National Bank of Pakistan Announces Multiple Openings in Risk Management (September 2026) 

National Bank of Pakistan, widely known as “The Nation’s Bank,” has opened applications for five new positions within its Risk Management division. The bank, one of Pakistan’s largest financial institutions with an extensive local and international branch network, is looking to strengthen its Information Security function with a mix of technical and administrative roles based in Karachi.

Below is a breakdown of each role, the qualifications required, and what the job actually involves.

1. Officer IS Applications / Cloud Security (OG I)

This role reports to the Unit Head of IS Digital Channels and calls for a graduate in Computer Science, Computer Engineering, Cybersecurity, or Information Technology from a university recognized by the Higher Education Commission of Pakistan. Certifications such as CompTIA Security+, CompTIA Cloud+, or other cloud and application security credentials are a plus.

Candidates need at least four years of experience in application or cloud security. The responsibilities are extensive and technical, covering security reviews of web and mobile applications, APIs, and cloud hosted workloads. The officer will assess applications against the OWASP Top 10 and OWASP API Security standards, review cloud architecture across AWS, Microsoft Azure, and Google Cloud Platform, and evaluate IAM controls, encryption, and Zero Trust principles. The role also involves reviewing CI/CD pipelines, DevSecOps controls, and Infrastructure as Code templates for misconfigurations.

2. Officer Security Forensics (OG II / OG I)

Reporting to the Unit Head of Threat Management, this position requires a similar academic background, with preference given to candidates holding certifications such as CHFI, CEH, GCFA, Security+, or CySA+.

A minimum of two years of experience in information security, particularly in forensics or incident response, is required. Hands on experience with Windows and Linux forensics, Active Directory, SIEM, EDR/XDR, and network protocols is expected. Day to day duties include conducting digital forensic investigations, collecting and preserving evidence while maintaining chain of custody, using tools like FTK, KAPE, Autopsy, and Volatility, and mapping incident root causes to frameworks such as MITRE ATT&CK and NIST SP 800 86.

3. Officer Internet Security Reviewer (OG II / OG I)

This position reports to the Department Head of Infrastructure Security Review and requires a minimum of two years of experience in IT or information security, ideally with a focus on internet security.

The role centers on assessing web application architecture for vulnerabilities and providing expertise on common internet fraud and scam patterns. The officer will manage PCI DSS compliance, oversee SWIFT, CSP, and KYC related controls, and help investigate the root cause of security incidents across the organization.

4. Officer IS Coordination (OG III / OG II)

Unlike the more technical postings above, this role reports to the Unit Head of IS Coordination and Supplier Management and suits candidates from a Commerce, Science, or Engineering background. At least one year of experience in general administration, procurement, or budgeting is required, with banking sector experience preferred.

The duties are largely administrative, including supporting the Information Security Division’s annual budget preparation, maintaining staff records and HR documentation, tracking deadstock items, and coordinating with the HR Business Partner on recruitment and staffing matters.

5. Officer IS Trainings (OG III / OG II)

This role reports to the Unit Head of IS Audit and Trainings and is aimed at candidates with at least one year of experience in system security analysis, training, or documentation. A creative mindset paired with strong research and storytelling ability is explicitly called out, along with familiarity with PowerPoint, Excel, Canva, and platforms like PhishRod.

The officer will design training materials, e learning modules, and awareness campaigns covering cybersecurity, phishing, and safe digital banking practices. This includes running phishing simulations, producing infographics and videos, and measuring the effectiveness of awareness programs through surveys and quizzes.

How to Apply

All five positions are based in Karachi and offered on a three year contractual basis, renewable at the bank’s discretion. Only candidates who strictly meet the listed eligibility criteria will be shortlisted for testing or interviews, and no travel allowance is provided for test or interview attendance.

Interested applicants can apply through the official careers portal within ten working days of the advertisement’s publication date. Applications submitted after the deadline will not be considered under any circumstance. You can also learn more about working at NBP through its official careers page.

For candidates exploring other openings in the banking sector, check out our roundup of current banking sector jobs in Pakistan, and see our guide to building a career in information security for tips on standing out in similarly technical roles.

National Bank of Pakistan states it is an equal opportunity employer and welcomes applications from all qualified individuals regardless of gender, religion, or disability.