Job Description

Cyber & Information Security Specialist We are looking for a Cyber & Information Security Specialist to protect our systems, data, and processes. The ideal candidate will implement security controls, perform risk assessments, and actively secure our environment while ensuring compliance with global standards such as SOC 2, ISO 27001, GDPR, and HIPAA Key Responsibilities ● Conduct risk assessments, vulnerability assessments, penetration testing, and security monitoring ● Implement and maintain security controls across networks, servers, and cloud environments ● Develop and enforce security policies, incident response plans, and data protection procedures ● Lead implementation of compliance frameworks such as SOC 2, ISO 27001, GDPR, HIPAA ● Ensure data protection, privacy, and governance best practices across the organization ● Understand DevOps and engineering workflows to ensure secure development and deployment practices ● Solid understanding of network, application, and cloud security (AWS, Azure, or GCP) ● Set up and manage security tools (endpoint protection, access controls, logging, monitoring) ● Prepare for audits and certifications, including documentation and evidence collection ● Collaborate with teams to enforce secure architecture and practices ● Train staff and IT team on security best practices and awareness ● Gradually build and mentor a small internal security function from IT staff ● Stay up-to-date on emerging cybersecurity threats and industry trends Qualifications & Requirements ● 3–5 years of experience in cybersecurity, IT security, or information security ● Proven experience implementing SOC 2, ISO 27001, or other compliance frameworks (not just auditing) ● Solid understanding of network security, cloud security (AWS/Azure/GCP), and endpoint protection ● Experience with access control, SIEM, vulnerability management, and incident response ● Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related field (Master’s preferred) ● Preferred Certifications:CISSP, CISM, CEH, ISO 27001 Lead Implementer/Auditor Soft Skills ● Self-starter with a practical problem-solving mindset ● Good English proficiency and strong communication skills ● Ability to balance security with business needs ● Strong analytical and problem-solving skills Working Details ● Working Hours: 9 hours/day, Monday–Friday ● Location: Hyderabad (preferred) or Karachi ● Work Mode: On-site