global compliance & reporting - consultant/senior consultant - karachi - pakistan Jobs in Karachi

global compliance & reporting - consultant/senior consultant - karachi - pakistan

consultant qa, qc

educational consultant

consultant - isms/grc

consultant qa

consultant isms grc

Inbox Business Technologies

<div>Job Summary:
We are seeking a Consultant with proven experience in implementing and maintaining ISO 27001-based Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC) frameworks. The ideal candidate will have hands-on expertise in ISO 27001 gap assessments, risk assessments, policy development, and certification audit preparation, along with working knowledge of standards such as NIST, NCA, SAMA, COBIT, and ITIL. This role involves supporting compliance programs, developing security controls, conducting awareness training, and assisting clients in aligning IT strategies with regulatory requirements including GDPR, HIPAA, and PCI-DSS. Strong documentation, auditing, and communication skills are essential.
Job Description:
ISMS Responsibilities:<ul><li>
Experience of implementation and maintenance of ISO 27001-based Information Security Management Systems (ISMS).</li><li>
Perform gap assessments to identify areas of non-compliance and assist in remediation planning against various standards &amp; frameworks like, NIST, NCA, SAMA etc.</li><li>
Participate in risk assessments and help develop mitigation strategies.</li><li>
Developing ISMS policies, procedures, and security controls aligned with ISO 27001 standards.</li><li>
Prepare documentation and provide support during ISO 27001 certification audits.</li><li>
Conduct security awareness training and incident management processes.</li></ul>
IT GRC Responsibilities:<ul><li>
Assist in developing and implementing IT governance frameworks (COBIT, NIST, ITIL).</li><li>
Support IT risk assessments, compliance audits, and regulatory reporting activities.</li><li>
Help clients align IT strategies with their business goals while ensuring compliance with regulations like COBIT, GDPR, HIPAA, SOX, etc.</li><li>
Support in developing and maintaining IT compliance programs and policies.</li><li>
Contribute to the development and implementation of GRC tools and processes.</li><li>
Participate in internal audits and help clients prepare for external certification audits/compliance checks.</li></ul>
Required Qualifications &amp; Experience:<ul><li>
Minimum Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field.</li><li>
Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, or COBIT Foundation.</li><li>
Experience: 3&ndash;4 years of experience in ISMS and IT GRC consulting, auditing, or implementation.</li><li>
Familiarity with ISO 27001 gap assessments, risk assessments, and audits.</li><li>
Basic knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).</li><li>
Understanding of regulatory compliance such as GDPR, NIST, and PCI-DSS.</li><li>
Strong documentation, report writing, and communication skills is a must.</li></ul>
Requirements<ul>
<li>Master&rsquo;s or Bachelor&rsquo;s degree in Information Technology, Computer Science, or IT-related field.
</li><li>ITIL Expert/Managing Professional, ISO 20000 Lead Implementer / Lead Auditor, ISO 22301 Lead Implementer / Lead Auditor, CBCP (Certified Business Continuity Professional).
</li><li>6-8 years of experience in ITSM and BCMS consulting or related roles.
</li><li>In-depth knowledge of ITIL, ISO 22301, and other relevant frameworks/regulations.
</li><li>Practical experience in ISO 22301 implementation, BIA, DR planning, and BCMS assessments.
</li><li>Familiarity with IT compliance standards such as ISO 27001, COBIT, and NIST, NCA.
</li><li>Excellent analytical, problem-solving, and decision-making skills.
</li><li>Proven ability to manage multiple projects and clients simultaneously.
</li><li>Experience in conducting internal and external audits related to ITSM and BCMS.
</li><li>Strong stakeholder engagement, report writing, and project management skills.</li></ul></div>

