Last Updated: 7 November 2026
Author: Muhammad Imran – Educativz.com
Source: Newspaper advertisement “Career Opportunities” by the Public Procurement Regulatory Authority (PPRA), Islamabad, ad No. PID(I) 4180/26 (The News, Lahore e-paper, 6 Nov 2026, page 5, e-paper page); applications only on the National Job Portal (NJP)
WhatsApp Group & Channel: Channel & Group
Last date: 20 November 2026 (13 days left from 7 Nov). The ad prints “Application deadline: 20-Nov-2026”. Apply only online through NJP: no manual applications will be accepted.
Quick answer: PPRA Islamabad is hiring 8 people in 6 posts on a contract basis for its e-Procurement project “e-Pak Acquisition and Disposal System (EPADS)”: CISO (1), Chief Technology Officer (1), Application Security Engineer (1), Security Compliance Officer (1), IT Assistant (3) and IT Technician (1). Upper age limits run from 30 to 55 years (relaxation already included). Pay is a “market-based competitive remuneration”, but no salary figure is printed.
8 vacancies 6 posts Islamabad Contract basis EPADS project Apply on NJP only Last date 20 Nov 2026
In this guide
PPRA Islamabad Jobs November 2026: CISO, CTO, Application Security Engineer, Security Compliance Officer, IT Assistant and IT Technician – Details at a Glance
| Organization | Public Procurement Regulatory Authority (PPRA), Islamabad: a regulatory body set up under the PPRA Ordinance, 2002 |
| Advertisement No. | PID(I) 4180/26 (heading: “Career Opportunities”) |
| Project | e-Pak Acquisition and Disposal System (EPADS), the e-Procurement project |
| Posts / vacancies | 6 posts, 8 vacancies (1 + 1 + 1 + 1 + 3 + 1) |
| Type of job | Contract basis on a market-based competitive remuneration; selection on open merit |
| Location | Islamabad (PPRA office, First Floor, FBC Building, Sector G-5/2) |
| How to apply | Online only through the National Job Portal: njp.gov.pk |
| Last date | 20 November 2026 |
| Contact (printed) | HR Expert, PPRA, First Floor, FBC Building, Sector G-5/2, Islamabad. Phone 051-9201850 |
| Salary | No figure printed; only “market-based competitive remuneration” |
All 6 Posts and 8 Vacancies
| Sr. | Post | Vacancies | Age limit (upper) | Key requirement |
| 1 | Chief Information Security Officer (CISO) | 1 | 55 years | MS (18 years) in CS / Cyber Security / IT / Software or Computer Engineering; mandatory CISM or CISSP; 10 years experience |
| 2 | Chief Technology Officer (CTO) | 1 | 55 years | Master’s or Bachelor’s (16 years) in IT / IS / CS / Computer Engineering; proven CTO/CEO or Project Manager / Project Director (or similar IT leadership) experience |
| 3 | Application Security Engineer | 1 | 40 years | Bachelor’s (16 years) in CS / Software Engineering / IT / Cybersecurity; mandatory CEH and CISA; 5 years experience |
| 4 | Security Compliance Officer | 1 | 40 years | Bachelor’s (16 years) in Cyber Security / IS / CS / IT / Software Engineering; preferred ISO/IEC 27001 Lead Implementer/Auditor or CISA; 5 years experience |
| 5 | IT Assistant | 3 | 33 years | Bachelor’s (14/16 years) in CS / IT / Software Engineering / Cyber Security / Data Science / Statistics; helpdesk experience preferred |
| 6 | IT Technician | 1 | 30 years | Intermediate + 3-6 months Diploma/Certificate in IT, Computer Hardware or Networking; practical hardware knowledge |
Age note: the ad says “Age relaxation has already been included in the upper age limit.” So the numbers above are final: you cannot add extra years on top.
What You Will Do: Job Description of Each Post
The ad prints a long duty list for each post. Here is the short version, in plain English.
