Consultant - ISMS / GRC

Job Summary

We are seeking a Consultant with proven experience in implementing and maintaining ISO 27001-based Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC) frameworks. The ideal candidate will have hands-on expertise in ISO 27001 gap assessments, risk assessments, policy development, and certification audit preparation, along with working knowledge of standards such as NIST, NCA, SAMA, COBIT, and ITIL. This role involves supporting compliance programs, developing security controls, conducting awareness training, and assisting clients in aligning IT strategies with regulatory requirements including GDPR, HIPAA, and PCI-DSS. Strong documentation, auditing, and communication skills are essential.

Job Description

ISMS Responsibilities

• Experience of implementation and maintenance of ISO 27001-based Information Security Management Systems (ISMS).
• Perform gap assessments to identify areas of non-compliance and assist in remediation planning against various standards & frameworks like NIST, NCA, SAMA, etc.
• Participate in risk assessments and help develop mitigation strategies.
• Develop ISMS policies, procedures, and security controls aligned with ISO 27001 standards.
• Prepare documentation and provide support during ISO 27001 certification audits.
• Conduct security awareness training and incident management processes.

IT GRC Responsibilities

Required Qualifications & Experience

Additional Requirements

Seniority level

Employment type

Job function

Industries

Referrals increase your chances of interviewing at Inbox Business Technologies by 2x

Business Analyst (Remote, Anywhere in Pakistan, USD Salary)

Principal Functional Consultant - Dynamics 365 Business Central

Salesforce Consultant, Software Engineer / Developer

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

#J-18808-Ljbffr