• Define and implement the bank’s enterprise IT governance framework based on best practices (e.g., COBIT, ITIL, ISO 38500).
• Establish governance structures including policies, standards, and committees to drive alignment between IT and business goals.
• Lead the IT Steering Committee, Architecture Review Board, and Risk Working Groups.
• Drive enterprise-wide adoption of governance processes for IT decision-making, budgeting, and project prioritization.
• Identify, assess, monitor, and report on IT and cyber risks, including third-party/vendor risks.
• Oversee IT compliance with applicable banking regulations and frameworks (e.g., ISO 27001, SWIFT CSP, GDPR, local data privacy laws).
• Liaise with internal and external auditors, regulators, and assurance functions during IT audits and inspections.
• Ensure timely closure of audit findings, regulatory remediation actions, and ongoing controls testing.
• Maintain comprehensive documentation for IT policies, control evidence, and risk registers.
• Oversee the establishment and maintenance of a comprehensive and up-to-date IT asset inventory (hardware, software, licenses, and services).
• Ensure integration of asset inventory with risk, compliance, procurement, and cybersecurity monitoring functions.
• Implement processes to ensure regular reconciliation and lifecycle management of IT assets.
• Lead the drafting, review, approval, and publication process for all IT policies, procedures, and SOPs.
• Ensure alignment of documentation with regulatory requirements and internal control frameworks.
• Maintain an IT policy governance calendar to ensure timely reviews and updates.
• Establish version control, approval workflows, and stakeholder sign-off protocols for all governance documents.
• Define, track, and report IT governance KPIs, risk indicators (KRIs), and compliance metrics to senior management and Board-level committees.
• Develop executive dashboards and reports that provide visibility into IT
Certifications (Preferred/Required)
• COBIT
• CISA (Certified Information Systems Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• CGEIT (Certified in the Governance of Enterprise IT)
• ISO 27001 Lead Implementer or Auditor
• ITIL (for operational governance)
Skills & Competencies
• Strong knowledge of IT infrastructure, cybersecurity, systems development, and digital banking environments.
• Excellent understanding of global and local financial regulatory requirements.
• Exceptional leadership, communication, and stakeholder engagement skills.
• High analytical capability with strong attention to detail and risk-based thinking.
• Ability to manage complex cross-functional projects with competing priorities.
• Bachelor’s degree in Computer Science, Information Systems, Engineering, Risk Management, or related field.
• Master’s degree (MBA or MSc in Information Security / Risk) preferred.
• 12+ years of experience in IT governance, risk management, audit, or compliance within a banking or regulated financial institution.
• Proven leadership in implementing enterprise-wide IT GRC frameworks.
• Strong exposure to both technology operations and regulatory landscapes (e.g., Basel, SOX, GDPR, SWIFT, NIST).
Job Locations:
Head Office
About MMBL:
Mobilink Microfinance Bank Ltd. is providing banking services to over 42 million registered users including 16+ million monthly active customers across Pakistan. With a hybrid model that combines traditional microfinance with mobile/digital banking technologies, the bank now operates with over 100 branches and 200,000 branchless banking agents and provides a USSD (GSM) based digital channel offering savings, micro enterprise (MSME) loans, small housing loans, remittances, collection (utility bills and loan installments), mobile wallets, insurance, G2P, B2B & B2P payments; thus, playing a leading role in the promotion of financial inclusion.
MMBL is committed to fostering a positive and productive workplace, and our core values reflect this focus. These values include promoting innovation and entrepreneurship, encouraging teamwork and collaboration, and prioritizing a customer-centric approach in all aspects of our business.
Why Join MMBL ?
This is an opportunity for someone who is passionate about making a difference and playing a key role in driving transformative change. Our team is committed to empowering millions with the tools necessary to succeed in the digital age, and we're looking for a talented individual to join us in this endeavor.