research analyst Jobs in Karachi Pakistan

research analyst

key account analyst – compliance Jobs in Karachi Pakistan

key account analyst – compliance

qc analyst

(remote) information security & grc analyst (mid-level) Jobs in Karachi Pakistan

(remote) information security & grc analyst (mid-level)

business systems analyst (remote) Jobs in Karachi Pakistan

business systems analyst (remote)

remote information security grc analyst mid level

Teamficient

Information Security &amp; GRC Analyst (Mid-Level)Company: TeamFicient Location: Remote Employment Type: Full-Time Salary Range: To be discussed (Negotiable for highly experienced candidates)Work Schedule:<ul><li>Time Range: Between 7 AM &ndash; 7 PM CST (Graveyard shift)</li><li>Working Hours: 9 hours per day (8 working hours + 1-hour break)</li><li>Days Off: TBD (2 days per week)</li></ul>Why Join Us?<ul><li>Competitive salary based on experience.</li><li>Opportunity to grow within an international, people-first organization.</li><li>Supportive work environment that values innovation, inclusion, and career growth.</li></ul>Position OverviewThis role bridges Information Security Governance and Technical Compliance for our MDR + Compliance platform.The Information Security &amp; GRC Analyst ensures alignment with frameworks such as ISO 27001, SOC 2 Type II, NIST CSF 2.0, GDPR, HIPAA, and PCI DSS, translating requirements into technical implementation tasks for engineering teams and maintaining audit readiness.Key Responsibilities<ul><li>Build and maintain the Control Matrix and Statement of Applicability across frameworks.</li><li>Perform risk and gap assessments, maintain the risk register, and treatment plans.</li><li>Map framework controls to technical configurations (Azure, AWS, EDR, CI/CD).</li><li>Collect and validate audit evidence (logs, reports, approvals, tickets).</li><li>Draft and update policies: Access Control, Incident Response, Secure Development, and Vendor Risk Management.</li><li>Support data privacy and AI governance tasks (LLM usage, data segregation).</li><li>Prepare for external audits and track corrective actions.</li><li>Conduct internal security awareness training sessions.</li></ul>Qualifications &amp; Must-Haves<ul><li>3&ndash;5 years of experience in Information Security or GRC.</li><li>Deep knowledge of ISO 27001, SOC 2 Type II, NIST CSF 2.0, GDPR, HIPAA, PCI DSS, ADHICS.</li><li>Familiar with cloud security controls (Azure Defender, AWS Security Hub).</li><li>Strong documentation, communication, and policy writing skills.</li><li>Experience using compliance automation tools (Drata, Vanta, Secureframe).</li></ul>Tech Stack &amp; Frameworks:<ul><li>ISO 27001, SOC 2 Type II, NIST CSF 2.0, GDPR, HIPAA, PCI DSS, ADHICS, Azure Security Center, AWS Config, Drata, Vanta, ClickUp, Google Workspace</li></ul>Education:<ul><li>Bachelor&rsquo;s or Master&rsquo;s in Information Security, Computer Science, or Cybersecurity Governance.</li><li>ISO 27001 Lead Implementer/Auditor or equivalent certification preferred.</li></ul>Technical/System Requirements<ul><li>Desktop or laptop with Intel Core i7 / i9 or AMD Ryzen 7 / 9 (or higher) processor</li><li>Minimum 32GB RAM for multitasking and large file handling</li><li>NVIDIA RTX or AMD Radeon Pro graphics card (recommended)</li><li>Workstation free from noise and distractions</li><li>Stable primary internet connection and backup internet</li><li>USB headset with noise-cancelling microphone</li><li>Backup power source (generator, UPS, or accessible alternative workspace during outages)</li></ul>This is a long-term opportunity for an experienced IT professional who is ready to take on a leadership role in a fast-paced, global organization.Join TeamFicient and help build efficient, secure, and scalable IT operations that empower teams to perform at their best.Job Type: Full-timeApplication Question(s):<ul><li>What is your expected monthly salary for this position (in PKR)?</li></ul>Work Location: Remote

(REMOTE) Information Security & GRC Analyst (Mid-Level)

SuperNova Solutions Pvt. Ltd.

