ISMS & GRC Consultant: Audit & Compliance Expert

Inbox Business Technologies; Lahore; On-site; PKR 2,000,000 - 2,750,000; Full time

Job summary

A leading technology consulting firm is seeking a Consultant in Lahore with expertise in ISO 27001 and IT Governance frameworks. The role involves implementing ISMS, conducting risk assessments, and developing compliance policies. Candidates should have 3-4 years of relevant experience and strong documentation and communication skills. Certifications in ISO 27001 are preferred, along with familiarity with GDPR and ITIL.

Qualifications

• 3-4 years of experience in ISMS and IT GRC consulting or related roles.
• Certifications like ISO 27001 Lead Implementer / Lead Auditor preferred.
• Familiar with regulatory compliance such as GDPR, HIPAA, and PCI-DSS.

Responsibilities

• Implement and maintain ISO 27001-based ISMS.
• Conduct gap assessments and remediation planning for compliance.
• Develop security controls aligned with ISO 27001 standards.

Skills

ISO 27001 gap assessments

Risk assessments

Policy development

Documentation

Auditing

Communication skills

Education

Bachelor's degree in Information Security, Computer Science, or related field

Master's degree in Information Technology

Tools

ISO 27001

NIST

COBIT

ITIL

Job description

A leading technology consulting firm is seeking a Consultant in Lahore with expertise in ISO 27001 and IT Governance frameworks. The role involves implementing ISMS, conducting risk assessments, and developing compliance policies. Candidates should have 3-4 years of relevant experience and strong documentation and communication skills. Certifications in ISO 27001 are preferred, along with familiarity with GDPR and ITIL.