Senior Information Security Specialist

2 days ago

Karachi, Sindh, Pakistan beBee Careers Full time
Job Description:

We are seeking a highly experienced Senior Consultant with strong expertise in Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC).

The ideal candidate should have a proven track record of implementing and auditing ISO 27001, developing and designing IT GRC frameworks based on COBIT, NIST, and conducting risk assessments to ensure compliance with industry standards and regulations.

Key Responsibilities:
  • ISMS:
    • Lead the implementation, management, and auditing of ISO 27001-based Information Security Management Systems (ISMS).
    • Perform gap assessments to identify areas of non-compliance and develop corrective action plans.
    • Conduct risk assessments and ensure risk mitigation strategies are aligned with business objectives.
    • Develop and refine ISMS policies, procedures, and controls in compliance with ISO 27001 and other relevant standards.
    • Support clients in achieving and maintaining ISO 27001 certification, including audit readiness.
  • IT GRC:
    • Develop and implement IT governance frameworks based on COBIT, NIST, and other best practices.
    • Conduct IT risk assessments and define risk treatment plans.
    • Ensure compliance with regulatory requirements such as GDPR, NIST, and local cybersecurity regulations.
    • Design and implement IT compliance and risk management programs, policies, and controls.
    • Provide advisory services on third-party/vendor risk management.
Required Skills and Qualifications:
  • Mastery of Information Security, Computer Science, or IT-related field.
  • Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, CISSP, CISA, or COBIT 2019 Foundation.
  • Minimum 6–8 years of experience in ISMS and IT GRC consulting, implementation, or auditing.
  • Hands-on experience in conducting ISO 27001 gap assessments, risk assessments, and audits.
  • Strong practical knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).
  • Experience in handling regulatory compliance requirements such as GDPR, NIST, and PCI-DSS.
  • Excellent report writing, communication, and stakeholder management skills.
Benefits:

Join a dynamic team and contribute to the growth of our organization.

Others:

This is a challenging role for a motivated individual who is passionate about IT Governance, Risk, and Compliance.

  • Specialist, Information Security

    3 weeks ago

    Karachi, Sindh, Pakistan Aga Khan University Full time

    Get AI-powered advice on this job and more exclusive features.Direct message the job poster from Aga Khan University.Introduction to the Aga Khan University:Chartered in 1983, Aga Khan University (AKU) is a private, autonomous and self-governing international university with 13 teaching sites in 6 countries distributed across three continents. As an integral...

  • Information Security Analyst

    2 weeks ago

    Karachi, Sindh, Pakistan Abroad Work Full time

    Information Security Analyst vacancy in Karachi, PakistanJunior Information Security AnalystWe are seeking a highly motivated Junior Information Security Analyst to join our team in Karachi. As a Junior Information Security Analyst, you will work with senior analysts to protect our company's data and systems from cyber threats. This is an excellent...

  • Information Security Specialist

    21 hours ago

    Karachi, Sindh, Pakistan beBeeRisk Full time

    IT Security and Risk Management ProfessionalWe are seeking a highly skilled IT Security and Risk Management professional to join our team. In this role, you will be responsible for conducting audits of IT infrastructure, systems, and applications to assess risks, controls, and compliance.The successful candidate will have a strong understanding of IT...

  • Chief Information Security Officer

    3 weeks ago

    Karachi, Sindh, Pakistan HORO Digital Full time

    About the Company: Financial InstitutionKey ResponsibilitiesProvide leadership, vision, and direction on information security to the information security staff. Prepare and launch for various platforms (e.g. Android, iOS, web etc.).Oversee and coordinate all aspects of alignment of the Bank's information security policies and procedures aligned with industry...

  • Chief Information Security Officer

    4 weeks ago

    Karachi, Sindh, Pakistan Halan Microfinance Bank Full time

    Get AI-powered advice on this job and more exclusive features.Ready for your next career move as a CISO? Join the fastest growing Microfinance BankHalan Microfinance Bank - one of the fastest growing banks in Pakistan, is expanding it's outreach. We are looking for enthusiastic individuals to join us and be part of Halan Family in this successful growth...

  • Information Technology Specialist

    3 weeks ago

    Karachi, Sindh, Pakistan PTIS - Premier Tubular Inspection Services Full time

    PTIS - Premier Tubular Inspection Services offers quality inspection services, non-destructive testing, calibration services, and instrument calibration to clients in the energy sector. With a strong focus on high-quality non-destructive testing, PTIS has been a leader in the industry for over thirty years. The team at PTIS is known for their expertise and...

  • Manager Information Security

    2 weeks ago

    Karachi, Sindh, Pakistan HRSI Full time

    About the job Manager Information SecurityCOMPANY OVERVIEW:Our client, a Karachi-based, State Bank of Pakistan (SBP) regulated Electronic Money Institution (EMI), seeks to appoint an experienced professional for the following role:As Manager Information Security, you will be responsible for establishing and enforcing security protocols that safeguard...

  • Manager Infrastructure and Information Security

    2 weeks ago

    Karachi, Sindh, Pakistan Sjggroup Full time

    Manager Infrastructure and Information SecurityManager Infrastructure and Information SecurityPosition titleManager Infrastructure and Information SecurityDescriptionWe are seeking an experienced and highly motivated Manager – Infrastructure and Information Security to lead the design, development, and execution of our IT infrastructure and cybersecurity...

  • Security Specialist

    3 weeks ago

    Karachi, Sindh, Pakistan Voice Bridge communications Full time

    Bachelor's degree in Computer Science, Information Technology, or a related fieldWe provide high-quality customer service solutions in the Consumer Services industry. We are currently seeking a Security Specialist with 1 year of experience to join our team for an Online/Remote position in Karachi.Responsibilities:- Develop, implement, and maintain security...

  • Cloud & Information Security Analyst

    3 weeks ago

    Karachi, Sindh, Pakistan Astera Software, Inc. Full time

    Job Summary:The Cloud & Information Security Analyst is primarily responsible for ensuring the security of our On-premises & Cloud-based infrastructure and Information Systems. The incumbent will play a critical role in identifying potential security risks, implementing measures to mitigate those risks, and maintaining compliance with industry regulations...