Cyber & Information Security Specialist

Cyber & Information Security Specialist

We are looking for a Cyber & Information Security Specialist to protect our systems, data,
and processes. The ideal candidate will implement security controls, perform risk assessments,
and actively secure our environment while ensuring compliance with global standards such as
SOC 2, ISO 27001, GDPR, and HIPAA

Key Responsibilities

● Conduct risk assessments, vulnerability assessments, penetration testing, and security
monitoring
● Implement and maintain security controls across networks, servers, and cloud
environments
● Develop and enforce security policies, incident response plans, and data protection
procedures
● Lead implementation of compliance frameworks such as SOC 2, ISO 27001, GDPR,
HIPAA
● Ensure data protection, privacy, and governance best practices across the organization
● Understand DevOps and engineering workflows to ensure secure development and
deployment practices
● Solid understanding of network, application, and cloud security (AWS, Azure, or GCP)
● Set up and manage security tools (endpoint protection, access controls, logging,
monitoring)
● Prepare for audits and certifications, including documentation and evidence collection
● Collaborate with teams to enforce secure architecture and practices
● Train staff and IT team on security best practices and awareness
● Gradually build and mentor a small internal security function from IT staff
● Stay up-to-date on emerging cybersecurity threats and industry trends

Qualifications & Requirements
● 3–5 years of experience in cybersecurity, IT security, or information security
● Proven experience implementing SOC 2, ISO 27001, or other compliance frameworks
(not just auditing)
● Solid understanding of network security, cloud security (AWS/Azure/GCP), and endpoint
protection
● Experience with access control, SIEM, vulnerability management, and incident response
● Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related field (Master’s
preferred)
● Preferred Certifications:CISSP, CISM, CEH, ISO 27001 Lead Implementer/Auditor

Soft Skills
● Self-starter with a practical problem-solving mindset
● Good English proficiency and strong communication skills
● Ability to balance security with business needs
● Strong analytical and problem-solving skills

Working Details
● Working Hours: 9 hours/day, Monday–Friday
● Location: Hyderabad (preferred) or Karachi
● Work Mode: On-site