Security GRC Engineer: Continuous Compliance & Cloud Audits

Arbisoft; Lahore; On-site; PKR 1,800,000 - 3,200,000; Full time

Job summary

Arbisoft is seeking a Security GRC Engineer with 3–5 years of experience to drive continuous compliance automation and risk-based security improvements across cloud and on-premises environments.

You will architect and implement evidence pipelines for ISMS, conduct risk modeling, and ensure security alignment with ISO, SOC, and NIST standards. Strong SIEM expertise and Gulf compliance exposure are valued.

Qualifications

• Education: BS in Computer Science, Software Engineering, or Cybersecurity.
• Certifications: ISO 27001 Lead Implementer or Auditor.
• Compliance: Experience with SOC 2, ISO 27001, ISO 27701.
• SIEM: Customizing SIEM logic (Wazuh, ELK, QRadar, Panther).
• IR: 2+ years in incident response environments.
• Communication: Translate complex requirements for DevOps/Prod teams.
• Security awareness: Conduct security awareness and training sessions.
• Automation: Automate GRC workflows, including AI approaches.
• Certs: Security+, CHFI, CEH or SOC-related certs.

Responsibilities

• Automate continuous compliance by building evidence-collection pipelines for ISMS (ISO 27001, SOC 2).
• Lead technical risk assessments and threat modeling; track mitigations in a backlog.
• Audit cloud environments (AWS/GCP/Azure) and apps for ISO, SOC, and NIST alignment.
• Review security architecture to ensure design aligns with Security by Design and MD policy.
• Hardening operations using post-incident insights to refine policies and controls.
• Oversee MDM strategy and remediation of vulnerabilities across devices.
• Implement static code analysis and secure, encrypted note-sharing workflows.
• Oversee data privacy controls and regulatory compliance (Gulf-related).

Skills

SIEM mastery

Incident response

Automation in GRC

Security awareness

Cloud security

Education

BS in Computer Science / Software Engineering / Cybersecurity

Tools

Wazuh

ELK

QRadar

Panther

Job description

Arbisoft is seeking a Security GRC Engineer with 3–5 years of experience to drive continuous compliance automation and risk-based security improvements across cloud and on-premises environments.

You will architect and implement evidence pipelines for ISMS, conduct risk modeling, and ensure security alignment with ISO, SOC, and NIST standards. Strong SIEM expertise and Gulf compliance exposure are valued.