Data Security & ISMS Implementation Resource

About the role

Sheikh & Chaudhri Chartered Accountants is seeking a qualified data security professional on a part‑time, contract basis to support the implementation of an Information Security Management System (ISMS) aligned with ISO 27001. The engagement will last approximately 2–3 months and will be based in Lahore with a hybrid work arrangement.

Key responsibilities

• Configure and harden Microsoft 365 security settings, including MFA, Conditional Access, SharePoint permissions, DLP and Microsoft Purview.
• Draft, review and implement core ISMS policies such as Data Classification, Acceptable Use and Incident Response.
• Conduct a risk assessment and produce a gap analysis report.
• Deliver a staff awareness training session on security best practices.

Required profile

• Mandatory CISA certification; CISSP or ISO 27001 Lead Implementer is a plus.
• Hands‑on experience with Microsoft 365 security hardening.
• Ability to create ISO 27001‑aligned ISMS documentation.
• Experience working with professional services or financial‑sector clients preferred.
• Based in Lahore or able to work in a hybrid model.

Required skills

• CISA certification
• CISSP or ISO 27001 Lead Implementer (optional)
• Microsoft 365 security (MFA, Conditional Access, SharePoint permissions, DLP, Microsoft Purview)
• ISMS policy development
• Risk assessment and gap analysis

What we offer

• Fixed‑term contract for 2–3 months
• Hybrid work environment
• Opportunity to work with a leading audit firm