Assistant Manager: GRC & Compliance

Arpatech (Pvt) Ltd · Karachi, Karachi District; Sindh, Pakistan

Role Overview:

Oversee the defensive operations and the strategic governance of the organization. Look after SOC to ensure proactive threat detection while maintaining the organization's compliance with global standards.

Role & Responsibilities:

• SOC & Monitoring: Oversee the Security Operations Center and manage the SIEM (Wazuh preferred) for real-time threat detection.
• Intrusion Analysis: Lead the team in analyzing traffic patterns and logs to identify sophisticated breaches.
• Governance & Risk: Own the GRC function, ensuring compliance with ISO 27001, NIST, and GDPR .
• SDLC Governance: Audit the SDLC process to ensure that security requirements and compliance standards are documented and followed by engineering teams.
• Incident Management: Act as the lead for incident response and post-mortem analysis.

Requirements:

• Mandatory Certifications: GCIA (GIAC Certified Intrusion Analyst) or GCDA (GIAC Certified Detection Analyst). CISM or CISA is a plus.
• Technical Skills: Proficiency in SIEM platforms (Wazuh), log analysis, and risk assessment methodologies.
• Education: Bachelor’s/Master’s in Information Systems or related field.
• Focus: Defense Operations, Risk Management, and Regulatory Alignment.