Governance, Risk, and Compliance (GRC) Specialist

NETSOL Technologies Inc.; Lahore; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

NETSOL Technologies Inc. in Lahore, Pakistan, seeks an experienced information security professional to lead risk management, develop security testing plans, and drive compliance with ISO standards and SOC2.

You will develop metrics, support security awareness training, and perform risk assessments to monitor controls against KPI objectives. The role requires 5+ years of documentation experience, strong communication skills, and the ability to craft and update security policies and procedures in

Qualifications

• In-depth knowledge of ISO 27001, ISO 27005, ISO 27701, ISO 20000, ISO 22301 and SOC2 standards.
• In-depth knowledge of Information Security Risk Management lifecycle.
• B.S. in Computer Science or Information Systems.
• Minimum 5+ years of process documentation experience.
• CISA, CISM, or CISSP certified.
• Strong knowledge of IT systems, IT technologies, etc.
• Excellent verbal and written communication skills.

Responsibilities

• Develop and maintain security testing plans.
• Develop meaningful metrics to reflect the true posture of the information security to make educated decisions based on risk.
• Assist with development and delivery of security awareness training.
• Carry out risk assessments, identifying controls and monitoring controls against objectives and KPI metrics.
• Document, update, and implement security policies, procedures, and other related documents.
• Inform and advise team members about obligations to comply with the GDPR and other data protection laws.

Skills

ISO 27001

ISO 27005

ISO 27701

ISO 20000

ISO 22301

SOC2

Risk management lifecycle

CISA

CISM

CISSP

IT systems knowledge

Communication skills

Education

B.S. in Computer Science or Information Systems

5+ years process documentation experience

Job description

• Develop and maintain security testing plans
• Develop meaningful metrics to reflect the true posture of the information security to make educated decisions based on risk
• Assist with development and delivery of security awareness training
• Carry out risk assessments, identifying controls and monitoring controls against objectives and KPI metrics
• Document, update, and implement security policies, procedures, and other related documents
• Inform and advise team members about obligations to comply with the GDPR and other data protection laws

Required skills and qualifications:

• In-depth knowledge of ISO 27001, ISO 27005, ISO 27701, ISO 20000, ISO 22301 and SOC2 standards
• In-depth knowledge of Information Security Risk Management lifecycle
• B.S. in Computer Science or Information Systems
• Minimum 5+ years of process documentation experience
• CISA, CISM, or CISSP certified
• Strong knowledge of IT systems, IT technologies, etc.
• Excellent verbal and written communication skills