GRC Analyst

Alykas; Karachi Division; On-site; PKR 1,200,000 - 2,200,000; Full time

Benefits offered by this job

Company-sponsored certifications

Ongoing professional development

Unlimited lab access

Job summary

Alykas in Karachi is seeking an experienced GRC Analyst to support US-based clients onsite. The role demands hands-on experience with US compliance frameworks and relevant certifications, with duties spanning risk assessments and audit coordination.

The candidate should have 4–5 years in governance, risk, compliance, and security auditing, plus strong documentation and client communication skills. Onsite night shift and bold leadership are expected.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, IT, or related field.
• 4–5 years experience in Governance, Risk, Compliance and security auditing.
• Experience with US-based regulatory and compliance frameworks preferred.
• Certifications such as CISA, CISM, CISSP, CRISC, ISO/IEC 27001 Lead Auditor/Lead Implementer, PCI-QSA.

Responsibilities

• Conduct enterprise-level risk assessments and maintain risk registers.
• Develop and implement security policies aligned with US compliance standards.
• Support compliance programs for SOC 2, NIST, CMMC, HIPAA, PCI DSS, and ISO 27001.
• Coordinate internal and external audits.
• Perform third-party/vendor risk assessments.
• Track remediation efforts and ensure timely closure.
• Support clients in certification readiness and audit preparation.

Skills

Risk assessment

Documentation

Client communication

Cybersecurity frameworks

Education

Bachelor's degree in Cybersecurity or related field

Job description

Karachi Based Job!!We are looking for an experienced

• Position: GRC Analyst (Certified – Mandatory)
• Experience: 4–5 years
• Employment Type: Full-Time
• Work Model: Onsite (6 PM to 3 AM Pakistan Time)
• Office location: NASTP, Shahrah-e-Faisal, Karachi.

Karachi Based Job!!We are looking for an experienced GRC Analyst to support our US-based clients. The ideal candidate must have hands-on experience with US compliance and cybersecurity frameworks, and hold relevant industry-recognized certifications.

• Position: GRC Analyst (Certified – Mandatory)
• Experience: 4–5 years
• Employment Type: Full-Time
• Work Model: Onsite (6 PM to 3 AM Pakistan Time)
• Office location: NASTP, Shahrah-e-Faisal, Karachi.

Key Responsibilities:

• Conduct enterprise-level risk assessments and maintain risk registers.
• Develop and implement security policies aligned with US compliance standards.
• Support compliance programs for SOC 2, NIST, CMMC, HIPAA, PCI DSS, and ISO 27001.
• Coordinate internal and external audits.
• Perform third-party/vendor risk assessments.
• Track remediation efforts and ensure timely closure.
• Support clients in certification readiness and audit preparation.

Mandatory Certifications (At Least One Required):

• CISA, CISM, CISSP, CRISC, ISO/IEC 27001 Lead Auditor (LA), ISO/IEC 27001 Lead Implementer (LI), PCI-QSA

Other Requirements:

• Bachelor's degree in Cybersecurity, Information Security, IT, or related field
• Proven experience in Information Security Governance, Risk, Compliance and Security auditing.
• Experience working with US-based regulatory and compliance frameworks preferred.
• Strong documentation, reporting, and client communication skills
• Ability to work independently with US stakeholders.

Benefits

• Hands-on exposure to US-based clients and international cybersecurity operations.
• Opportunity to learn and adapt to advanced US cybersecurity practices, frameworks, and threat landscape.
• Collaboration with experienced cybersecurity professionals and global teams.
• Opportunity to work on GRC and security audit automation and improve operational efficiency.
• Company-sponsored certifications and ongoing professional development opportunities.
• Unlimited lab access for hands-on learning and technical skill enhancement.

Kick off your journey with the best Cybersecurity Firm!!