GRC Analyst – US Compliance Focus

About the role

We are seeking an experienced GRC Analyst to support our US‑based clients from our Karachi office. The role requires hands‑on experience with US compliance and cybersecurity frameworks and offers exposure to international cybersecurity operations.

Key responsibilities

• Conduct enterprise‑level risk assessments and maintain risk registers.
• Develop and implement security policies aligned with US compliance standards.
• Support compliance programs for SOC 2, NIST, CMMC, HIPAA, PCI DSS, and ISO 27001.
• Coordinate internal and external audits and perform third‑party/vendor risk assessments.
• Track remediation efforts, ensure timely closure, and assist clients with certification readiness and audit preparation.

Required profile

• Bachelor's degree in Cybersecurity, Information Security, IT, or a related field.
• 4–5 years of proven experience in Information Security Governance, Risk, Compliance, and security auditing.
• At least one mandatory certification (CISA, CISM, CISSP, CRISC, ISO/IEC 27001 Lead Auditor/Implementer, PCI‑QSA).
• Strong documentation, reporting, and client communication skills.

Required skills

• Knowledge of SOC 2, NIST, CMMC, HIPAA, PCI DSS, ISO 27001 frameworks.
• Experience with risk assessment tools and audit coordination.

What we offer

• Hands‑on exposure to US‑based clients and international cybersecurity operations.
• Opportunity to learn advanced US cybersecurity practices and frameworks.
• Collaboration with experienced cybersecurity professionals and global teams.
• Work on GRC and security audit automation to improve operational efficiency.
• Company‑sponsored certifications, ongoing professional development, and unlimited lab access.