Role Overview
The Associate Director – IT & Information Security will be responsible for leading enterprise IT operations and the organization’s information security program. This role ensures the confidentiality, integrity, and availability of systems and data while supporting business growth, regulatory compliance, and operational excellence across global delivery centres.
The role requires a strong balance of IT operations leadership, cybersecurity governance, risk management, and compliance within a fast‑paced BPO/enterprise services environment.
Key Responsibilities
IT Operations & Infrastructure Leadership
- Lead day‑to‑day IT operations including networks, servers, endpoints, cloud services, and enterprise applications.
- Ensure high availability, performance, and scalability of IT systems across all locations.
- Own IT service delivery, incident management, problem management, and change management processes.
- Collaborate with internal teams and vendors to deliver reliable IT services aligned with business SLAs.
Information Security & Risk Management
- Own and continuously improve the organization’s Information Security Management Program.
- Lead security operations, including monitoring, incident response, investigations, and remediation.
- Oversee SOC operations, SIEM, endpoint detection, firewall security, and vulnerability management.
- Conduct risk assessments, threat modelling, and security reviews for new systems and vendors.
Compliance, Audit & Governance
- Ensure compliance with SOC 2, ISO 27001, client security requirements, and internal policies.
- Lead internal and external audits, including evidence collection and remediation tracking.
- Maintain and enforce IT and Information Security policies, standards, and procedures.
- Support client security questionnaires, due diligence, and regulatory inquiries.
Microsoft 365 & Identity Security
- Oversee Microsoft 365 security, identity and access management, conditional access, DLP, and endpoint protection.
- Ensure secure configuration and governance of email, collaboration tools, and cloud workloads.
- Partner with IT leadership on Copilot, automation, and digital transformation initiatives.
Leadership & Stakeholder Management
- Lead, mentor, and develop IT and security team members.
- Partner closely with IT leadership, HR, Legal, Compliance, and business stakeholders.
- Communicate risks, incidents, and security posture clearly to executive leadership.
- Drive a strong security‑first culture through awareness and training initiatives.
Required Qualifications
Education & Experience
- Bachelor’s degree in information technology, Computer Science, Cybersecurity, or related field.
- 8–12+ years of progressive experience in IT and Information Security roles.
- 3–5+ years in a leadership or management capacity.
Technical & Professional Skills
- Strong experience in:
- IT infrastructure, networking, and enterprise systems
- Cybersecurity operations and incident response
- SOC 2 / ISO 27001 compliance and audits
- SIEM, EDR, firewalls, vulnerability management
- Microsoft 365 security and identity management
- Azure and AWS cloud management.
- Solid understanding of BPO or regulated enterprise environments.
- Experience managing third‑party vendors and security partners.
Certifications (Preferred)
- PMP, Security-related certification, or equivalent
- Microsoft Security or Azure certifications
- Cloud and network-related certification is a plus
Soft Skills & Attributes
- Strong leadership and decision‑making ability
- Excellent communication and executive‑level reporting skills
- High sense of ownership, accountability, and integrity
- Ability to operate calmly under pressure during incidents
- Strategic mindset with hands‑on execution capability
What we offer:
- Market-competitive salary
- Career growth opportunities
- Learning & development programs
- On-the-job training
- Medical Coverage (IPD)
- Life Insurance
- Paid Leaves (Annual, Casual, Sick, Marriage, Maternity, Paternity, Hajj, Bereavement)
- Provident Fund
- Employee Old Age Benefits (EOBI)
- Employee engagement & wellness initiatives
Shift: EST (Night)
Work Module: Onsite / Hybrid as per business need
Location: NASTP, Cantt, Lahore.
