Security Analyst

Astera Software, Inc.; Karachi Division; On-site; PKR 1,400,000 - 2,000,000; Full time

Job summary

A technology solutions firm seeks a Security and Compliance Officer to enhance their security posture. The ideal candidate will manage security for both on-premises and cloud infrastructures, conduct audits, and ensure compliance with ISO standards. Applicants should have experience with cloud security frameworks and excellent communication skills. This role is based in Karachi Division, Pakistan.

Qualifications

• 3+ years of experience in facilitating Information Security audits.
• 2-3+ years of experience in Cloud & On-premises Infrastructure.
• Must be energetic, motivated, and creative for project implementation.

Responsibilities

• Evaluate and enhance the security posture of infrastructure and applications.
• Conduct regular security audits and vulnerability assessments.
• Document security incidents and resolutions for future reference.

Skills

ISO 27001:2022 Standard

GDPR

AWS Cloud Security

Azure Security

Communication Skills

Stakeholder Management

Risk Management

Education

Bachelor's degree in Computer Science

Tools

Palo Alto

Fortigate

Microsoft Admin Center

Intune

Job description

Job Summary

The Security and Compliance Officer is primarily responsible for ensuring the security of our On-premises & Cloud-based infrastructure, Information Systems, and Organizational data. The incumbent will play a critical role in identifying potential security and compliance risks, implementing measures to mitigate those risks, and maintaining compliance with industry regulations and best practices. The ideal candidate will have a strong background in information security, compliance frameworks, cloud architecture, and risk management.

What You’ll Do

• Evaluate, assess and enhance the security posture of On-premises & cloud-based infrastructure, applications, and services.
• Assess and implement security tools & controls for Cloud platforms, such as AWS, Azure, or Google Cloud to enhance the organization’s security posture.
• Develop, implement, and maintain information security policies, procedures, and standards.
• Collaborate with cross-functional teams and help prepare for audits, address security concerns, and provide recommendations to close Gaps.
• Stay up to date on emerging security threats, vulnerabilities, and industry best practices.
• Conduct BIA, Risk Assessment
• Assist in Facilitating Audits, both Internal and External, for ISO standards as well as Regulatory Requirements.
• Conduct regular security audits and vulnerability assessments to identify potential threats and vulnerabilities.
• Maintain all InfoSec records as per ISO 27001 standard (2022).
• Understand the GDPR framework including all controls and create a Plan for organization’s readiness for the qualification and compliance against the standard.
• Creating Policies, Custom-Categories, URL Filtering and adding/removing URLs from local categories on Palo Alto (200, 400, Panorama) and Fortigate (FG-60, FG-90 and FG-40).
• Managing Firewall Security Policies, VPN and security profiles.
• Provide guidance, support internal teams, and conduct security awareness training for internal teams.
• Contribute to the continuous improvement of the organization’s security posture through risk analysis and mitigation strategies.
• Monitor and analyze security alerts and events to identify and respond to security incidents.
• Document security incidents and their resolution for future reference.
• Management of M365 Infrastructure (Microsoft Admin Center, Intune) & Apps (SharePoint, OneDrive, Exchange, Teams).

What You’ll Need

• Must be well-versed with ISO 27001:2022 Standard.
• Experience with regulatory compliance frameworks such as GDPR and HIPAA. SOC 2 is a plus but not required.
• Proven experience in handling security of cloud computing platforms such as Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP).
• Excellent communication and stakeholder management skills are required as this role involves collaboration with cross‑functional teams.
• Must be energetic, motivated, and creative for project implementation and support.
• Bachelor’s degree, preferably Computer Science
• 3+ years of experience in Facilitating Information Security Audits.
• 2‑3+ years of experience in Cloud & On‑premises Infrastructure, Network & System Administration.