GRC Consultant

RedFortress Technologies; Pakistan; Remote; PKR 2,000,000 - 3,000,000; Full time

Job summary

RedFortress Technologies seeks a compliance consultant to guide clients from gap assessment through audits for SOC 2, ISO 27001 and privacy frameworks. You will author policies, design evidence workflows with engineers, and coordinate remediation roadmaps.

You will also manage internal audits and act as the main point of contact with external assessors. The role requires delivering at least one SOC 2 or ISO 27001 certification, working knowledge of GDPR and HIPAA, and strong documentation and

Qualifications

• Experience delivering at least one SOC 2 or ISO 27001 certification.
• Knowledge of GDPR and HIPAA obligations.
• Ability to discuss technical matters with engineers and auditors.
• Strong documentation and stakeholder management skills.

Responsibilities

• Run gap assessments and build remediation roadmaps.
• Author policies and procedures grounded in client operations.
• Design evidence collection workflows with engineering teams.
• Facilitate internal audits and management reviews.
• Act as the client's point of contact with external assessors.

Skills

SOC 2 / ISO 27001 familiarity

GDPR / HIPAA awareness

Policy writing

Audit coordination

Stakeholder management

Job description

Take clients from gap assessment to audit across SOC 2, ISO 27001 and privacy frameworks.

Responsibilities

• Run gap assessments and build remediation roadmaps
• Author policies and procedures grounded in how the client actually operates
• Design evidence collection workflows with engineering teams
• Facilitate internal audits and management reviews
• Act as the client's point of contact with external assessors

Requirements

• — Experience delivering at least one SOC 2 or ISO 27001 certification
• — Working knowledge of GDPR and HIPAA obligations
• — Ability to hold a technical conversation with engineers, not just auditors
• — Excellent documentation and stakeholder management skills