GRC Consultant: Lead SOC 2 & ISO 27001 Audits

RedFortress Technologies; Pakistan; Remote; PKR 2,000,000 - 3,000,000; Full time

Job summary

RedFortress Technologies seeks a compliance consultant to guide clients from gap assessment through audits for SOC 2, ISO 27001 and privacy frameworks. You will author policies, design evidence workflows with engineers, and coordinate remediation roadmaps.

You will also manage internal audits and act as the main point of contact with external assessors. The role requires delivering at least one SOC 2 or ISO 27001 certification, working knowledge of GDPR and HIPAA, and strong documentation and

Qualifications

• Experience delivering at least one SOC 2 or ISO 27001 certification.
• Knowledge of GDPR and HIPAA obligations.
• Ability to discuss technical matters with engineers and auditors.
• Strong documentation and stakeholder management skills.

Responsibilities

• Run gap assessments and build remediation roadmaps.
• Author policies and procedures grounded in client operations.
• Design evidence collection workflows with engineering teams.
• Facilitate internal audits and management reviews.
• Act as the client's point of contact with external assessors.

Skills

SOC 2 / ISO 27001 familiarity

GDPR / HIPAA awareness

Policy writing

Audit coordination

Stakeholder management

Job description

RedFortress Technologies seeks a compliance consultant to guide clients from gap assessment through audits for SOC 2, ISO 27001 and privacy frameworks. You will author policies, design evidence workflows with engineers, and coordinate remediation roadmaps.

You will also manage internal audits and act as the main point of contact with external assessors. The role requires delivering at least one SOC 2 or ISO 27001 certification, working knowledge of GDPR and HIPAA, and strong documentation and