Governance, Risk, and Compliance (GRC) Specialist

NETSOL Technologies Inc.; Lahore; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

NETSOL Technologies Inc. in Lahore, Pakistan is seeking an Information Security Auditor to perform audits, develop testing plans, and implement risk-controlled procedures.

You will help measure security posture, create metrics, and contribute to the training of staff on information security best practices. The role requires extensive knowledge of ISO standards (27001/27005/27701/20000/22301) and SOC2, plus a track record in risk management and policy documentation.

Qualifications

• Bachelor degree in information security related field or equivalent experience.
• CISA, CISM, or CISSP certification required or equivalent.
• Strong knowledge of ISO 27001/27005/27701/20000/22301 and SOC2 standards is essential.
• Excellent verbal and written communication skills and strong interpersonal abilities.

Responsibilities

• Perform information security audits.
• Develop and maintain security testing plans.
• Develop meaningful metrics to reflect the true posture of information security to make educated decisions based on risk.
• Assist with development and delivery of security awareness training.
• Carry out risk assessments, identifying controls and monitoring controls against objectives and KPI metrics.
• Document, update, and implement security policies, procedures, and other related documents.
• Inform and advise team members about obligations to comply with GDPR and other data protection laws.

Skills

ISO 27001

ISO 27005

ISO 27701

ISO 20000

ISO 22301

SOC2

Risk management

Verbal communication

Written communication

Interpersonal skills

Education

B.S. in Computer Science or Information Systems

CISA/CISM/CISSP certification

5+ years process documentation experience

Job description

Job Description

• Perform information security audits
• Develop and maintain security testing plans
• Develop meaningful metrics to reflect the true posture of the information security to make educated decisions based on risk
• Assist with development and delivery of security awareness training
• Carry out risk assessments, identifying controls and monitoring controls against objectives and KPI metrics
• Document, update, and implement security policies, procedures, and other related documents
• Inform and advise team members about obligations to comply with the GDPR and other data protection laws

Required skills and qualifications:

• In-depth knowledge of ISO 27001, ISO 27005, ISO 27701, ISO 20000, ISO 22301 and SOC2 standards
• In-depth knowledge of Information Security Risk Management lifecycle
• B.S. in Computer Science or Information Systems
• Minimum 5+ years of process documentation experience
• CISA, CISM, or CISSP certified
• Strong knowledge of IT systems, IT technologies, etc.
• Excellent verbal and written communication skills
• Good interpersonal skills