Position Title: GRC Officer / SpecialistWe are seeking a proactive and detail-oriented GRC Officer / Analyst / Specialist to join our Governance, Risk &amp; Compliance (GRC) team. The ideal candidate will play a key role in ensuring that our SAP systems, processes, and IT operations comply with international governance, security, and risk management standards.Key Responsibilities:<ul><li>Conduct IT and SAP-related risk assessments, ensuring alignment with corporate governance frameworks</li></ul><ul><li>Support SAP GRC module configuration and compliance monitoring activities</li></ul><ul><li>Maintain and update ISO 27001, SOC 2, and SAP security compliance documentation</li></ul><ul><li>Monitor risk registers and ensure adherence to IT security and data protection policies</li></ul><ul><li>Participate in internal audits, SAP access reviews, and client compliance assessments</li></ul><ul><li>Prepare audit evidence, compliance reports, and risk documentation related to SAP environments</li></ul><ul><li>Collaborate with cross-functional teams (Basis, Security, and Functional Consultants) to ensure SAP compliance</li></ul>Required Skills &amp; Qualification:* Education: Bachelor&rsquo;s degree in Computer Science, Information Systems, or Business Administration* Experience: 2&ndash;4 years in IT compliance, audit, or risk management (experience with SAP systems or GRC tools preferred)* Strong understanding of ISO 27001, SOC 2, GDPR, or NIST frameworks* Familiarity with SAP GRC Access Control, Process Control, or Risk Management modules is a plus* Excellent communication, documentation, and analytical skills* Certifications such as SAP GRC, ISO 27001 Lead Implementer, or CISA are advantageousLocation: KarachiTo apply: careers@global-supernova.comSubject Line: GRC Officer / Specialist &ndash; KarachiJob Type: Full-timePay: Rs100,000.00 - Rs180,000.00 per monthWork Location: In person

GRC Officer / Specialist

Inbox Business Technologies

<div>Job Summary:
We are seeking a Consultant with proven experience in implementing and maintaining ISO 27001-based Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC) frameworks. The ideal candidate will have hands-on expertise in ISO 27001 gap assessments, risk assessments, policy development, and certification audit preparation, along with working knowledge of standards such as NIST, NCA, SAMA, COBIT, and ITIL. This role involves supporting compliance programs, developing security controls, conducting awareness training, and assisting clients in aligning IT strategies with regulatory requirements including GDPR, HIPAA, and PCI-DSS. Strong documentation, auditing, and communication skills are essential.<h3 class="jobSectionHeader">
Job Description:</h3>
ISMS Responsibilities:<ul><li>
Experience of implementation and maintenance of ISO 27001-based Information Security Management Systems (ISMS).</li><li>
Perform gap assessments to identify areas of non-compliance and assist in remediation planning against various standards &amp; frameworks like, NIST, NCA, SAMA etc.</li><li>
Participate in risk assessments and help develop mitigation strategies.</li><li>
Developing ISMS policies, procedures, and security controls aligned with ISO 27001 standards.</li><li>
Prepare documentation and provide support during ISO 27001 certification audits.</li><li>
Conduct security awareness training and incident management processes.</li></ul>
IT GRC Responsibilities:<ul><li>
Assist in developing and implementing IT governance frameworks (COBIT, NIST, ITIL).</li><li>
Support IT risk assessments, compliance audits, and regulatory reporting activities.</li><li>
Help clients align IT strategies with their business goals while ensuring compliance with regulations like COBIT, GDPR, HIPAA, SOX, etc.</li><li>
Support in developing and maintaining IT compliance programs and policies.</li><li>
Contribute to the development and implementation of GRC tools and processes.</li><li>
Participate in internal audits and help clients prepare for external certification audits/compliance checks.</li></ul>
Requirements<ul><li>
Minimum Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field.</li><li>
Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, or COBIT Foundation.</li><li>
Experience: 3&ndash;4 years of experience in ISMS and IT GRC consulting, auditing, or implementation.</li><li>
Familiarity with ISO 27001 gap assessments, risk assessments, and audits.</li><li>
Basic knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).</li><li>
Understanding of regulatory compliance such as GDPR, NIST, and PCI-DSS.</li><li>
Strong documentation, report writing, and communication skills is a must.</li></ul></div>

