A Governance, Risk, and Compliance (GRC) Officer ensures an organization adheres to legal standards, internal policies, and risk management protocols. They develop and maintain compliance programs, conduct audits, reviews and identify potential risks. Collaborating with various departments, the GRC Officer provides guidance on compliance matters and promotes a culture of ethical behavior.
Work with Executive GRC to build on an existing information security program and ongoing security projects that address information security risks and compliance requirements. Providing overview of risks and threats in the enterprise environment to senior management. Assistance in information security policy and frameworks establishment & Implementation. Ensuring Information classification and related controls for protection of classified information Manage periodic review of Identity & Access Management of critical business applications. Reviewing VPN access requests and creation of VPN Ids and periodically conduct VPN Access review of all users. Performing log review of super user’s activities of critical applications. Manage and coordinate operational components of security incident management, including detection response and reporting by ensuring effective monitoring of threat intelligence. Provide Information security communication, awareness and training MMBL Staff & Customers through SMS, Social media, Website etc. Stay abreast of regulatory changes including cybersecurity developments Work with auditors to keep audit focus in scope and trying to achieve Good audit ratings. Ensuring the compliance of internal and external audit observations. Recommend and coordinate the implementation of technical controls to support and enforce defined Information security policies procedures. Monitor and report on compliance with security policies, as well as the enforcement of policies across the bank. Ensure to conduct Business Impact Assessment (BIA) to determine and evaluate potential effects of an interruption to critical business operations as a result of a disaster, accident or emergency. Assist Head Information Security to meet organization's digitalization objectives.
Hold a Bachelor’s degree in Information Technology, Computer Science or Information Security from a reputable Institution, however MS will be preferable. Fresh or 1 year of experience, working in IT or IS department in Banking industry will be a plus.
Job Locations:
Head Office
About MMBL:
Mobilink Microfinance Bank Ltd. is providing banking services to over 42 million registered users including 16+ million monthly active customers across Pakistan. With a hybrid model that combines traditional microfinance with mobile/digital banking technologies, the bank now operates with over 100 branches and 200,000 branchless banking agents and provides a USSD (GSM) based digital channel offering savings, micro enterprise (MSME) loans, small housing loans, remittances, collection (utility bills and loan installments), mobile wallets, insurance, G2P, B2B & B2P payments; thus, playing a leading role in the promotion of financial inclusion.
MMBL is committed to fostering a positive and productive workplace, and our core values reflect this focus. These values include promoting innovation and entrepreneurship, encouraging teamwork and collaboration, and prioritizing a customer-centric approach in all aspects of our business.
Why Join MMBL ?
This is an opportunity for someone who is passionate about making a difference and playing a key role in driving transformative change. Our team is committed to empowering millions with the tools necessary to succeed in the digital age, and we're looking for a talented individual to join us in this endeavor.