GRC Analyst

Alykas; Karachi Division; On-site; PKR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Company-sponsored certifications

Unlimited lab access

Job summary

Alykas in Karachi seeks an experienced GRC Analyst to support our US-based clients onsite. The candidate should have hands-on knowledge of US compliance and cybersecurity frameworks and hold relevant industry-recognized certifications.

This full-time role requires 2–5 years of experience, and an ability to work onsite from 6 PM to 3 AM Pakistan Time at NASTP, Shahrah-e-Faisal. You will lead risk assessments, policy development, and audits for multi-regulatory programs.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, IT, or related field.
• Proven experience in Information Security Governance, Risk, Compliance and Security auditing.
• Experience with US-based regulatory and compliance frameworks preferred.
• Strong documentation, reporting, and client communication skills.

Responsibilities

• Conduct enterprise-level risk assessments and maintain risk registers.
• Develop and implement security policies aligned with US compliance standards.
• Support compliance programs for SOC 2, NIST, CMMC, HIPAA, PCI DSS, and ISO 27001.
• Coordinate internal and external audits.
• Perform third‑party/vendor risk assessments.
• Track remediation efforts and ensure timely closure.
• Support clients in certification readiness and audit preparation.

Skills

GRC

Risk assessment

Auditing

Documentation

Client communication

Education

Bachelor's degree in Cybersecurity, Information Security, IT, or related field

Job description

We are looking for an experienced GRC Analyst to support our US-based clients. The ideal candidate must have hands‑on experience with US compliance and cybersecurity frameworks, and hold relevant industry‑recognized certifications.

- Position: GRC Analyst (Certified – Mandatory)

- Experience: 2–5 years

- Employment Type: Full-Time

- Work Model: Onsite (6 PM to 3 AM Pakistan Time)

- Office location: NASTP, Shahrah-e-Faisal, Karachi.

Key Responsibilities:

• Conduct enterprise-level risk assessments and maintain risk registers.
• Develop and implement security policies aligned with US compliance standards.
• Support compliance programs for SOC 2, NIST, CMMC, HIPAA, PCI DSS, and ISO 27001.
• Coordinate internal and external audits.
• Perform third‑party/vendor risk assessments.
• Track remediation efforts and ensure timely closure.
• Support clients in certification readiness and audit preparation.

Mandatory Certifications (At Least One Required):

Other Requirements:

• Bachelor's degree in Cybersecurity, Information Security, IT, or related field
• Proven experience in Information Security Governance, Risk, Compliance and Security auditing.
• Experience working with US-based regulatory and compliance frameworks preferred.
• Strong documentation, reporting, and client communication skills
• Ability to work independently with US stakeholders.
• Hands‑on exposure to US-based clients and international cybersecurity operations.
• Opportunity to learn and adapt to advanced US cybersecurity practices, frameworks, and threat landscape.
• Collaboration with experienced cybersecurity professionals and global teams.
• Opportunity to work on GRC and security audit automation and improve operational efficiency.
• Company-sponsored certifications and ongoing professional development opportunities.
• Unlimited lab access for hands‑on learning and technical skill enhancement.

Kick off your journey with the best Cybersecurity Firm!!!