IT/IS Governance & GRC Analyst (ISO 27001)

PARCO; Karachi Division; On-site; PKR 1,800,000 - 3,200,000; Full time

Job summary

Pak-Arab Refinery Limited (PARCO) invites applications for the IT/IS Governance Analyst (Contractual) role. The candidate will support the organization’s GRC framework, drive ISO/IEC 27001:2022 compliance, and coordinate audits and risk management initiatives.

The role requires strong policy governance, security metrics, and cross-functional collaboration with IT, risk, and audit teams to ensure regulatory alignment and effective remediation programs.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, IT, or a related field.
• Strong analytical, documentation, and report-writing capabilities.
• Effective communication, coordination, and stakeholder-management skills.
• Ability to collaborate with IT, business, audit, risk, and other cross-functional stakeholders.
• Ability to interpret regulatory, standards-based, and organizational requirements and assess their impact.
• Relevant certifications such as ISO/IEC 27001, CISA, CRISC, CISM, or equivalent will be preferred.

Responsibilities

• Monitor compliance with information security policies, ISO/IEC 27001:2022, and applicable legal, regulatory, and contractual requirements.
• Conduct IT/IS risk assessments, maintain the risk register and monitor risk treatment plans.
• Coordinate internal and external information security audits, including evidence collection, stakeholder engagement, and follow-up.
• Track audit observations, nonconformities, corrective actions, and remediation plans through timely closure.
• Develop, review, and maintain information security policies, standards, procedures, and other governance documentation.
• Plan and deliver cybersecurity awareness activities, including training sessions, communications, and phishing simulations.
• Prepare information security dashboards and reports covering risks, compliance, audits, remediation, awareness, and related performance indicators.
• Monitor changes in cybersecurity standards, regulations, and industry good practices and assess their applicability to the organization.

Skills

Information Security Governance

GRC

Risk management

Audit coordination

Policy governance

Cybersecurity awareness

Stakeholder management

Regulatory understanding

ISO/IEC 27001 knowledge

Education

Bachelor’s degree in Information Security, Computer Science, IT, or related field

Tools

GRC platforms/tools

Job description

Pak-Arab Refinery Limited (PARCO) invites applications for the IT/IS Governance Analyst (Contractual) role. The candidate will support the organization’s GRC framework, drive ISO/IEC 27001:2022 compliance, and coordinate audits and risk management initiatives.

The role requires strong policy governance, security metrics, and cross-functional collaboration with IT, risk, and audit teams to ensure regulatory alignment and effective remediation programs.