global compliance & reporting - consultant/senior consultant - karachi - pakistan Jobs in Karachi Jobs In Karachi Jobs In Karachi Pakistan

global compliance & reporting - consultant/senior consultant - karachi - pakistan

implementation consultant Jobs in Karachi Jobs In Karachi Jobs In Karachi Pakistan

implementation consultant

(remote) information security & grc analyst (mid-level) Jobs in Karachi Jobs In Karachi Jobs In Karachi Pakistan

(remote) information security & grc analyst (mid-level)

consultant - isms/grc Jobs in Karachi Jobs In Karachi Jobs In Karachi Pakistan

consultant - isms/grc

consultant - resource mobilization Jobs in Karachi Jobs In Karachi Jobs In Karachi Pakistan

consultant - resource mobilization

consultant isms grc

Inbox Business Technologies

<div>Job Summary:
We are seeking a Consultant with proven experience in implementing and maintaining ISO 27001-based Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC) frameworks. The ideal candidate will have hands-on expertise in ISO 27001 gap assessments, risk assessments, policy development, and certification audit preparation, along with working knowledge of standards such as NIST, NCA, SAMA, COBIT, and ITIL. This role involves supporting compliance programs, developing security controls, conducting awareness training, and assisting clients in aligning IT strategies with regulatory requirements including GDPR, HIPAA, and PCI-DSS. Strong documentation, auditing, and communication skills are essential.<h3 class="jobSectionHeader">
Job Description:</h3>
ISMS Responsibilities:<ul><li>
Experience of implementation and maintenance of ISO 27001-based Information Security Management Systems (ISMS).</li><li>
Perform gap assessments to identify areas of non-compliance and assist in remediation planning against various standards &amp; frameworks like, NIST, NCA, SAMA etc.</li><li>
Participate in risk assessments and help develop mitigation strategies.</li><li>
Developing ISMS policies, procedures, and security controls aligned with ISO 27001 standards.</li><li>
Prepare documentation and provide support during ISO 27001 certification audits.</li><li>
Conduct security awareness training and incident management processes.</li></ul>
IT GRC Responsibilities:<ul><li>
Assist in developing and implementing IT governance frameworks (COBIT, NIST, ITIL).</li><li>
Support IT risk assessments, compliance audits, and regulatory reporting activities.</li><li>
Help clients align IT strategies with their business goals while ensuring compliance with regulations like COBIT, GDPR, HIPAA, SOX, etc.</li><li>
Support in developing and maintaining IT compliance programs and policies.</li><li>
Contribute to the development and implementation of GRC tools and processes.</li><li>
Participate in internal audits and help clients prepare for external certification audits/compliance checks.</li></ul>
Requirements<ul><li>
Minimum Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field.</li><li>
Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, or COBIT Foundation.</li><li>
Experience: 3&ndash;4 years of experience in ISMS and IT GRC consulting, auditing, or implementation.</li><li>
Familiarity with ISO 27001 gap assessments, risk assessments, and audits.</li><li>
Basic knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).</li><li>
Understanding of regulatory compliance such as GDPR, NIST, and PCI-DSS.</li><li>
Strong documentation, report writing, and communication skills is a must.</li></ul></div>

Consultant - ISMS/GRC

<div>We are seeking a highly experienced Senior Consultant with strong expertise in Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC). The ideal candidate should have a proven track record of implementing and auditing ISO 27001, developing and designing IT GRC frameworks based on COBIT, NIST, and conducting risk assessments to ensure compliance with industry standards and regulations, like GDPR, SAMA, NESA, NCA, PDPL etc.
Job Description:
ISMS Responsibilities:<ul><li>
Lead the implementation, management, and auditing of ISO 27001-based Information Security Management Systems (ISMS).</li><li>
Perform gap assessments to identify areas of non-compliance and develop corrective action plans.</li><li>
Conduct risk assessments and ensure risk mitigation strategies are aligned with business objectives.</li><li>
Develop and refine ISMS policies, procedures, and controls in compliance with ISO 27001 and other relevant standards.</li><li>
Support clients in achieving and maintaining ISO 27001 certification, including audit readiness.</li><li>
Provide guidance on security incident management and business continuity planning.</li></ul>
IT GRC Responsibilities:<ul><li>
Develop and implement IT governance frameworks based on COBIT, NIST, and other best practices.</li><li>
Conduct IT risk assessments and define risk treatment plans.</li><li>
Ensure compliance with regulatory requirements such as GDPR, NIST, GDPR, and local cybersecurity regulations.</li><li>
Design and implement IT compliance and risk management programs, policies, and controls.</li><li>
Provide advisory services on third-party/vendor risk management.</li><li>
Assist organizations in aligning IT strategy with business objectives through effective governance practices.</li></ul>
Requirements<ul>
<li>Master&rsquo;s or Bachelor&rsquo;s degree in Information Security, Computer Science, or IT-related field.</li>
<li>Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, CISSP, CISA, or COBIT 2019 Foundation.</li>
<li>Experience: Minimum 6&ndash;8 years of experience in ISMS and IT GRC consulting, implementation, or auditing.</li>
<li>Hands-on experience in conducting ISO 27001 gap assessments, risk assessments, and audits.</li>
<li>Strong practical knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).</li>
<li>Experience in handling regulatory compliance requirements such as GDPR, NIST, and PCI-DSS.</li>
<li>Excellent report writing, communication, and stakeholder management skills.</li></ul></div>

