Opportunity Information
1
Insurance/ Takaful Company
Mid Career
On Site
Karachi
The Role
Information Security GRC Specialist at Jubilee General Insurance, Karachi, leading ISO/ IEC 27001 ISMS implementation, risk assessments, audits and SECP cybersecurity compliance. Females are encouraged to apply.
•Lead ISO/ IEC 27001:2022 ISMS implementation, certification and maintenance, including policies, SoA, asset inventory and audit coordination •Conduct information security risk assessments and maintain the risk register and treatment plans •Perform internal audits, gap assessments and control assessments, and drive closure of findings •Ensure compliance with SECP cybersecurity requirements and support regulatory submissions •Support GRC initiatives including AI governance and risk management, third-party risk management, Zero Trust and data governance/ privacy •Act as JGI's internal counterpart to external consultants, reviewing deliverables and retaining knowledge in-house •Support security awareness and prepare GRC reports for management
Applicants General Eligibility & Requirements
•Females are encouraged to apply
3+ years
Education, Experience and Skills Requirements
- Bachelor 16 Years: Computer Science, Information Technology
Minimum 3 years in information security, including at least 2 years in GRC; hands-on experience with ISO/ IEC 27001:2022 implementation and internal audits Preferred: Insurance or financial sector experience
Risk Analysis, Documentation, Communication
•ISO/ IEC 27001 Lead Implementer or Lead Auditor certification (required) •CISA, CISM (preferred)
Application
- Resume/ Bio-Sketch
- Use the subject line "IS GRC Specialist- Karachi"
No application fee
About the Employer
Jubilee General Insurance Company Limited