GRC Analyst – US Compliance Focus (Onsite Karachi)

About the role

We are seeking an experienced GRC Analyst to support US‑based clients from our Karachi office. The role requires hands‑on experience with US compliance and cybersecurity frameworks and relevant certifications.

Key responsibilities

• Conduct enterprise‑level risk assessments and maintain risk registers.
• Develop and implement security policies aligned with US compliance standards.
• Support compliance programs for SOC 2, NIST, CMMC, HIPAA, PCI DSS, and ISO 27001.
• Coordinate internal and external audits.
• Perform third‑party/vendor risk assessments.
• Track remediation efforts and ensure timely closure.
• Support clients in certification readiness and audit preparation.

Required profile

• Bachelor's degree in Cybersecurity, Information Security, IT, or related field.
• Proven experience in Information Security Governance, Risk, Compliance and Security auditing.
• Experience working with US‑based regulatory and compliance frameworks preferred.
• Strong documentation, reporting, and client communication skills.
• Ability to work independently with US stakeholders.

Required skills

• Risk assessment and remediation tracking.
• Security policy development.
• Audit coordination and support.
• Third‑party risk assessment.

What we offer

• Hands‑on exposure to US‑based clients and international cybersecurity operations.
• Opportunity to learn advanced US cybersecurity practices, frameworks, and threat landscape.
• Collaboration with experienced cybersecurity professionals and global teams.
• Work on GRC and security audit automation to improve operational efficiency.
• Company‑sponsored certifications and ongoing professional development.
• Unlimited lab access for hands‑on learning and technical skill enhancement.