Assistant Manager: GRC & Compliance

Arpatech (Pvt) Ltd; Karachi Division; On-site; PKR 1,674,000 - 2,790,000; Full time

Job summary

A cybersecurity firm in Karachi seeks a leader for its Security Operations Center to oversee operations, manage incident response, and ensure compliance with ISO 27001, NIST, and GDPR. The ideal candidate holds GCIA or GCDA certifications and has a strong background in threat detection and risk assessment. Responsibilities include analyzing traffic patterns for breaches, managing SIEM operations, and ensuring adherence to security compliance standards. Join a dynamic team committed to securing operations and governance.

Qualifications

• GCIA (GIAC Certified Intrusion Analyst) or GCDA (GIAC Certified Detection Analyst) required.
• Proficiency in SIEM platforms (Wazuh), log analysis, and risk assessment methodologies needed.

Responsibilities

• Oversee the Security Operations Center and manage the SIEM for real-time threat detection.
• Lead the team in analyzing traffic patterns and logs to identify sophisticated breaches.
• Own the GRC function, ensuring compliance with ISO 27001, NIST, and GDPR.

Skills

Threat detection

Risk assessment methodologies

Log analysis

Incident management

Governance compliance

Education

Bachelor’s/Master’s in Information Systems or related field

Tools

SIEM platforms (Wazuh preferred)

Job description

Role Overview:

Oversee the defensive operations and the strategic governance of the organization. Look after SOC to ensure proactive threat detection while maintaining the organization's compliance with global standards.

Role & Responsibilities:

• SOC & Monitoring: Oversee the Security Operations Center and manage the SIEM (Wazuh preferred) for real-time threat detection.
• Intrusion Analysis: Lead the team in analyzing traffic patterns and logs to identify sophisticated breaches.
• Governance & Risk: Own the GRC function, ensuring compliance with ISO 27001, NIST, and GDPR.
• SDLC Governance: Audit the SDLC process to ensure that security requirements and compliance standards are documented and followed by engineering teams.
• Incident Management: Act as the lead for incident response and post-mortem analysis.

Requirements:

• Mandatory Certifications: GCIA (GIAC Certified Intrusion Analyst) or GCDA (GIAC Certified Detection Analyst). CISM or CISA is a plus.
• Technical Skills: Proficiency in SIEM platforms (Wazuh), log analysis, and risk assessment methodologies.
• Education: Bachelor’s/Master’s in Information Systems or related field.
• Focus: Defense Operations, Risk Management, and Regulatory Alignment.