| Post | Main duties (from the ad) |
| CISO | Lead PPRA-wide cybersecurity strategy, governance, policies and security roadmap (in line with PISF and Government requirements); advise senior management on risks; oversee risk management, incident response, vulnerability management and access security; give security oversight for applications, data, networks, cloud and third-party services; oversee audits and compliance; coordinate with Government cybersecurity authorities; report posture and incidents to the Competent Authority. |
| Chief Technology Officer | Plan the Authority’s IT needs (hardware, software, licences, cloud, network); create strategic plans and timelines for technical, web and mobile services; assess technology’s impact on the business; set short- and long-term IT goals; manage annual and quarterly budgets; make infrastructure decisions; build quality assurance, security policies, SOPs and disaster recovery plans; run IT resource allocation and KPI monitoring; manage partner relationships. |
| Application Security Engineer | Monitor application logs, APIs and user behaviour with SIEM and security tools; detect and respond to security incidents; implement secure configuration, role-based access, API security and encryption; run vulnerability assessments and secure code reviews (OWASP Top 10); secure integrations with Banks, AGPR and others; support DevOps on secure SDLC; prepare security reports; join audits and penetration testing for the EPADS application. |
| Security Compliance Officer | Coordinate implementation and monitoring of PISF, ISMS and security policies; maintain policies, procedures, compliance matrices and risk registers; coordinate internal and external audits; track audit findings until closure; monitor third-party compliance; prepare compliance reports and dashboards; support security awareness. |
| IT Assistant (3) | Give first-level technical support to users of the Electronic Public Procurement System (EPADS) through the helpdesk; help users with registration, login, profile management, tender publication and bid submission; fix routine issues and escalate complex ones; guide procuring agencies and bidders by phone and email; keep records of queries and complaints; prepare helpdesk reports. |
| IT Technician | Give basic technical support to staff; install, configure, repair and maintain computers, laptops, printers and IT equipment; do routine hardware and software troubleshooting including OS installation; assemble, upgrade and replace hardware; do preventive maintenance; keep an inventory of IT equipment; report recurring faults. |
Qualification and Experience, Post by Post
| Post | Qualification | Experience and extras |
| CISO | Minimum MS (18 years of education) in Computer Science, Cyber Security, Information Security, Information Technology, Software Engineering or Computer Engineering from an HEC-recognized high-ranked university/institution or a foreign university. Higher qualification in the relevant field preferred. | Mandatory certification: CISM or CISSP. Minimum 10 years of relevant, verifiable post-qualification experience in information/cybersecurity, including at least 5 years in a lead/managerial cybersecurity position. |
| CTO | Master’s or Bachelor’s degree with 16 years of education in Information Technology / Information Systems / Computer Science / Computer Engineering or a related discipline from an HEC-recognized institution or a reputed foreign university. | Proven experience as a CTO/CEO or Project Manager/Project Director OR a similar leadership role in IT (minimum 5 years). Proven experience in public sector leadership roles delivering large projects of national/provincial scale (minimum 5 years). Skills listed: strategic planning, leadership, communication, budgeting, project management, knowledge of public procurement rules, teamwork. |
| Application Security Engineer | Minimum Bachelor’s (16 years) in Computer Science, Software Engineering, Information Technology, Cybersecurity or a related discipline from an HEC-recognized university. | Mandatory: CEH (Certified Ethical Hacker) and CISA (Certified Information Systems Auditor). Minimum 5 years in Application Security, Information Security or SOC operations; experience securing web applications, APIs, databases and enterprise systems; hands-on with vulnerability assessment tools, SIEM and SAST/DAST; familiarity with regulatory compliance and audit processes. |
| Security Compliance Officer | Minimum Bachelor’s (16 years) in Cyber Security, Information Security, Computer Science, Information Technology, Information Systems, Software Engineering or a related ICT discipline from an HEC-recognized high-ranked university/institution or a foreign university. | Preferred (not mandatory): ISO/IEC 27001 Lead Implementer and/or Lead Auditor, CISA, or an equivalent certification. Minimum 5 years of relevant, verifiable experience, preferably in information security compliance, ISMS, risk assessment, security audits and policy development. |
| IT Assistant | Bachelor’s degree (14/16 years of education) in Computer Science, Information Technology, Software Engineering, Cyber Security, Data Science/Statistics or a related qualification from an HEC-recognized university. | Relevant hands-on experience in IT support / helpdesk will be preferred (not mandatory). |
| IT Technician | Minimum Intermediate (or equivalent) from a recognized Board, plus a minimum 3-6 month Diploma/Certificate in Information Technology, Computer Hardware, Networking or a relevant technical field from a recognized institute. | Must have practical knowledge of computer hardware, software installation, operating systems, troubleshooting and routine maintenance. Relevant hands-on experience in IT support, hardware maintenance or technical troubleshooting will be preferred. |
How to Apply on the National Job Portal (NJP): Step by Step
Go to njp.gov.pk. The ad says NJP is the only way to apply; no manual (paper or email) applications are accepted.
Fill your profile carefully with education, certifications and experience. The ad warns that the information in the NJP Application Form will be verified.
Search for the Public Procurement Regulatory Authority (PPRA) posts. Pick the post that matches your qualification and age limit.
You may apply for more than one post, but you must submit a separate Application Form for each post.
Do not wait for the last day. An incomplete application will not be entertained.
Tip: keep a clean photo and scanned documents ready. Use the Image Resizer to shrink files to the size NJP asks for, the Background Remover for a neat photo, and the CV Builder to prepare your CV text before you type it into your NJP profile.
Important Instructions Printed in the Ad
- Submit applications only through NJP. No manual applications.
- Only shortlisted / eligible applicants will be called for the test/interview.
- You may apply for more than one post, with a separate form for each post.
- Age relaxation has already been included in the upper age limit.
- Shortlisted candidates must bring original educational credentials/testimonials, certifications and experience certificate(s) along with one set of attested copies at the interview.
- Information in the NJP form will be verified. False or forged information and fake or bogus documents mean PPRA can cancel the candidature at any stage.
- Incomplete applications will not be entertained.
- No TA/DA will be paid for the test/interview.
- PPRA may cancel the recruitment process or increase/decrease the number of posts at any stage without giving a reason.
- Government employees may apply through proper channel.