Senior Consultant - ISMS/GRC

SuperNova Solutions Pvt. Ltd.

Position Title: GRC Officer / SpecialistWe are seeking a proactive and detail-oriented GRC Officer / Analyst / Specialist to join our Governance, Risk &amp; Compliance (GRC) team. The ideal candidate will play a key role in ensuring that our SAP systems, processes, and IT operations comply with international governance, security, and risk management standards.Key Responsibilities:<ul><li>Conduct IT and SAP-related risk assessments, ensuring alignment with corporate governance frameworks</li></ul><ul><li>Support SAP GRC module configuration and compliance monitoring activities</li></ul><ul><li>Maintain and update ISO 27001, SOC 2, and SAP security compliance documentation</li></ul><ul><li>Monitor risk registers and ensure adherence to IT security and data protection policies</li></ul><ul><li>Participate in internal audits, SAP access reviews, and client compliance assessments</li></ul><ul><li>Prepare audit evidence, compliance reports, and risk documentation related to SAP environments</li></ul><ul><li>Collaborate with cross-functional teams (Basis, Security, and Functional Consultants) to ensure SAP compliance</li></ul>Required Skills &amp; Qualification:* Education: Bachelor&rsquo;s degree in Computer Science, Information Systems, or Business Administration* Experience: 2&ndash;4 years in IT compliance, audit, or risk management (experience with SAP systems or GRC tools preferred)* Strong understanding of ISO 27001, SOC 2, GDPR, or NIST frameworks* Familiarity with SAP GRC Access Control, Process Control, or Risk Management modules is a plus* Excellent communication, documentation, and analytical skills* Certifications such as SAP GRC, ISO 27001 Lead Implementer, or CISA are advantageousLocation: KarachiTo apply: careers@global-supernova.comSubject Line: GRC Officer / Specialist &ndash; KarachiJob Type: Full-timePay: Rs100,000.00 - Rs180,000.00 per monthWork Location: In person

GRC Officer / Specialist

National Foods Limited

<div>
 At National Foods Limited, we are on a journey of growth and on building our most valuable assets which include our brands, financial strength, global presence, and our unbridled commitment to becoming a truly sustainable and a renowned company in the world.
 
 
 
 Job Purpose
 
 
 
 The Assistant Manager &ndash; SAP Basis Administration is responsible for ensuring the stable, secure, and efficient operation of the organization&rsquo;s SAP Cloud landscape, including SAP S/4HANA RISE and associated cloud solutions such as GRC IAG, SAP Analytics Cloud (SAC), SuccessFactors and etc.
 
 
 This role will focus on access governance, license compliance, SoD (Segregation of Duties) monitoring, and coordination with SAP Managed Cloud services and functional teams to maintain system reliability and compliance with corporate IT governance standards.
 
