GRC Analyst

Alykas; Karachi Division; On-site; PKR 1,000,000 - 1,500,000; Full time

Job summary

Alykas is seeking an experienced GRC Analyst to support US-based clients. The candidate must have hands-on experience with US compliance and cybersecurity frameworks, and hold relevant industry certifications. The role requires 4–5 years of experience and is onsite in Karachi.

Responsibilities include risk assessments, policy development, audit coordination, and vendor risk management. Bachelor’s degree in a related field is required, with strong documentation and client communication skills.

Qualifications

• Bachelor’s degree in Cybersecurity, IT or related field is required.
• 4–5 years of hands-on governance, risk and compliance experience.
• Experience with US compliance frameworks and certifications is mandatory.
• Strong documentation, reporting and client communication skills.

Responsibilities

• Conduct enterprise-level risk assessments and maintain risk registers.
• Develop and implement security policies aligned with US compliance standards.
• Support compliance programs for SOC 2, NIST, CMMC, HIPAA, PCI DSS, ISO 27001.
• Coordinate internal and external audits.
• Perform third-party/vendor risk assessments.
• Track remediation efforts and ensure timely closure.
• Support clients in certification readiness and audit preparation.

Skills

GRC governance

US compliance

Cybersecurity frameworks

Documentation & reporting

Stakeholder communication

Education

Bachelor's degree in Cybersecurity/IT

Job description

We are looking for an experienced GRC Analyst to support our US-based clients. The ideal candidate must have hands-on experience with US compliance and cybersecurity frameworks, and hold relevant industry-recognized certifications.

• Position: GRC Analyst (Certified – Mandatory)
• Experience: 4–5 years
• Employment Type: Full-Time
• Work Model: Onsite (6 PM to 3 AM Pakistan Time)
• Office location: NASTP, Shahrah-e-Faisal, Karachi.

Key Responsibilities

• Conduct enterprise-level risk assessments and maintain risk registers.
• Develop and implement security policies aligned with US compliance standards.
• Support compliance programs for SOC 2, NIST, CMMC, HIPAA, PCI DSS, and ISO 27001.
• Coordinate internal and external audits.
• Perform third-party/vendor risk assessments.
• Track remediation efforts and ensure timely closure.
• Support clients in certification readiness and audit preparation.

Other Requirements

• Bachelor's degree in Cybersecurity, Information Security, IT, or related field
• Proven experience in Information Security Governance, Risk, Compliance and Security auditing.
• Experience working with US-based regulatory and compliance frameworks preferred.
• Strong documentation, reporting, and client communication skills
• Ability to work independently with US stakeholders.
• Hands-on exposure to US-based clients and international cybersecurity operations.
• Opportunity to learn and adapt to advanced US cybersecurity practices, frameworks, and threat landscape.
• Collaboration with experienced cybersecurity professionals and global teams.
• Opportunity to work on GRC and security audit automation and improve operational efficiency.
• Company-sponsored certifications and ongoing professional development opportunities.
• Unlimited lab access for hands-on learning and technical skill enhancement.

Kick off your journey with the best Cybersecurity Firm!!