GRC Security Analyst: ISO 27001 & PCI Compliance

Raqami Islamic Digital Bank; Karachi Division; On-site; PKR 1,200,000 - 1,800,000; Full time

Job summary

Raqami Islamic Digital Bank seeks an Information Security GRC Analyst to strengthen governance, risk, and compliance through assessing security configurations, validating ISO/IEC 27001:2022, PCI DSS, and SBP requirements, and tracking audit findings.

You will coordinate audits with internal and external teams, maintain risk registers, and prepare periodic reports on remediation progress and significant deficiencies, helping ensure regulatory obligations are met.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• Professional certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, or CRISC are preferred.
• 0-3 years of experience in information security compliance, IT audit, technology controls, security hardening, or GRC.

Responsibilities

• Assess security configurations and baseline hardening across servers, databases, endpoints, and networks.
• Validate ISO/IEC 27001:2022 controls, maintain evidence, and support audits.
• Assess PCI DSS controls, coordinate evidence, and track remediation.
• Map SBP regulatory requirements to internal controls and track observations.
• Perform security control assessments evaluating design, implementation, and effectiveness.
• Maintain a centralized audit findings tracker with owners, deadlines, risk ratings, and closures.
• Coordinate with IT and business teams to remediate gaps and validate closures.
• Monitor vulnerabilities, patching gaps, and risky or unsupported systems.
• Document control exceptions and manage risk treatment plans with stakeholders.
• Coordinate with Internal Audit, external auditors, and PCI assessors to maintain audit evidence.
• Prepare periodic management reports on compliance status, remediation progress, and significant deficiencies.

Skills

ISO 27001 controls

PCI DSS

SBP regulations

Audit evidence

Risk management

Vulnerability management

Documentation

Stakeholder communication

Education

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Auditor

CISA

CRISC

Bachelor's degree in Computer Science / IT / Cybersecurity / Engineering

Tools

CIS Benchmarks

Audit management tools

Job description

Raqami Islamic Digital Bank seeks an Information Security GRC Analyst to strengthen governance, risk, and compliance through assessing security configurations, validating ISO/IEC 27001:2022, PCI DSS, and SBP requirements, and tracking audit findings.

You will coordinate audits with internal and external teams, maintain risk registers, and prepare periodic reports on remediation progress and significant deficiencies, helping ensure regulatory obligations are met.