The National Database and Registration Authority (NADRA) invites applications from experienced information security and risk governance practitioners for the appointment of Deputy Director (Governance, Risk Assessment & Compliance) under the NADRA Employees Service Regulations, 2002. Stationed at Lahore, this specialized managerial post spearheads institutional compliance, technical audit oversight, and risk frameworks across regional digital identity operations.
Institutional Background and Digital Security Mandate
As Pakistan's sovereign digital identity enterprise under the Ministry of Interior, NADRA is entrusted with maintaining biometric citizen registries, secure data processing exchanges, and automated public verification systems nationwide. Operating high-availability service nodes and provincial regional head offices such as Lahore, the Authority enforces stringent cybersecurity and governance measures to protect citizen credentials, financial verification interfaces, and government database linkages against evolving threat landscapes.
Operational Scope and Professional Compliance Duties
The Deputy Director exercises direct technical oversight across the Governance, Risk, and Compliance (GRC) domain. Core operational duties involve leading compliance roadmaps aligned with ISO 27001, ISO 27701, ISO 22301, NIST, and CIS Controls, conducting independent information security audits, and formulating comprehensive organizational SOPs. The officer is responsible for designing governance controls for Responsible AI, explainability frameworks, model risk management, and bias detection, while actively supervising vulnerability threat analysis, Endpoint Protection (EPP/EDR) platforms, Security Operations Center (SOC) incident response lifecycles, and SOAR automation technologies.
Application Preparation and Document Checklist
Candidates possessing the prescribed academic qualifications and GRC leadership background should organize the following official documentation for submission:
- Comprehensive professional resume emphasizing 6 to 10 years of post-qualification technology experience and specialized GRC audit accomplishments.
- Attested photocopies of four-year bachelor's degree in relevant computing disciplines verified and authenticated by the Higher Education Commission (HEC).
- Copies of relevant professional certifications such as ISO-27001 Lead Auditor/Implementer, CISM, CISA, or CISSP.
- Certified employment letters confirming at least 3 years in dedicated GRC roles.
- Clear copy of Computerized National Identity Card (CNIC) and recent passport-sized color photographs.
- Departmental No Objection Certificate (NOC) for individuals currently employed in government or semi-autonomous institutions.
Submission Logistics and Recruitment Terms
Interested professionals must submit their applications exclusively through the official web portal at careers.nadra.gov.pk no later than 25 October 2026. Practical guidance for online registration is accessible under the portal's Downloads directory. Selected applicants will initially serve a six-month probationary tenure extendable based on satisfactory evaluation. Only shortlisted candidates meeting all prerequisites will be summoned for test or interview, where original HEC-attested credentials must be presented. No TA/DA is admissible for recruitment proceedings.