Consultant - ISMS/GRC

<div>We are seeking a highly experienced Senior Consultant with strong expertise in Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC). The ideal candidate should have a proven track record of implementing and auditing ISO 27001, developing and designing IT GRC frameworks based on COBIT, NIST, and conducting risk assessments to ensure compliance with industry standards and regulations, like GDPR, SAMA, NESA, NCA, PDPL etc.
Job Description:
ISMS Responsibilities:<ul><li>
Lead the implementation, management, and auditing of ISO 27001-based Information Security Management Systems (ISMS).</li><li>
Perform gap assessments to identify areas of non-compliance and develop corrective action plans.</li><li>
Conduct risk assessments and ensure risk mitigation strategies are aligned with business objectives.</li><li>
Develop and refine ISMS policies, procedures, and controls in compliance with ISO 27001 and other relevant standards.</li><li>
Support clients in achieving and maintaining ISO 27001 certification, including audit readiness.</li><li>
Provide guidance on security incident management and business continuity planning.</li></ul>
IT GRC Responsibilities:<ul><li>
Develop and implement IT governance frameworks based on COBIT, NIST, and other best practices.</li><li>
Conduct IT risk assessments and define risk treatment plans.</li><li>
Ensure compliance with regulatory requirements such as GDPR, NIST, GDPR, and local cybersecurity regulations.</li><li>
Design and implement IT compliance and risk management programs, policies, and controls.</li><li>
Provide advisory services on third-party/vendor risk management.</li><li>
Assist organizations in aligning IT strategy with business objectives through effective governance practices.</li></ul>
Requirements<ul>
<li>Master&rsquo;s or Bachelor&rsquo;s degree in Information Security, Computer Science, or IT-related field.</li>
<li>Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, CISSP, CISA, or COBIT 2019 Foundation.</li>
<li>Experience: Minimum 6&ndash;8 years of experience in ISMS and IT GRC consulting, implementation, or auditing.</li>
<li>Hands-on experience in conducting ISO 27001 gap assessments, risk assessments, and audits.</li>
<li>Strong practical knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).</li>
<li>Experience in handling regulatory compliance requirements such as GDPR, NIST, and PCI-DSS.</li>
<li>Excellent report writing, communication, and stakeholder management skills.</li></ul></div>

Senior Consultant - ISMS/GRC

SuperNova Solutions Pvt. Ltd.

Position Title: GRC Officer / SpecialistWe are seeking a proactive and detail-oriented GRC Officer / Analyst / Specialist to join our Governance, Risk &amp; Compliance (GRC) team. The ideal candidate will play a key role in ensuring that our SAP systems, processes, and IT operations comply with international governance, security, and risk management standards.Key Responsibilities:<ul><li>Conduct IT and SAP-related risk assessments, ensuring alignment with corporate governance frameworks</li></ul><ul><li>Support SAP GRC module configuration and compliance monitoring activities</li></ul><ul><li>Maintain and update ISO 27001, SOC 2, and SAP security compliance documentation</li></ul><ul><li>Monitor risk registers and ensure adherence to IT security and data protection policies</li></ul><ul><li>Participate in internal audits, SAP access reviews, and client compliance assessments</li></ul><ul><li>Prepare audit evidence, compliance reports, and risk documentation related to SAP environments</li></ul><ul><li>Collaborate with cross-functional teams (Basis, Security, and Functional Consultants) to ensure SAP compliance</li></ul>Required Skills &amp; Qualification:* Education: Bachelor&rsquo;s degree in Computer Science, Information Systems, or Business Administration* Experience: 2&ndash;4 years in IT compliance, audit, or risk management (experience with SAP systems or GRC tools preferred)* Strong understanding of ISO 27001, SOC 2, GDPR, or NIST frameworks* Familiarity with SAP GRC Access Control, Process Control, or Risk Management modules is a plus* Excellent communication, documentation, and analytical skills* Certifications such as SAP GRC, ISO 27001 Lead Implementer, or CISA are advantageousLocation: KarachiTo apply: careers@global-supernova.comSubject Line: GRC Officer / Specialist &ndash; KarachiJob Type: Full-timePay: Rs100,000.00 - Rs180,000.00 per monthWork Location: In person

GRC Officer / Specialist

Confiz

<div>We are hiring a Senior Full Stack Engineer (Java + React) with 5+ years of experience to design, develop, and maintain scalable software solutions for Supply Chain and warehouse management. The ideal candidate will have strong expertise in Java, Spring Boot, and React, along with cloud technologies, and the flexibility to work from 2 PM to 11 PM PKT to collaborate with global teams.
Responsibilities:
<ul><li>Develop full-stack software systems to support Supply Chain services and warehouse management.
</li><li>Design, architect, and implement frontend (React) and backend (Java/Spring Boot) solutions for complex business problems.
</li><li>Ensure the delivery of high-quality, scalable, and maintainable code with proper testing.
</li><li>Document system designs and technical specifications.
</li><li>Provide on-call support for production systems owned by the team.
</li></ul>Requirements:
<ul><li>5+ years of professional experience in full-stack development (Java + React).
</li><li>Strong proficiency in Backend: Java, Spring Boot, Microservices, REST APIs and Frontend: React.js, JavaScript/TypeScript, modern UI frameworks
</li><li>Experience with distributed systems and large-scale applications.
</li><li>Expertise in incident management, debugging, and root cause analysis.
</li><li>Hands-on experience with messaging systems (Kafka) and databases (SQL/NoSQL).
</li><li>Proficiency in cloud platforms (AWS, Kubernetes); GCP is a plus.
</li><li>Familiarity with CI/CD pipelines (GitLab, Terraform), logging (New Relic, Splunk), and observability tools.
</li><li>Ability to design and articulate scalable system architectures.
</li><li>Flexibility to work from 2 PM to 11 PM PKT for team collaboration.
</li><li>Prior experience in Supply Chain is a plus.
</li></ul>We have an amazing team of 700+ individuals working on highly innovative enterprise projects &amp; products. Our customer base includes Fortune 100 retail and CPG companies, leading store chains, fast-growth fintech, and multiple Silicon Valley startups.
What makes Confiz stand out is our focus on processes and culture. Confiz is ISO 9001:2015 (QMS), ISO 27001:2022 (ISMS), ISO 20000-1:2018 (ITSM), ISO 14001:2015 (EMS), ISO 45001:2018 (OHSMS) Certified. We have a vibrant culture of learning via collaboration and making workplace fun.
People who work with us work with cutting-edge technologies while contributing success to the company as well as to themselves.
To know more about Confiz Limited, visit: https://www.linkedin.com/company/confiz-pakistan/</div>