Consultant - ISMS/GRC

<div>We are seeking a highly experienced Senior Consultant with strong expertise in Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC). The ideal candidate should have a proven track record of implementing and auditing ISO 27001, developing and designing IT GRC frameworks based on COBIT, NIST, and conducting risk assessments to ensure compliance with industry standards and regulations, like GDPR, SAMA, NESA, NCA, PDPL etc.
Job Description:
ISMS Responsibilities:<ul><li>
Lead the implementation, management, and auditing of ISO 27001-based Information Security Management Systems (ISMS).</li><li>
Perform gap assessments to identify areas of non-compliance and develop corrective action plans.</li><li>
Conduct risk assessments and ensure risk mitigation strategies are aligned with business objectives.</li><li>
Develop and refine ISMS policies, procedures, and controls in compliance with ISO 27001 and other relevant standards.</li><li>
Support clients in achieving and maintaining ISO 27001 certification, including audit readiness.</li><li>
Provide guidance on security incident management and business continuity planning.</li></ul>
IT GRC Responsibilities:<ul><li>
Develop and implement IT governance frameworks based on COBIT, NIST, and other best practices.</li><li>
Conduct IT risk assessments and define risk treatment plans.</li><li>
Ensure compliance with regulatory requirements such as GDPR, NIST, GDPR, and local cybersecurity regulations.</li><li>
Design and implement IT compliance and risk management programs, policies, and controls.</li><li>
Provide advisory services on third-party/vendor risk management.</li><li>
Assist organizations in aligning IT strategy with business objectives through effective governance practices.</li></ul>
Requirements<ul>
<li>Master&rsquo;s or Bachelor&rsquo;s degree in Information Security, Computer Science, or IT-related field.</li>
<li>Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, CISSP, CISA, or COBIT 2019 Foundation.</li>
<li>Experience: Minimum 6&ndash;8 years of experience in ISMS and IT GRC consulting, implementation, or auditing.</li>
<li>Hands-on experience in conducting ISO 27001 gap assessments, risk assessments, and audits.</li>
<li>Strong practical knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).</li>
<li>Experience in handling regulatory compliance requirements such as GDPR, NIST, and PCI-DSS.</li>
<li>Excellent report writing, communication, and stakeholder management skills.</li></ul></div>

