Verify your PAKID account through Biometric Verification.
3. Sign in on the NADRA Careers Portal (https://careers.nadra.gov.pk) with your PAKID credentials; your Citizen Number is your Login ID.
4. Open the vacancy "Deputy Director (Governance, Risk Assessment & Compliance) - Lahore Region (Contractual)" and apply using your PAKID verified account before 25 October 2026; only online applications will be accepted.
5. Employees serving in Government/Semi-Government departments must provide a No Objection Certificate (NOC) at the time of interview.

Additional Details

Probation Period

6 months, extendable subject to performance

Terms And Conditions

Selected candidate will undergo a 6 months' probation period, extendable subject to performance.,Management reserves the right to withhold/cancel the recruitment process, and accept/reject any application at any stage without assigning any reason.,Only shortlisted candidates will be called for test/interview.,Candidate shall be disqualified if false information is provided at any stage.,Employees serving in Government/Semi-Government departments must provide a No Objection Certificate (NOC) at the time of interview.,5 years general age relaxation is already included in above age limit.,Attested educational documents from Higher Education Commission (HEC)/respective regulatory body must be provided at the time of joining.,Selected candidate shall provide Medical Fitness and Character Certificates.,In the event the selected candidate(s) declines the job offer, the offer may be extended to the reserve candidates.,No TA/DA will be admissible.,Electronic gadgets such as mobile phone, smart watch etc. will not be allowed during test/interview.,Females, Minority, Transgenders and Differently-abled candidates are encouraged to apply.,The deadline for submission of application is 25th October, 2026 and only online applications will be accepted. Application guide can be viewed under the Downloads section.,For further details and to apply, please visit https://careers.nadra.gov.pk/ or scan the QR Code below.

Equal Opportunity Note

Females, Minority, Transgenders and Differently-abled candidates are encouraged to apply.

Responsibilities Skills And Competencies

Lead compliance with ISO 27001, ISO 27701, ISO 22301, NIST and CIS Controls.,Stay updated with security best practices and technologies while supporting security assessments and compliance.,Proficiency in Information Security Policy formulation, writing of SOP's and instructions.,Develop controls for Responsible AI, Explainability, Model Risk Management, Bias Detection, Privacy Preservation.,Apply knowledge of information security principles, threat landscapes, vulnerabilities, and attack vectors to support effective risk management and security controls.,Proficiency in risk assessment methodologies, risk identification, risk analysis, and risk mitigation strategies.,Experience of incident response cycle, incident reports generation and usage of SOAR technology to support SOC operations.,Have experience of working with EPP/EDR solutions.,Have experience of delivering information security training to audiences from diverse technical and non-technical backgrounds.,Works independently, lead the teams, and acts as a liaison between top management and team members.,Strong written and verbal communication skills for conveying security and compliance information to technical teams and senior management.

Share This Job

Know someone eligible for this post? Share it with them.