Continuous-Compliance GRC Engineer for Cloud & SIEM

Arbisoft; Lahore; Vor Ort; PKR 2.500.000 - 4.500.000; Vollzeit

Benefits dieser Stelle

Restaurant on-site

Zusammenfassung

Arbisoft in Pakistan is seeking a Security GRC Engineer with 3–5 years' experience to design and automate a unified security program. The role focuses on continuous compliance, cloud audits, and security-by-design across ISO 27001, SOC 2, and NIST standards.

You will lead audits, build evidence pipelines, tune SIEMs, oversee incident response, and drive secure DevOps with AI-enabled automation. This is a hands-on, cross-functional role that collaborates with engineering, product, and security

Qualifikationen

• BS in Computer Science, Software Engineering, or Cybersecurity.
• ISO 27001 Lead Implementer or Auditor certification preferred.
• Hands-on experience scaling SOC 2, ISO 27001, and ISO 27701 in modern tech stacks.
• SIEM mastery with Wazuh, ELK, QRadar, or Panther to reduce false positives.

Aufgaben

• Maintain and evolve ISMS (ISO 27001 and SOC 2) with automated evidence pipelines.
• Lead technical risk assessments and threat modeling sessions.
• Perform cloud and enterprise application audits against ISO, SOC, and NIST standards.
• Advise engineering teams on Security by Design and MDM policy requirements.
• Update security policies using incident post-mortems and blue-team insights.
• Oversee MDM strategy and remediation of reported vulnerabilities.
• Implement static code analysis processes and secure credential handling.

Kenntnisse

GRC automation

ISO 27001

SOC 2

Threat modeling

Incident response

Security awareness

Communication

AI automation

Ausbildung

BS in CS/SE/Cybersecurity

Tools

Wazuh

ELK

QRadar

Panther

Jobbeschreibung

Arbisoft in Pakistan is seeking a Security GRC Engineer with 3–5 years' experience to design and automate a unified security program. The role focuses on continuous compliance, cloud audits, and security-by-design across ISO 27001, SOC 2, and NIST standards.

You will lead audits, build evidence pipelines, tune SIEMs, oversee incident response, and drive secure DevOps with AI-enabled automation. This is a hands-on, cross-functional role that collaborates with engineering, product, and security