Cyber & Information Security Specialist

Oxiliry; Hyderabad City Taluka, Karachi Division; On-site; PKR 13,939,225 - 19,514,915; Full time

Job summary

Oxiliry in Hyderabad, Pakistan is seeking a Cyber & Information Security Specialist to protect systems, data, and processes. The candidate will conduct security assessments, implement controls, and ensure compliance with standards like SOC 2 and ISO 27001. Requirements include 3-5 years of experience in cybersecurity, a relevant bachelor's degree, and strong communication skills. Preferred certifications are CISSP, CISM, CEH. The role supports the creation of a robust internal security function.

Qualifications

• 3-5 years of experience in cybersecurity, IT security, or information security.
• Proven experience implementing SOC 2, ISO 27001, or other compliance frameworks.
• Solid understanding of network security, cloud security (AWS/Azure/GCP), and endpoint protection.

Responsibilities

• Conduct risk assessments, vulnerability assessments, penetration testing, and security monitoring.
• Implement and maintain security controls across networks, servers, and cloud.
• Lead implementation of compliance frameworks such as SOC 2, ISO 27001, GDPR, HIPAA.

Skills

Cybersecurity

IT security

Information security

Risk assessments

Compliance frameworks (SOC 2, ISO 27001)

Network security

Cloud security (AWS, Azure, GCP)

Soft skills

Education

Bachelor’s degree in Cybersecurity/IT/Computer Science

Tools

SIEM

Endpoint protection

Vulnerability management

Job description

Hyderabad, Pakistan | Posted on 03/19/2026

We are looking for a Cyber & Information Security Specialist to protect our systems, data, and processes. The ideal candidate will implement security controls, perform risk assessments, and actively secure our environment while ensuring compliance with global standards such as SOC 2, ISO 27001, GDPR, and HIPAA.

Key Responsibilities

• Conduct risk assessments, vulnerability assessments, penetration testing, and security monitoring
• Implement and maintain security controls across networks, servers, and cloud
• Develop and enforce security policies, incident response plans, and data protection procedures
• Lead implementation of compliance frameworks such as SOC 2, ISO 27001, GDPR, HIPAA
• Ensure data protection, privacy, and governance best practices across the organization
• Understand DevOps and engineering workflows to ensure secure development
• Solid understanding of network, application, and cloud security (AWS, Azure, or GCP)
• Set up and manage security tools (endpoint protection, access controls, logging, monitoring)
• Prepare for audits and certifications, including documentation and evidence collection
• Collaborate with teams to enforce secure architecture and practices
• Train staff and IT team on security best practices and awareness
• Gradually build and mentor a small internal security function from IT staff
• Stay up-to-date on emerging cybersecurity threats and industry trends

Qualifications & Requirements

• 3–5 years of experience in cybersecurity, IT security, or information security
• Proven experience implementing SOC 2, ISO 27001, or other compliance frameworks (not just auditing)
• Solid understanding of network security, cloud security (AWS/Azure/GCP), and endpoint protection
• Experience with access control, SIEM, vulnerability management, and incident response
• Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related field (Master’s preferred)
• Preferred Certifications: CISSP, CISM, CEH, ISO 27001 Lead Implementer/Auditor

Soft Skills

• Self-starter with a practical problem-solving mindset
• Good English proficiency and strong communication skills
• Ability to balance security with business needs
• Strong analytical and problem-solving skills
• Location: Hyderabad (preferred) or Karachi