Cyber Security Technical Consultant / Security Specialist

AURMAK LIMITED; Pakistan; On-site; PKR 2,000,000 - 4,000,000; Full time

Job summary

AURMAK LIMITED is seeking an experienced Cyber Security professional to help organisations assess cyber risks, strengthen security controls, and implement industry best practices. This role provides technical and advisory support by assessing cyber risks, reviewing IT environments, designing security controls, and helping organisations improve their security posture.

The successful candidate will conduct comprehensive assessments, map controls to ISO 27001, NIST CSF, CIS Controls, and PCI DSS,

Qualifications

• 4–8 years of experience in Cyber Security, Information Security, Network Security, Cloud Security, Security Engineering, GRC, or Technical Consulting.

Responsibilities

• Conduct cyber and information security assessments across IT infrastructure, cloud, applications, identity, endpoint, network, and third-party environments.
• Identify security risks, control weaknesses, gaps, and practical mitigation options.
• Support ISO 27001, NIST CSF, CIS Controls, PCI DSS, and local regulatory readiness activities.
• Review existing technical architectures and recommend secure design improvements.
• Support solution design for security technologies such as IAM, MFA, firewalls, EDR, SIEM, vulnerability management, backup/recovery, DLP, email security, and cloud security controls.
• Produce clear risk reports, gap assessments, control recommendations, and implementation roadmaps.
• Run client workshops to gather requirements, explain findings, and agree remediation priorities.
• Support incident response preparation, security policies, risk registers, asset classification, and control mapping.

Skills

Cyber Security

Information Security

Network Security

Cloud Security

Security Engineering

GRC

Technical Consulting

Job description

We are looking for an experienced Cyber Security professional to help organisations assess cyber risks, strengthen security controls, and implement industry best practices. This role provides technical and advisory support to clients by assessing cyber risks, reviewing IT environments, designing security controls, and helping organisations improve their security posture. The right candidate combines a strong technical background in IT, networks, cloud, infrastructure, or security engineering with a practical understanding of frameworks, risks, controls, mitigation, and secure solution design.

Responsibilities

• Conduct cyber and information security assessments across IT infrastructure, cloud, applications, identity, endpoint, network, and third-party environments.
• Identify security risks, control weaknesses, gaps, and practical mitigation options.
• Support ISO 27001, NIST CSF, CIS Controls, PCI DSS, and local regulatory readiness activities.
• Review existing technical architectures and recommend secure design improvements.
• Support solution design for security technologies such as IAM, MFA, firewalls, EDR, SIEM, vulnerability management, backup/recovery, DLP, email security, and cloud security controls.
• Produce clear risk reports, gap assessments, control recommendations, and implementation roadmaps.
• Run client workshops to gather requirements, explain findings, and agree remediation priorities.
• Support incident response preparation, security policies, risk registers, asset classification, and control mapping.

Requirements

• 4–8 years of experience in Cyber Security, Information Security, Network Security, Cloud Security, Security Engineering, GRC, or Technical Consulting.
• Strong knowledge of security frameworks such as ISO 27001, NIST CSF, CIS Controls, and PCI DSS.
• Experience conducting security assessments, risk analysis, architecture reviews, and security solution design.
• Excellent analytical, documentation, and client-facing consulting skills.
• Strong understanding of IT stacks, including networks, servers, endpoints, cloud platforms, identity systems, databases, and business applications.
• Practical knowledge of network security, identity and access management, endpoint and server security, security monitoring, and data protection.
• Able to explain technical risk in plain English and recommend controls that fit the client's size, budget, and maturity.