GRC Analyst: US Compliance, Risk & Security Audits

Alykas; Karachi Division; On-site; PKR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Company-sponsored certifications

Unlimited lab access

Job summary

Alykas in Karachi seeks an experienced GRC Analyst to support our US-based clients onsite. The candidate should have hands-on knowledge of US compliance and cybersecurity frameworks and hold relevant industry-recognized certifications.

This full-time role requires 2–5 years of experience, and an ability to work onsite from 6 PM to 3 AM Pakistan Time at NASTP, Shahrah-e-Faisal. You will lead risk assessments, policy development, and audits for multi-regulatory programs.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, IT, or related field.
• Proven experience in Information Security Governance, Risk, Compliance and Security auditing.
• Experience with US-based regulatory and compliance frameworks preferred.
• Strong documentation, reporting, and client communication skills.

Responsibilities

• Conduct enterprise-level risk assessments and maintain risk registers.
• Develop and implement security policies aligned with US compliance standards.
• Support compliance programs for SOC 2, NIST, CMMC, HIPAA, PCI DSS, and ISO 27001.
• Coordinate internal and external audits.
• Perform third‑party/vendor risk assessments.
• Track remediation efforts and ensure timely closure.
• Support clients in certification readiness and audit preparation.

Skills

GRC

Risk assessment

Auditing

Documentation

Client communication

Education

Bachelor's degree in Cybersecurity, Information Security, IT, or related field

Job description

Alykas in Karachi seeks an experienced GRC Analyst to support our US-based clients onsite. The candidate should have hands-on knowledge of US compliance and cybersecurity frameworks and hold relevant industry-recognized certifications.

This full-time role requires 2–5 years of experience, and an ability to work onsite from 6 PM to 3 AM Pakistan Time at NASTP, Shahrah-e-Faisal. You will lead risk assessments, policy development, and audits for multi-regulatory programs.