Senior Full Stack Engineer (Java + React)

<div>We are seeking an experienced Azure Data Engineer (5+ years) with strong expertise in data warehousing on lakehouse architecture, data engineering, data quality, and governance. The ideal candidate will design and build scalable data pipelines on Microsoft Fabric, implement data quality frameworks, and operationalize governance processes using Microsoft Purview. This role combines technical delivery with data compliance, ensuring trusted and well-governed data across the organization.
Key Responsibilities
<ul><li>Design and develop batch data pipelines using Fabric Pipelines and PySpark.</li>
<li>Implement data quality rules, validation checks, and monitoring dashboards.</li>
<li>Develop data catalog, lineage, classification, and business glossary in Microsoft Purview.</li>
<li>Enforce data governance policies, standards, and best practices across Microsoft Fabric</li>
<li>Collaborate with DevOps to automate deployments using Azure DevOps.</li>
<li>Integrate data quality in CI/CD pipelines through Azure DevOps.</li>
<li>Ensure compliance with data privacy regulations (e.g., PDPL).</li>
<li>Partner with business and data stewards to improve overall data integrity and usability.</li>
</ul>
Required Skills &amp; Experience
<ul><li>5+ years of experience in data engineering, quality, and governance roles.</li>
<li>Strong hands-on experience with Azure Data Factory, Apache Spark (PySpark), and Azure Synapse/Fabric.</li>
<li>Proven expertise in Microsoft Purview for governance and catalog management.</li>
<li>Proficient in Python and SQL for data processing and validation.</li>
<li>Understanding of data quality dimensions, profiling, and cleansing techniques.</li>
<li>Strong analytical, problem-solving, and communication skills.</li>
<li>Experience with Great Expectations or similar data validation tools is a plus.</li>
</ul>
Preferred Qualifications
<ul><li>Microsoft Certified: Fabric Data Engineer Associate or equivalent certification.</li>
<li>Experience with Microsoft Fabric and AI-driven metadata or quality tools.</li>
</ul>
We have an amazing team of 700+ individuals working on highly innovative enterprise projects &amp; products. Our customer base includes Fortune 100 retail and CPG companies, leading store chains, fast-growth fintech, and multiple Silicon Valley startups.
What makes Confiz stand out is our focus on processes and culture. Confiz is ISO 9001:2015 (QMS), ISO 27001:2022 (ISMS), ISO 20000-1:2018 (ITSM), ISO 14001:2015 (EMS), ISO 45001:2018 (OHSMS) Certified. We have a vibrant culture of learning via collaboration and making workplace fun.
People who work with us work with cutting-edge technologies while contributing success to the company as well as to themselves.
To know more about Confiz Limited, visit: https://www.linkedin.com/company/confiz-pakistan/</div>