 
 
 Job Responsibilities
 
 
 
 <ul>
 <li>
 SAP Cloud Landscape Management
 </li>
 <li>
 Manage day-to-day operations of SAP S/4HANA RISE and integrated SAP Cloud solutions.
 </li>
 <li>
 Monitor system performance, uptime, and capacity using SAP Cloud ALM and other monitoring tools.
 </li>
 <li>
 Coordinate with SAP RISE operations team for incident resolution, patching, and version upgrades.
 </li>
 <li>
 Maintain up-to-date documentation for architecture, configurations, and system changes.
 </li>
 <li>
 Support transport management and release coordination across the SAP Cloud landscape.
 </li>
 <li>
 Security and Access Governance
 </li>
 <li>
 Manage user access and role provisioning across SAP S/4HANA Cloud, GRC IAG, SAC, and SuccessFactors.
 </li>
 <li>
 Implement and maintain SoD (Segregation of Duties) compliance through SAP GRC IAG.
 </li>
 <li>
 Conduct periodic user access reviews and remediation of access conflicts.
 </li>
 <li>
 Ensure compliance with internal security policies and SAP Cloud access standards.
 </li>
 <li>
 License and Compliance Management
 </li>
 <li>
 Monitor SAP license usage and compliance under the RISE agreement and across cloud products.
 </li>
 <li>
 Coordinate with SAP and internal stakeholders for license audits, user classification, and optimization.
 </li>
 <li>
 Maintain documentation and evidence for internal and external audits.
 </li>
 <li>
 Support adherence to IT governance frameworks and corporate compliance policies.
 </li>
 <li>
 Vendor and Stakeholder Coordination
 </li>
 <li>
 Liaise with SAP RISE Operations and AMS partners for technical support, issue resolution, and change management.
 </li>
 <li>
 Collaborate with internal functional and governance teams to align system performance with business requirements.
 </li>
 <li>
 Participate in planning and execution of new releases, feature enablement, and optimization initiatives.
 </li>
 <li>
 Documentation and Reporting
 </li>
 <li>
 Maintain detailed records of system configurations, incidents, and access management activities.
 </li>
 <li>
 Prepare periodic system health, compliance, and license utilization reports.
 </li>
 <li>
 Provide timely data and documentation for internal governance reviews and audits Support change management and incident resolution.
 
 
 </li>
 </ul>
 
 Key Deliverables
 
 
 
 <ul>
 <li>
 Stable and compliant SAP Cloud environment with minimal downtime.
 </li>
 <li>
 Up-to-date access control matrix and SoD compliance reports.
 </li>
 <li>
 Accurate and timely SAP license utilization tracking.
 </li>
 <li>
 Audit readiness and adherence to IT governance standards.
 </li>
 <li>
 Effective collaboration with SAP RISE support and business stakeholders.
 
 
 </li>
 </ul>
 
 Minimum Qualifications And Experience
 
 
 
 <ul>
 <li>
 Education: Bachelor&rsquo;s degree in computer science, Information Technology, or related field.
 </li>
 <li>
 Experience: 3&ndash;5 years of experience in SAP Basis or SAP Cloud Administration, with at least 2 years in SAP S/4HANA RISE environment.
 </li>
 <li>
 Practical knowledge of SAP GRC IAG, SAP Analytics Cloud (SAC), and SuccessFactors.
 </li>
 <li>
 Experience in SAP Cloud ALM monitoring and incident/change management workflows.
 </li>
 <li>
 Familiarity with SAP license compliance, SoD governance, and IT audit standards.
 
 
 </li>
 </ul>
 
 Professional Knowledge And Certifications
 
 
 
 <ul>
 <li>
 In-depth knowledge of SAP S/4HANA RISE and SAP Cloud architecture.
 </li>
 <li>
 Strong understanding of access management, SoD controls, and compliance frameworks.
 </li>
 <li>
 Proficiency in system monitoring and troubleshooting within SAP Cloud environment.
 </li>
 <li>
 Excellent analytical, coordination, and communication skills.
 </li>
 <li>
 Ability to prioritize tasks and manage multiple initiatives in a fast-paced environment.
 
 
 </li>
 </ul>
 
 Location:
 
 
 
 Karachi, Pakistan.
 