Senior Consultant - ISMS/GRC

Location: Remote Employment Type: Full-Time | 24/7 Support Environment Compensation: $750 &ndash; $1000 USD per month (based on experience)About the RoleWe are seeking an experienced SOC Analyst (Level 3) to join our growing cybersecurity team. This role will play a key part in building and operating a 24&times;7 Security Operations Center (SOC), focusing on advanced threat detection, incident response, and continuous improvement of our cybersecurity posture.You&rsquo;ll collaborate with the SOC Manager and cross-functional teams to enhance detection and response capabilities, automate workflows, and maintain compliance with industry standards such as ISO 27001, SOC 2, and NIST CSF.Key Responsibilities<ul><li>Deploy, configure, and maintain SOC tools including SentinelOne EDR, Wazuh SIEM, Splunk, and IBM QRadar.</li><li>Monitor and analyze alerts from endpoints, networks, and cloud environments, ensuring accurate detection and validation of potential threats.</li><li>Lead incident triage, containment, remediation, and post-incident analysis for escalated cases.</li><li>Integrate telemetry and API feeds from firewalls, servers, and other sources for unified visibility.</li><li>Develop and maintain SOC runbooks, playbooks, and workflows aligned with best practices.</li><li>Collaborate with the SOC Manager to enhance detection, response, and reporting processes.</li><li>Coordinate with IT operations teams for system patching, hardening, and remediation.</li><li>Build and maintain dashboards and reports to track SOC performance and incident metrics.</li><li>Mentor and guide Level 1 and Level 2 analysts, providing escalation support and training.</li><li>Participate in threat hunting, forensic analysis, and automation initiatives to improve SOC efficiency.</li><li>Ensure all SOC activities comply with relevant security and compliance frameworks.</li></ul>Required Qualifications &amp; Skills<ul><li>3&ndash;5 years of hands-on experience in SOC operations, incident response, or cybersecurity engineering.</li><li>Strong working knowledge of EDR and SIEM tools (SentinelOne, Wazuh, Splunk, QRadar, or equivalent).</li><li>Practical experience with log analysis, correlation, and security integrations.</li><li>Solid understanding of Windows/Linux event logs, MITRE ATT&amp;CK, and network protocols.</li><li>Exposure to automation or scripting (PowerShell, Python, or Bash) is preferred.</li><li>Excellent analytical, problem-solving, and communication skills.</li><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or Information Technology (Master&rsquo;s preferred).</li><li>Certifications such as CEH, CompTIA Security+, or CySA+ are advantageous.</li></ul>What We Offer<ul><li>100% remote work in a dynamic, global security team.</li><li>Opportunities to work with advanced SOC technologies and continuous learning support.</li><li>Exposure to international compliance and cybersecurity standards.</li><li>Competitive compensation based on experience and qualifications.</li></ul>Job Type: Full-timePay: Rs200,000.00 - Rs280,000.00 per monthApplication Question(s):<ul><li>Do you have experience managing 24/7 operations/security teams?</li><li>How familiar are you with SOC, NIST, and CIS frameworks?</li><li>Indicate the security tools you have hands-on experience</li><li>Are you familiar with compliance standards such as ISO 27001, GDPR, HIPAA, or similar regional regulations?</li><li>Do you have experience with scripting/automation (Python, PowerShell, or SOAR tools)?</li><li>How much is your expected salary in USD?</li></ul>Experience:<ul><li>IT operations &amp; security: 6 years (Required)</li></ul>