Principal Data Engineer – Data Quality & Governance

<div>We are looking for an experienced data engineer responsible for expanding and optimizing our big data pipelines. You will be working alongside other engineers and developers working on different layers of the data warehouse. Therefore, a commitment to collaborative problem solving, sophisticated design, and the creation of quality products is essential.
Responsibilities:
<ul><li>Collaborate with Big Data Solution Architects to design, prototype, implement, and optimize data ingestion pipelines so that data is shared effectively across various business systems.</li>
<li>Build &amp; maintain ETL/ELT Ingestion pipelines and analytics solutions using cloud 0technologies.</li>
<li>Ensure the design, code and procedural aspects of solution are production ready, in terms of operational, security and compliance standards.</li>
<li>Participate in day-to-day project and production delivery status meetings, and provide technical support for faster resolution of issues.</li>
<li>Work with Stakeholders and Understand their Requirements</li>
</ul>
Qualifications
<ul><li>Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field (or equivalent work experience).</li>
<li>3+ years of overall experience in data engineering &amp; data warehousing domain focusing on building large scale data pipelines</li>
<li>2+ years' experience in Big Data Distributed systems such as Microsoft Fabric, Databricks, AWS EMR</li>
<li>Strong experience in developing data pipelines using PySpark and ETL tools like ADF, Talend</li>
<li>Proficiency in Python &amp; SQL</li>
<li>Strong problems solving and critical thinking skills</li>
<li>Experience of writing effective and maintainable unit and integration tests for ingestion pipelines.</li>
<li>Working knowledge of CI/CD pipelines for deployments.</li>
<li>Working knowledge of using code version control repositories like Git.</li>
<li>Knowledge of security best practices including encryption of sensitive data, encryption at rest and encryption in flight.</li>
</ul>
We have an amazing team of 700+ individuals working on highly innovative enterprise projects &amp; products. Our customer base includes Fortune 100 retail and CPG companies, leading store chains, fast-growth fintech, and multiple Silicon Valley startups.
What makes Confiz stand out is our focus on processes and culture. Confiz is ISO 9001:2015 (QMS), ISO 27001:2022 (ISMS), ISO 20000-1:2018 (ITSM), ISO 14001:2015 (EMS), ISO 45001:2018 (OHSMS) Certified. We have a vibrant culture of learning via collaboration and making workplace fun.
People who work with us work with cutting-edge technologies while contributing success to the company as well as to themselves.
To know more about Confiz Limited, visit: https://www.linkedin.com/company/confiz-pakistan/</div>

Senior Azure Data Engineer

<div>We are seeking an experienced front-end developer to update a portal for ADA compliance. The ideal candidate will have a strong background in accessibility standards and modern web development frameworks. This role combines development and testing responsibilities&mdash;no separate QA division&mdash;so candidates must be comfortable delivering fully compliant, tested solutions.
Responsibilities
<ul><li>Implement WCAG 2.1 AA compliance (WCAG 2.2 familiarity is a plus) across the client portal.</li>
<li>Develop and enhance front-end components using: o HTML5, CSS3, JavaScript (ES6+), TypeScript o Frameworks: React, Knockout.js, Vue.js</li>
<li>Apply ARIA roles and attributes to ensure compatibility with assistive technologies.</li>
<li>Conduct manual and automated accessibility testing using tools such as axe DevTools, WAVE, and Lighthouse.</li>
<li>Perform hands-on testing with screen readers (JAWS, NVDA, VoiceOver) and other assistive technologies.</li>
<li>Document remediation steps for compliance audits, including issue descriptions, WCAG references, and verification details.</li>
<li>Collaborate with internal teams to ensure accessibility best practices are integrated into design and development workflows.</li>
</ul>
Requirements
<ul><li>Contractual role for 3 months.</li>
<li>4+ years of experience is required.</li>
<li>Proven experience making websites WCAG 2.1 AA compliant.</li>
<li>Strong understanding of accessibility principles, semantic HTML, ARIA roles, keyboard navigation, and color contrast.</li>
<li>Proficiency in React, Knockout.js, and Vue.js.</li>
<li>Familiarity with responsive and mobile-first design.</li>
<li>Ability to troubleshoot and debug accessibility issues across multiple browsers and devices.</li>
<li>Contractors must be able to work from 12PM to 9PM PKT.</li>
<li>IAAP CPACC (Certified Professional in Accessibility Core Competencies)</li>
<li>IAAP WAS (Web Accessibility Specialist)</li>
<li>IAAP CPWA (Certified Professional in Web Accessibility)</li>
<li>Experience with Azure DevOps CI/CD pipelines.</li>
<li>Knowledge of CSS preprocessors (Sass/LESS) and modern bundlers (Webpack, Vite).</li></ul> 

We have an amazing team of 700+ individuals working on highly innovative enterprise projects &amp; products. Our customer base includes Fortune 100 retail and CPG companies, leading store chains, fast-growth fintech, and multiple Silicon Valley startups.
What makes Confiz stand out is our focus on processes and culture. Confiz is ISO 9001:2015 (QMS), ISO 27001:2022 (ISMS), ISO 20000-1:2018 (ITSM), ISO 14001:2015 (EMS), ISO 45001:2018 (OHSMS) Certified. We have a vibrant culture of learning via collaboration and making workplace fun.
People who work with us work with cutting-edge technologies while contributing success to the company as well as to themselves.
To know more about Confiz Limited, visit: https://www.linkedin.com/company/confiz-pakistan/</div>

Accessibility-Focused Front-End Developer/Tester

Explore 95+ Consultant isms grc in Karachi this November. Find roles across top companies and apply now to boost your career.