IT Compliance and Security Analyst

NKU Technologies Pvt Ltd; Lahore; On-site; PKR 1,500,000 - 2,100,000; Full time

Job summary

NKU Technologies Pvt Ltd is seeking an IT Compliance and Security Analyst with hands-on information security experience. You will manage compliance queries from internal teams and external customers, draft responses, obtain approvals, and share responses with requesters within timelines.

The role requires knowledge of security controls, risk management, and familiarity with ISO 27001, SOC 2, NIST and GDPR. Collaboration with IT, Legal, and HR is essential for evidence collection and audits.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology or a related field.
• 3–5 years of experience in IT compliance, information security compliance, GRC or security assurance.
• Strong knowledge of information security domain including security policies, risk management, controls and best practices.
• Working knowledge of ISO 27001, SOC 2, NIST and GDPR.
• Understanding of general IT controls like access, change, backup/disaster recovery, vulnerability management.
• Experience completing customer security questionnaires or supporting audits.
• Strong written communication and ability to explain technical topics clearly.
• Attention to detail and good document control practices.

Responsibilities

• Receive and review compliance and security queries from internal stakeholders and external customers related to documents, policies and services
• Apply information security knowledge to assess each query and reflect our security controls and practices
• Research each query and identify the relevant policies, procedures, certifications and supporting evidence
• Draft clear and accurate responses, including security questionnaires, due-diligence requests and audit-related queries
• Share approved responses and documents with the requester within agreed timelines
• Maintain a tracker of incoming requests with status, approvals and turnaround times
• Keep security and compliance documentation organized, version-controlled and up to date
• Coordinate with IT, Legal, HR and other teams to gather information and evidence
• Support internal and external audits, assessments and control reviews
• Identify recurring queries and help build a library of standard, pre-approved responses

Skills

Information security,

Written communication

Detail oriented

Multitasking

Education

Bachelor’s degree in Information Security, CS, IT or related field

Tools

GRC tools

Job description

Role Summary

We are looking for an IT Compliance and Security Analyst with strong knowledge and hands-on experience in the information security domain. You will manage compliance and security-related queries from internal teams and external customers, review each request, prepare accurate responses supported by our policies and documentation, obtain CISO approval, and share the approved response with the requester.
Key Responsibilities

• Receive and review compliance and security queries from internal stakeholders and external customers related to documents, policies and services
• Apply your information security knowledge to assess each query and confirm that responses accurately reflect our security controls and practices
• Research each query and identify the relevant policies, procedures, certifications and supporting evidence
• Draft clear and accurate responses, including security questionnaires, due-diligence requests and audit-related queries
• Share approved responses and documents with the requester within agreed timelines
• Maintain a tracker of incoming requests with status, approvals and turnaround times
• Keep security and compliance documentation organized, version-controlled and up to date
• Coordinate with IT, Legal, HR and other teams to gather information and evidence
• Support internal and external audits, assessments and control reviews
• Identify recurring queries and help build a library of standard, pre-approved responses

Required Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology or a related field
• 3 to 5 years of experience in IT compliance, information security compliance, GRC or security assurance
• Strong knowledge and practical experience of the information security domain, including security policies, risk management, security controls and security best practices
• Working knowledge of frameworks and standards such as ISO 27001, SOC 2, NIST and GDPR
• Understanding of general IT controls such as access management, change management, backup and disaster recovery, and vulnerability management
• Experience completing customer security questionnaires or supporting audits
• Strong written communication skills, with the ability to explain technical and compliance topics clearly
• Strong attention to detail and good document control practices
• Ability to manage multiple requests and meet deadlines

Preferred Qualifications

• Certifications such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CISM or Security+
• Experience working with international or enterprise clients
• Familiarity with GRC or ticketing tools