GRC Expert

Job Title:
GRC Specialist / Expert

Location:
Lahore (Onsite)

Job Type:
Full-time

About the Role:

We are looking for a skilled
GRC Specialist
to lead and manage our governance, risk, and compliance activities. This role requires strong expertise in implementing compliance frameworks, ensuring regulatory adherence, and building effective documentation and risk management processes.

Key Responsibilities:

• Develop, implement, and maintain compliance programs aligned with standards such as
  SOC 2, ISO 27001, GDPR, and HIPAA
  (as applicable).
• Conduct regular risk assessments, identify gaps, and propose mitigation strategies.
• Prepare, update, and maintain
  policies, SOPs, evidence templates, and compliance documentation
  using Confluence or equivalent tools.
• Collaborate with cross-functional teams to ensure proper adherence to governance and compliance requirements.
• Track audit readiness and manage internal/external audit processes.
• Provide training and awareness sessions for employees on compliance practices.
• Monitor regulatory changes and ensure organizational compliance with evolving standards.

Requirements:

• 3–5 years of proven experience
  in Governance, Risk, and Compliance (GRC) roles.
• Strong knowledge of compliance frameworks:
  SOC 2, ISO 27001, GDPR, HIPAA
  .
• Proficiency in
  Confluence
  (or similar tools) for policy/document management.
• Excellent skills in risk assessment, control design, and compliance reporting.
• Strong analytical, problem-solving, and communication skills.
• Ability to work independently while collaborating with different business units.

Preferred Qualifications:

• Relevant certifications (e.g.,
  CISA, CISM, CRISC, ISO 27001 LA/LI
  ) are a plus.
• Experience working in
  IT, SaaS, or technology-driven environments
  .