Information Security Analyst - Compliance & Risk Management
US Based Company for IT Services
PKR 800,000 • Published Date: • Pakistan (Hybrid)
Description
The Information Security Analyst - Compliance & Risk Management analyzes management and technical controls, maps regulatory requirements, tracks enterprise compliance, supports audit readiness, and helps address security policy and risk matters across business initiatives.
Responsibilities
What you’ll do as the Information Security Analyst - Compliance & Risk Management:
Employees employed in the role of Information Security Analyst - Compliance & Risk Management shall be required to apply their independent mind and demonstrate intellectual abilities in their decision-making.
The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Analyze management and technical controls against security and compliance requirements.
Map applicable regulatory and contractual requirements to the information security framework.
Track compliance across ISO 27001, ISO 27701, SOC 2, GDPR, PCI-DSS, and related frameworks.
Maintain evidence and documentation and support internal and external assessment readiness.
Collaborate with project and engineering teams to address security and risk requirements.
Develop compliance metrics, support risk assessments, and assist with customer security questionnaires and contractual reviews.
What you will bring to the team:
Bachelor’s degree in Computer Science, Information Technology, or a related field.
5–7 years of information security, compliance, risk, or audit experience.
Experience with ISO 27001, SOC 2, PCI-DSS, privacy, and related frameworks.
Security certification such as CISSP, CISA, or ISO 27001 is preferred.
Strong communication, documentation, vendor-assessment, and cross-functional collaboration skills.
Experience
5 Years
Apply By
Required Skills
- Compliance
- ISO 27701
- GDPR
- Cross-functional collaboration
- Vendor assessment
- Documentation
- Risk Assessment
- Security Policy
- privacy frameworks
- PCI-DSS
- SOC 2
- ISO 27001
- Audit
- Risk Management
- Information Security
Nice to Have Skills
- CISSP
- CISA
- ISO 27001 certification
- contractual reviews
- Communication