SOC Analyst – Level 3

Penetration Tester / Ethical HackerCompany: TeamFicient Location: Pakistan (Remote / Hybrid) Employment Type: Full-Time or Contract Salary Range: To be discussed (Negotiable for highly experienced candidates)Work Schedule:<ul><li>Time Range: Between 7 AM &ndash; 7 PM CST (Graveyard shift)</li><li>Working Hours: 9 hours per day (8 working hours + 1-hour break)</li><li>Days Off: TBD (2 days per week)</li></ul>Why Join Us?<ul><li>Competitive salary based on experience.</li><li>Opportunity to grow within an international, people-first organization.</li><li>Supportive work environment that values innovation, inclusion, and career growth.</li></ul>Position OverviewWe build an AI-powered MDR and GRC platform that collects logs, runs detections, and maps security and compliance controls.The Penetration Tester will secure our applications and client environments through authorized testing of web, API, cloud, and endpoint layers, helping convert findings into remediation tasks and audit evidence.Key Responsibilities<ul><li>Conduct authorized penetration tests (web, API, cloud, network, CI/CD).</li><li>Perform vulnerability scanning and manual validation of findings.</li><li>Develop non-destructive proof-of-concept exploits and document impact.</li><li>Produce detailed reports with risk ratings, CVSS scores, and recommendations.</li><li>Translate findings into engineering tickets and support re-tests.</li><li>Integrate SAST/DAST scanners into CI/CD pipelines.</li><li>Conduct periodic vulnerability assessments for demo and production environments.</li><li>Support audits (ISO 27001, SOC 2) with security evidence and training.</li></ul>Qualifications &amp; Must-Haves<ul><li>2&ndash;5 years of experience in penetration testing or red-team operations.</li><li>Strong web app / API testing skills (OWASP Top 10, SSRF, XSS, CSRF, authentication flaws).</li><li>Familiar with cloud security (Azure / AWS misconfigurations, IAM review).</li><li>Solid knowledge of Linux / Windows internals and networking fundamentals.</li><li>Familiar with CI/CD security and secret management.</li><li>Excellent report writing and collaboration skills.</li></ul>Preferred / Nice to Have:<ul><li>Certifications (OSCP, OSWE, eJPT, CEH) are preferred.</li><li>Experience with container security and CI/CD automation.</li><li>Understanding of compliance mapping (ISO 27001, SOC 2, NIST CSF).</li></ul>Tools &amp; Technologies:<ul><li>Nmap, Burp Suite, ZAP, Postman, Nessus, OpenVAS, Trivy, Metasploit (limited), GitHub Actions, SonarQube, ClickUp, Confluence, Google Docs</li></ul>Education:<ul><li>Bachelor&rsquo;s or Master&rsquo;s in Cybersecurity, Computer Science, or Information Technology.</li><li>Advanced training or certifications in Ethical Hacking are recommended.</li></ul>Technical/System Requirements<ul><li>Desktop or laptop with Intel Core i7 / i9 or AMD Ryzen 7 / 9 (or higher) processor</li><li>Minimum 32GB RAM for multitasking and large file handling</li><li>NVIDIA RTX or AMD Radeon Pro graphics card (recommended)</li><li>Workstation free from noise and distractions</li><li>Stable primary internet connection and backup internet</li><li>USB headset with noise-cancelling microphone</li><li>Backup power source (generator, UPS, or accessible alternative workspace during outages)</li></ul>This is a long-term opportunity for an experienced IT professional who is ready to take on a leadership role in a fast-paced, global organization.Join TeamFicient and help build efficient, secure, and scalable IT operations that empower teams to perform at their best.Job Type: Full-timeApplication Question(s):<ul><li>What is your expected monthly salary for this position (in PKR)?</li></ul>Work Location: Remote

(REMOTE) Penetration Tester / Ethical Hacker

Arpatech (Pvt.) Ltd

We&rsquo;re looking for an experienced Information Security Manager to lead our organization&rsquo;s security operations, compliance efforts, and governance strategy while fostering a culture of cyber resilience across all departments. You&rsquo;ll be responsible for designing and implementing robust security frameworks, ensuring regulatory compliance, managing risks, and driving proactive threat detection and response strategies.Key Responsibilities: 1. Lead and manage enterprise-wide information security initiatives. 2. Oversee SOC operations and implement SIEM solutions (experience with Wazuh is highly preferred). 3. Drive vulnerability management and coordinate with DevOps teams to embed security in CI/CD pipelines (DevSecOps). 4. Develop, maintain, and enforce information security policies, standards, and procedures aligned with frameworks such as ISO 27001, NIST, and other industry best practices. 5. Own the organization&rsquo;s GRC (Governance, Risk, and Compliance) function and ensure adherence to relevant laws, regulations, and frameworks. 6. Act as a key liaison during security audits and assessments. 7. Promote awareness and training to build a strong internal security culture. 8. Strong understanding of SDLC.Requirements: 1. Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or a related field (Master&rsquo;s degree is a plus). 2. Minimum 8 years of experience in Information Security, with at least 4 years in a leadership or managerial role. 3. Strong understanding of security frameworks like ISO 27001, NIST, and risk management methodologies. 4. Hands-on experience with SOC tools, SIEM platforms, vulnerability scanning, and DevSecOps practices. 5. Proven track record in security compliance, governance, and risk management. 6. Experience working with or managing Wazuh or similar SIEM platforms is highly desirable. 7. Industry certifications such as CISSP, CISM, or CISA are a strong plus.Location: Karachi (on-site) Shift: 9 AM to 6 PMJob Type: Full-timeWork Location: In person

Information Security Manager

Explore 998+ Remote information security grc analyst mid level in Karachi Pakistan this November. Find roles across top companies and apply now to boost your career.