Opportunity Information
1
Multinational Corporate Entity/ Company
Experienced Professional
Regular/ Full Time
On- Site (Fixed Location)
Islamabad
G-8
The Role
The GRC Lead at Komatsu Pakistan Soft, G-8 Islamabad, provides leadership and a single point of accountability for governance, risk, compliance, certification and continual improvement across management systems (ISO 9001, ISO/ IEC 27001, 27701, 42001). This is a full-time, on-site contractual role for one year, 5 days a week.
•Maintain an effective governance framework with clear roles, responsibilities, decision authority, reporting lines and escalation routes •Maintain an integrated management system for QMS, ISMS, PIMS, AIMS and other adopted management systems •Maintain the risk management methodology and organizational risk registers, including risk ownership, treatment plans and target dates •Maintain and monitor the register of legal, regulatory, contractual, client and internal compliance obligations •Oversee document control, controlled-document and record registers, retention requirements and management-system change impacts •Plan and deliver a risk-based quarterly and annual audit programme •Coordinate certification, surveillance, recertification, transition, client and other external assurance audits •Oversee corrective actions from containment and root cause analysis through closure and effectiveness review •Provide compliance oversight for significant nonconformities, security or privacy incidents, breaches and control failures •Define and monitor compliance requirements for suppliers, vendors, contractors and service providers •Provide governance oversight of business continuity, disaster recovery and resilience reviews and tests •Plan and deliver the annual competence and awareness programme and maintain training records •Facilitate management reviews and maintain GRC metrics, dashboards and reports for senior management •Prepare gap assessments, business cases, resource estimates and roadmaps for emerging standards •Coordinate AI governance risks, controls and obligations and support responsible use of AI •Respond to client assurance requests and maintain constructive stakeholder relationships
Applicants General Eligibility & Requirements
5+ years
Education, Experience and Skills Requirements
- Bachelor's Degree (16 Years): Computer Science, Software Engineering, Information Technology, Engineering, Business Administration, Law, Risk Management
- Masters: Risk Management
•At least 5 years of relevant experience in management systems, risk, compliance or assurance, including experience in a software or IT services environment Preferred: •Experience coordinating certification or client audits
ISO 27001, ISO 9001, Risk Management, Compliance, Internal Audit, Root Cause Analysis, Business Continuity
•Lead Auditor or Lead Implementer certification for at least one management system standard adopted by KPS (required) •Additional certification or training in risk management, privacy, information security, business continuity, AI governance or GRC (preferred)
About the Employer
Komatsu Pakistan Soft