InfoSec Compliance & Risk Analyst — Audit & Controls

NKU Technologies Pvt Ltd; Lahore; On-site; PKR 1,500,000 - 2,100,000; Full time

Job summary

NKU Technologies Pvt Ltd is seeking an IT Compliance and Security Analyst with hands-on information security experience. You will manage compliance queries from internal teams and external customers, draft responses, obtain approvals, and share responses with requesters within timelines.

The role requires knowledge of security controls, risk management, and familiarity with ISO 27001, SOC 2, NIST and GDPR. Collaboration with IT, Legal, and HR is essential for evidence collection and audits.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology or a related field.
• 3–5 years of experience in IT compliance, information security compliance, GRC or security assurance.
• Strong knowledge of information security domain including security policies, risk management, controls and best practices.
• Working knowledge of ISO 27001, SOC 2, NIST and GDPR.
• Understanding of general IT controls like access, change, backup/disaster recovery, vulnerability management.
• Experience completing customer security questionnaires or supporting audits.
• Strong written communication and ability to explain technical topics clearly.
• Attention to detail and good document control practices.

Responsibilities

• Receive and review compliance and security queries from internal stakeholders and external customers related to documents, policies and services
• Apply information security knowledge to assess each query and reflect our security controls and practices
• Research each query and identify the relevant policies, procedures, certifications and supporting evidence
• Draft clear and accurate responses, including security questionnaires, due-diligence requests and audit-related queries
• Share approved responses and documents with the requester within agreed timelines
• Maintain a tracker of incoming requests with status, approvals and turnaround times
• Keep security and compliance documentation organized, version-controlled and up to date
• Coordinate with IT, Legal, HR and other teams to gather information and evidence
• Support internal and external audits, assessments and control reviews
• Identify recurring queries and help build a library of standard, pre-approved responses

Skills

Information security,

Written communication

Detail oriented

Multitasking

Education

Bachelor’s degree in Information Security, CS, IT or related field

Tools

GRC tools

Job description

NKU Technologies Pvt Ltd is seeking an IT Compliance and Security Analyst with hands-on information security experience. You will manage compliance queries from internal teams and external customers, draft responses, obtain approvals, and share responses with requesters within timelines.

The role requires knowledge of security controls, risk management, and familiarity with ISO 27001, SOC 2, NIST and GDPR. Collaboration with IT, Legal, and HR is essential for evidence collection and audits.