Information Security Engineer

Tkxel; Pakistan; On-site; PKR 2,200,000 - 3,200,000; Full time

Job summary

Tkxel is seeking a motivated Information Security Engineer with a strong foundation in compliance frameworks. The role focuses on governance, risk, and compliance, with hands-on work in ISO 27001 implementation and maintenance, HIPAA and SOC 2 readiness.

You will collaborate with cross-functional teams to strengthen the organization’s ISMS and support audit activities. The ideal candidate has 2–3 years of information security experience, a bachelor’s degree in a related field, and the ISO 27001

Qualifications

• Bachelor’s degree in Information Security, CS, or related field.
• ISO 27001 Lead Implementer certification required.
• 2–3 years in information security with GRC focus and ISO 27001, HIPAA, SOC 2 experience.

Responsibilities

• Governance, Risk & Compliance responsibilities
• Maintain and improve ISMS in alignment with ISO 27001 and ISO 42001
• Support HIPAA and SOC 2 compliance efforts
• Conduct risk assessments, document findings, and recommend remediation strategies
• Assist in internal and external audits preparation
• Collaborate with cross-functional teams to improve security posture
• Contribute to security awareness training programs
• Assist in security incident investigations and root cause analysis

Skills

GRC domain

Risk assessment

Communication skills

Security standards

Education

Bachelor’s degree in Information Security, CS, or related field

ISO 27001 Lead Implementer

Job description

Job Description:

About the Role

We are seeking a motivated Information Security Engineer with a strong foundation in compliance frameworks. The ideal candidate will have hands-on experience with ISO 27001, HIPAA, SOC 2 and conducting risk assessments.

Key Responsibilities

• Governance, Risk & Compliance
• Maintain and improve the organization’s Information Security Management System (ISMS) in alignment with ISO 27001 and AIMS in alignment to ISO 42001.
• Support compliance efforts for HIPAA and SOC 2 frameworks.
• Conduct risk assessments, document findings, and recommend remediation strategies.
• Assist in preparing for internal and external audits.
• Work with cross-functional teams to improve security posture.
• Contribute to security awareness training programs.
• Assist in security incident investigations and root cause analysis.

Requirements

Required Qualifications

• Education: Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience).
• Certifications: Mandatory: ISO 27001 Lead Implementer (LI).
• Experience: 2–3 years in information security roles covering GRC domain; Hands-on involvement in ISO 27001 implementation/maintenance, HIPAA, and SOC 2 compliance projects.

Desired Skills:

• Knowledge of security standards such as NIST, CIS Controls, and GDPR.
• Strong report writing and communication skills for both technical and non-technical audiences.