 
 National Foods Limited provides equal employment opportunity (EEO) to all persons regardless of age, color, origin, physical or mental disability, race, religion, creed, gender, marital status, status with regard to public assistance or any other characteristic protected by federal, state or local laws.
</div>

AM Basis Administrator

Teamficient

Information Security &amp; GRC Analyst (Mid-Level)Company: TeamFicient Location: Remote Employment Type: Full-Time Salary Range: To be discussed (Negotiable for highly experienced candidates)Work Schedule:<ul><li>Time Range: Between 7 AM &ndash; 7 PM CST (Graveyard shift)</li><li>Working Hours: 9 hours per day (8 working hours + 1-hour break)</li><li>Days Off: TBD (2 days per week)</li></ul>Why Join Us?<ul><li>Competitive salary based on experience.</li><li>Opportunity to grow within an international, people-first organization.</li><li>Supportive work environment that values innovation, inclusion, and career growth.</li></ul>Position OverviewThis role bridges Information Security Governance and Technical Compliance for our MDR + Compliance platform.The Information Security &amp; GRC Analyst ensures alignment with frameworks such as ISO 27001, SOC 2 Type II, NIST CSF 2.0, GDPR, HIPAA, and PCI DSS, translating requirements into technical implementation tasks for engineering teams and maintaining audit readiness.Key Responsibilities<ul><li>Build and maintain the Control Matrix and Statement of Applicability across frameworks.</li><li>Perform risk and gap assessments, maintain the risk register, and treatment plans.</li><li>Map framework controls to technical configurations (Azure, AWS, EDR, CI/CD).</li><li>Collect and validate audit evidence (logs, reports, approvals, tickets).</li><li>Draft and update policies: Access Control, Incident Response, Secure Development, and Vendor Risk Management.</li><li>Support data privacy and AI governance tasks (LLM usage, data segregation).</li><li>Prepare for external audits and track corrective actions.</li><li>Conduct internal security awareness training sessions.</li></ul>Qualifications &amp; Must-Haves<ul><li>3&ndash;5 years of experience in Information Security or GRC.</li><li>Deep knowledge of ISO 27001, SOC 2 Type II, NIST CSF 2.0, GDPR, HIPAA, PCI DSS, ADHICS.</li><li>Familiar with cloud security controls (Azure Defender, AWS Security Hub).</li><li>Strong documentation, communication, and policy writing skills.</li><li>Experience using compliance automation tools (Drata, Vanta, Secureframe).</li></ul>Tech Stack &amp; Frameworks:<ul><li>ISO 27001, SOC 2 Type II, NIST CSF 2.0, GDPR, HIPAA, PCI DSS, ADHICS, Azure Security Center, AWS Config, Drata, Vanta, ClickUp, Google Workspace</li></ul>Education:<ul><li>Bachelor&rsquo;s or Master&rsquo;s in Information Security, Computer Science, or Cybersecurity Governance.</li><li>ISO 27001 Lead Implementer/Auditor or equivalent certification preferred.</li></ul>Technical/System Requirements<ul><li>Desktop or laptop with Intel Core i7 / i9 or AMD Ryzen 7 / 9 (or higher) processor</li><li>Minimum 32GB RAM for multitasking and large file handling</li><li>NVIDIA RTX or AMD Radeon Pro graphics card (recommended)</li><li>Workstation free from noise and distractions</li><li>Stable primary internet connection and backup internet</li><li>USB headset with noise-cancelling microphone</li><li>Backup power source (generator, UPS, or accessible alternative workspace during outages)</li></ul>This is a long-term opportunity for an experienced IT professional who is ready to take on a leadership role in a fast-paced, global organization.Join TeamFicient and help build efficient, secure, and scalable IT operations that empower teams to perform at their best.Job Type: Full-timeApplication Question(s):<ul><li>What is your expected monthly salary for this position (in PKR)?</li></ul>Work Location: Remote

(REMOTE) Information Security & GRC Analyst (Mid-Level)

