Information Security Engineer

Tkxel; Lahore; On-site; PKR 900,000 - 1,300,000; Full time

Job summary

Tkxel is seeking an Information Security Engineer with a strong foundation in compliance frameworks to strengthen our security program. You will work on ISO 27001, HIPAA, and SOC 2 initiatives, conduct risk assessments, and help prepare for audits across cross-functional teams.

This role focuses on maintaining robust ISMS processes and improving overall security posture. Ideal candidates have 2–3 years in information security within the GRC domain, hands-on ISO 27001 experience, and solid

Qualifications

• 2–3 years in information security roles covering GRC domain.
• Hands-on involvement in ISO 27001 implementation/maintenance, HIPAA, and SOC 2 compliance projects.

Responsibilities

• Maintain and improve the ISMS in alignment with ISO 27001 and ISO 42001 (AIMS).
• Support compliance efforts for HIPAA and SOC 2 frameworks.
• Conduct risk assessments, document findings, and recommend remediation strategies.
• Assist in preparing for internal and external audits.
• Work with cross-functional teams to improve security posture.
• Contribute to security awareness training programs.

Skills

GRC domain

ISO 27001

HIPAA

SOC 2

Risk assessments

Security awareness

Education

Bachelor's degree in Information Security

Job description

Tkxel is a leading softwaredevelopment company located in Reston, Virginia. We are committedto develop innovative software solutions for leading enterprisesin the world, helping them grow their businesses using latesttechnology solutions.

Job Description

About the Role:

We are seeking a motivated Information Security Engineer with a strong foundation in compliance frameworks. The ideal candidate will have hands‑on experience with ISO 27001, HIPAA, SOC 2 and conducting risk assessments.

Key Responsibilities:

• Maintain and improve the organization’s Information Security Management System (ISMS) in alignment with ISO 27001 and AIMS in alignment to ISO 42001.
• Support compliance efforts for HIPAA and SOC 2 frameworks.
• Conduct risk assessments, document findings, and recommend remediation strategies.
• Assist in preparing for internal and external audits.
• Work with cross‑functional teams to improve security posture.
• Contribute to security awareness training programs; layer? l? …

Requirements

Required Qualifications

• Education: Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience).
• 2–3 years in information security roles covering GRC domain
• Hands‑on involvement in ISO 27001 implementation/maintenance, HIPAA, and SOC 2 compliance projects.

Desired Skills:

• Knowledge of security standards such as NIST, CIS Controls, and GDPR.
• Strong report writing and communication skills for both technical and non-technical audiences.