- Candidates with a valid Balochistan domicile are encouraged to apply.
- Application deadline: 20-Nov-2026.
Documents Checklist
| Document | Why |
| Education degrees and transcripts (HEC-recognized; foreign degrees as applicable) | Qualification proof for every post |
| Certifications: CISM/CISSP (CISO), CEH + CISA (Application Security Engineer), ISO 27001 / CISA (preferred for Compliance Officer) | Mandatory or preferred as listed |
| Experience certificates | Required at interview; the ad says “experience certificate(s)” |
| One set of attested copies plus originals | Bring at the interview (shortlisted candidates only) |
| CNIC and recent photograph | Not listed in the ad, but NJP profiles normally need them |
| Domicile (valid Balochistan domicile is encouraged) | Mentioned in the ad; no other domicile rule is printed |
Free tools: resize scans with the Image Resizer, fix a photo background with the Background Remover, draft your resume in the CV Builder, and browse everything on the Educativz Tools page.
Who Should Apply
- Senior cybersecurity and IT leaders (age up to 55) with an MS and CISM/CISSP for the CISO post, or a CTO / project-director background for the CTO post
- Security engineers aged up to 40 who already hold CEH and CISA (both are mandatory for Application Security Engineer)
- Compliance and audit professionals up to 40 with ISO 27001 or CISA (preferred)
- Fresh and early-career IT graduates up to 33 for the 3 IT Assistant helpdesk posts
- Diploma holders up to 30 with Intermediate plus a short IT/hardware course for the IT Technician post
Probably not a fit: candidates above the upper age limit of the post (there is no extra relaxation), anyone missing a mandatory certification, and anyone who wants a permanent job: these are contract posts tied to the EPADS project.
What the Advertisement Does NOT Print
| Item | Status |
| Salary figure | Not printed. The ad only says “market-based competitive remuneration” |
| Contract length | Not printed |
| Test / interview date and place | Not printed; only shortlisted candidates will be called |
| Application fee | None mentioned |
| Female/gender or quota rules | Not printed |
| Direct NJP job link | Not printed; only the portal address njp.gov.pk is given |
| PPRA’s own notice link | Not printed; check ppra.org.pk and NJP for any update |
Karna / Nahi Karna
| Karna (Do) | Nahi Karna (Don’t) |
| Apply only on njp.gov.pk before 20 Nov 2026 | Don’t send paper or email applications: they are not accepted |
| Check the age limit and mandatory certificates of the exact post before applying | Don’t apply for a post where you miss a mandatory certificate (CISM/CISSP; CEH and CISA) |
| Use a separate NJP form for each post if you want more than one | Don’t assume one form covers several posts |
| Fill the profile completely and truthfully; it will be verified | Don’t upload false or forged documents: PPRA can cancel your candidature at any stage |
| Keep originals and one set of attested copies ready for the interview | Don’t expect TA/DA for the test/interview |
| Confirm anything unclear with PPRA HR on 051-9201850 | Don’t pay anyone for a “guaranteed” PPRA job |
PPRA Islamabad Jobs November 2026: FAQs
How many posts is PPRA advertising?
Six posts with eight vacancies: CISO (1), Chief Technology Officer (1), Application Security Engineer (1), Security Compliance Officer (1), IT Assistant (3) and IT Technician (1).
What is the last date?
20 November 2026, as printed in the ad. From 7 November that leaves 13 days.
How do I apply?
Only online through the National Job Portal at njp.gov.pk. No manual applications are accepted.
What is the age limit?
CISO and CTO: 55 years. Application Security Engineer and Security Compliance Officer: 40 years. IT Assistant: 33 years. IT Technician: 30 years. Age relaxation is already included.
Are the posts permanent?
No. They are on a contract basis for the EPADS e-Procurement project.
What is the salary?
The ad does not print a figure. It says “market-based competitive remuneration”.
Can I apply for more than one post?
Yes, but submit a separate application form for each post.
Which certificates are mandatory?
CISM or CISSP for the CISO; CEH and CISA for the Application Security Engineer. For the Security Compliance Officer, ISO/IEC 27001 Lead Implementer/Auditor or CISA is only preferred.
Can government employees apply?
Yes, through proper channel.
Is there TA/DA for the interview?
No. The ad says no TA/DA will be admissible for the test/interview.
Who is encouraged to apply from Balochistan?
The ad says candidates having a valid Balochistan domicile are encouraged to apply. It prints no other domicile rule.
Who can I contact?
The ad lists HR Expert, PPRA, First Floor, FBC Building, Sector G-5/2, Islamabad, phone 051-9201850.
Keywords: PPRA jobs November 2026 PPRA Islamabad jobs EPADS jobs CISO jobs Islamabad IT jobs Islamabad 2026 NJP jobs apply online پی پی آر اے نوکریاں اسلام آباد نیشنل جاب پورٹل
Disclaimer: Educativz.com is not the Public Procurement Regulatory Authority. We read the advertisement published in The News (Lahore e-paper, 6 November 2026) and checked every row. Confirm details on njp.gov.pk and ppra.org.pk before applying.