Confiz

<div>We are hiring a Senior Full Stack Engineer (Java + React) with 5+ years of experience to design, develop, and maintain scalable software solutions for Supply Chain and warehouse management. The ideal candidate will have strong expertise in Java, Spring Boot, and React, along with cloud technologies, and the flexibility to work from 2 PM to 11 PM PKT to collaborate with global teams.
Responsibilities:
<ul><li>Develop full-stack software systems to support Supply Chain services and warehouse management.
</li><li>Design, architect, and implement frontend (React) and backend (Java/Spring Boot) solutions for complex business problems.
</li><li>Ensure the delivery of high-quality, scalable, and maintainable code with proper testing.
</li><li>Document system designs and technical specifications.
</li><li>Provide on-call support for production systems owned by the team.
</li></ul>Requirements:
<ul><li>5+ years of professional experience in full-stack development (Java + React).
</li><li>Strong proficiency in Backend: Java, Spring Boot, Microservices, REST APIs and Frontend: React.js, JavaScript/TypeScript, modern UI frameworks
</li><li>Experience with distributed systems and large-scale applications.
</li><li>Expertise in incident management, debugging, and root cause analysis.
</li><li>Hands-on experience with messaging systems (Kafka) and databases (SQL/NoSQL).
</li><li>Proficiency in cloud platforms (AWS, Kubernetes); GCP is a plus.
</li><li>Familiarity with CI/CD pipelines (GitLab, Terraform), logging (New Relic, Splunk), and observability tools.
</li><li>Ability to design and articulate scalable system architectures.
</li><li>Flexibility to work from 2 PM to 11 PM PKT for team collaboration.
</li><li>Prior experience in Supply Chain is a plus.
</li></ul>We have an amazing team of 700+ individuals working on highly innovative enterprise projects &amp; products. Our customer base includes Fortune 100 retail and CPG companies, leading store chains, fast-growth fintech, and multiple Silicon Valley startups.
What makes Confiz stand out is our focus on processes and culture. Confiz is ISO 9001:2015 (QMS), ISO 27001:2022 (ISMS), ISO 20000-1:2018 (ITSM), ISO 14001:2015 (EMS), ISO 45001:2018 (OHSMS) Certified. We have a vibrant culture of learning via collaboration and making workplace fun.
People who work with us work with cutting-edge technologies while contributing success to the company as well as to themselves.
To know more about Confiz Limited, visit: https://www.linkedin.com/company/confiz-pakistan/</div>

Senior Full Stack Engineer (Java + React)

<div>We are seeking an experienced Azure Data Engineer (5+ years) with strong expertise in data warehousing on lakehouse architecture, data engineering, data quality, and governance. The ideal candidate will design and build scalable data pipelines on Microsoft Fabric, implement data quality frameworks, and operationalize governance processes using Microsoft Purview. This role combines technical delivery with data compliance, ensuring trusted and well-governed data across the organization.
Key Responsibilities
<ul><li>Design and develop batch data pipelines using Fabric Pipelines and PySpark.</li>
<li>Implement data quality rules, validation checks, and monitoring dashboards.</li>
<li>Develop data catalog, lineage, classification, and business glossary in Microsoft Purview.</li>
<li>Enforce data governance policies, standards, and best practices across Microsoft Fabric</li>
<li>Collaborate with DevOps to automate deployments using Azure DevOps.</li>
<li>Integrate data quality in CI/CD pipelines through Azure DevOps.</li>
<li>Ensure compliance with data privacy regulations (e.g., PDPL).</li>
<li>Partner with business and data stewards to improve overall data integrity and usability.</li>
</ul>
Required Skills &amp; Experience
<ul><li>5+ years of experience in data engineering, quality, and governance roles.</li>
<li>Strong hands-on experience with Azure Data Factory, Apache Spark (PySpark), and Azure Synapse/Fabric.</li>
<li>Proven expertise in Microsoft Purview for governance and catalog management.</li>
<li>Proficient in Python and SQL for data processing and validation.</li>
<li>Understanding of data quality dimensions, profiling, and cleansing techniques.</li>
<li>Strong analytical, problem-solving, and communication skills.</li>
<li>Experience with Great Expectations or similar data validation tools is a plus.</li>
</ul>
Preferred Qualifications
<ul><li>Microsoft Certified: Fabric Data Engineer Associate or equivalent certification.</li>
<li>Experience with Microsoft Fabric and AI-driven metadata or quality tools.</li>
</ul>
We have an amazing team of 700+ individuals working on highly innovative enterprise projects &amp; products. Our customer base includes Fortune 100 retail and CPG companies, leading store chains, fast-growth fintech, and multiple Silicon Valley startups.
What makes Confiz stand out is our focus on processes and culture. Confiz is ISO 9001:2015 (QMS), ISO 27001:2022 (ISMS), ISO 20000-1:2018 (ITSM), ISO 14001:2015 (EMS), ISO 45001:2018 (OHSMS) Certified. We have a vibrant culture of learning via collaboration and making workplace fun.
People who work with us work with cutting-edge technologies while contributing success to the company as well as to themselves.
To know more about Confiz Limited, visit: https://www.linkedin.com/company/confiz-pakistan/</div>

Principal Data Engineer – Data Quality & Governance

Explore 82+ Consultant isms grc in Karachi Jobs In Karachi Jobs In Karachi Pakistan this November. Find roles across top companies and apply now to boost your career.