GM Cybersecurity & Technology Risk (CISO)

Career Opportunity - General Manager Cybersecurity & Technology Risk (CISO)

Job title: General Manager Cybersecurity & Technology Risk (CISO)

Reports to: Chief Information Officer

Grade: General Manager

Location: Islamabad

Benefits: Company car, car maintenance, fuel, and air tickets in line with company policy

Job Summary

Protects the airline's systems, data and operations, and owns technology governance, risk and compliance. This role gives the CEO and the Board an independent view of technology risk, separate from the units that build and run the systems it assures. In an airline this includes the controls behind airworthiness and crew regulatory records: the role carries safety weight, not only security weight.

What you will do

• Define and maintain the security strategy and the security architecture for the enterprise, covering every system, network and site the airline operates.
• Direct security operations through the managed security service: continuous monitoring, incident detection and response, threat intelligence and vulnerability management across the estate.
• Take ownership of the cybersecurity roadmap and its delivery through the managed security service and delivery partners, prioritised by a clear assessment of the airline's security posture.
• Establish and own one airline wide technology risk register: identify and assess risks, agree treatment plans with the owning units, and report the risk position through the IT governance process. The role recommends risk acceptance and does not grant it.
• Own technology policy, compliance and audit liaison: set the policy framework, track compliance against it, and manage engagement with internal audit and the regulator through findings and closure.
• Own the technology controls that protect airworthiness records and crew regulatory records, working with Flight Safety and Engineering so record integrity withstands regulatory scrutiny.
• Own identity and access management across the enterprise, including privileged access and the joiner, mover and leaver controls operated with HR.
• Own technology disaster recovery: maintain recovery plans for critical systems and prove them through regular resilience exercises.
• Assure the security of vendors and delivery partners before and during their engagement, and own the airline's path to security certification.
• Run a regular security and risk review cadence, and account to the CIO and senior management for the enterprise security and risk position.
• Assure every delivery and platform unit independently: the role stays separate from the delivery it reviews, so its judgement is never compromised by delivery pressure.
• In the first six months: take ownership of the cybersecurity roadmap and begin delivery of its priority actions, and establish the airline wide technology risk register.

What we are looking for

• Fifteen or more years in cybersecurity and technology risk, with senior leadership of a security function in a large enterprise.
• A recognised security leadership certification such as CISSP or CISM, or equivalent standing.
• Experience in regulated or safety critical environments; aviation or critical infrastructure strongly preferred.
• Track record of directing managed security services and leading incident response at scale.
• Degree in a relevant field; a risk or governance qualification is preferred.

What we offer

• Senior leadership of a core function at a national flag carrier
• Market competitive remuneration along with company car, car maintenance and fuel
• Air tickets in line with company policy

PIA is committed to a fair, transparent and merit-based recruitment process. Only shortlisted candidates will be contacted. Submission of an application does not guarantee shortlisting or appointment.

Closing date: 1st November 2026.

Only shortlisted candidates will be contacted directly.