GRC Analyst — US Compliance & Audits (Onsite)

Alykas; Karachi Division; On-site; PKR 1,000,000 - 1,500,000; Full time

Job summary

Alykas is seeking an experienced GRC Analyst to support US-based clients. The candidate must have hands-on experience with US compliance and cybersecurity frameworks, and hold relevant industry certifications. The role requires 4–5 years of experience and is onsite in Karachi.

Responsibilities include risk assessments, policy development, audit coordination, and vendor risk management. Bachelor’s degree in a related field is required, with strong documentation and client communication skills.

Qualifications

• Bachelor’s degree in Cybersecurity, IT or related field is required.
• 4–5 years of hands-on governance, risk and compliance experience.
• Experience with US compliance frameworks and certifications is mandatory.
• Strong documentation, reporting and client communication skills.

Responsibilities

• Conduct enterprise-level risk assessments and maintain risk registers.
• Develop and implement security policies aligned with US compliance standards.
• Support compliance programs for SOC 2, NIST, CMMC, HIPAA, PCI DSS, ISO 27001.
• Coordinate internal and external audits.
• Perform third-party/vendor risk assessments.
• Track remediation efforts and ensure timely closure.
• Support clients in certification readiness and audit preparation.

Skills

GRC governance

US compliance

Cybersecurity frameworks

Documentation & reporting

Stakeholder communication

Education

Bachelor's degree in Cybersecurity/IT

Job description

Alykas is seeking an experienced GRC Analyst to support US-based clients. The candidate must have hands-on experience with US compliance and cybersecurity frameworks, and hold relevant industry certifications. The role requires 4–5 years of experience and is onsite in Karachi.

Responsibilities include risk assessments, policy development, audit coordination, and vendor risk management. Bachelor’s degree in a related field is required, with strong documentation and client communication skills.