GRC & Cybersecurity Engineer (Hybrid)

About the role

The GRC and Cybersecurity Engineer will work in a hybrid setting in Pakistan, combining on‑site collaboration with remote flexibility. You will design and implement governance, risk, and compliance processes, conduct security assessments, and help improve the overall security posture of client environments.

Key responsibilities

• Develop and maintain GRC documentation, policies, and control assessments aligned with international and local standards.
• Perform security monitoring, event analysis, vulnerability identification, and support remediation planning.
• Research and apply cybersecurity frameworks (ISO 27001, NIST, PCI‑DSS, OWASP, SBP guidelines) to client projects.
• Prepare reports, presentations, and technical documentation for cross‑functional teams.
• Collaborate with stakeholders to integrate security best practices into digital initiatives.

Required profile

• Strong understanding of confidentiality, integrity, availability, and security governance concepts.
• Ability to work collaboratively in hybrid teams and communicate clearly in written and spoken English.
• Degree in Computer Science, Information Security, IT or a related field (preferred).
• Analytical mindset with attention to detail and structured documentation skills.

Required skills

• Firewalls
• Intrusion detection and intrusion prevention
• Secure network architecture
• Vulnerability assessment and penetration testing
• ISO 27001
• NIST framework
• PCI‑DSS
• OWASP Top 10
• SBP TRM and ETGRM
• CompTIA Security+ (or preparation)
• CEH (or preparation)