GRC Analyst - Islamabad - MTBC CareCloud

Description

Job Summary

The GRC Analyst will support the development, implementation, and maintenance of Governance, Risk, and Compliance (GRC) frameworks, ensuring organizational alignment with regulatory requirements and industry best practices. The role involves assisting in risk assessments, compliance monitoring, documentation management, and audit readiness to strengthen the overall security posture of the organization.

Key Responsibilities

• Support in the implementation and maintenance of Governance, Risk, and Compliance frameworks and policies.
• Conduct and document risk assessments; track and monitor mitigation activities.
• Ensure compliance with standards such as ISO 27001, NIST, HIPAA, GDPR, or other applicable local regulations.
• Maintain and update policies, procedures, and compliance documentation.
• Coordinate with internal teams to ensure audit readiness and support external/internal audits.
• Stay informed of evolving regulations, standards, and best practices related to GRC.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cyber Security or related field.
• 1–2 years of experience in GRC, information security, compliance, or related roles.
• Familiarity with frameworks such as ISO 27001, NIST, HIPAA, GDPR, and risk management methodologies.
• Strong analytical, documentation, and communication skills.
• Relevant certifications (preferred): ISO 27001or similar.

Job Type: Full-time

Application Question(s):

• What is current salary?
• What is your expected salary?

Work Location: In person