GRC Specialist: InfoSec Risk & Compliance Leader

NETSOL Technologies Inc.; Lahore; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

NETSOL Technologies Inc. in Lahore, Pakistan is seeking an Information Security Auditor to perform audits, develop testing plans, and implement risk-controlled procedures.

You will help measure security posture, create metrics, and contribute to the training of staff on information security best practices. The role requires extensive knowledge of ISO standards (27001/27005/27701/20000/22301) and SOC2, plus a track record in risk management and policy documentation.

Qualifications

• Bachelor degree in information security related field or equivalent experience.
• CISA, CISM, or CISSP certification required or equivalent.
• Strong knowledge of ISO 27001/27005/27701/20000/22301 and SOC2 standards is essential.
• Excellent verbal and written communication skills and strong interpersonal abilities.

Responsibilities

• Perform information security audits.
• Develop and maintain security testing plans.
• Develop meaningful metrics to reflect the true posture of information security to make educated decisions based on risk.
• Assist with development and delivery of security awareness training.
• Carry out risk assessments, identifying controls and monitoring controls against objectives and KPI metrics.
• Document, update, and implement security policies, procedures, and other related documents.
• Inform and advise team members about obligations to comply with GDPR and other data protection laws.

Skills

ISO 27001

ISO 27005

ISO 27701

ISO 20000

ISO 22301

SOC2

Risk management

Verbal communication

Written communication

Interpersonal skills

Education

B.S. in Computer Science or Information Systems

CISA/CISM/CISSP certification

5+ years process documentation experience

Job description

NETSOL Technologies Inc. in Lahore, Pakistan is seeking an Information Security Auditor to perform audits, develop testing plans, and implement risk-controlled procedures.

You will help measure security posture, create metrics, and contribute to the training of staff on information security best practices. The role requires extensive knowledge of ISO standards (27001/27005/27701/20000/22301) and SOC2, plus a track record in risk management and policy documentation.