Information Security GRC Specialist
About the Role
Jubilee General Insurance is hiring an Information Security GRC Specialist at its Head Office in Karachi. The role manages information security governance, ISO/IEC 27001 compliance, SECP cybersecurity guidelines, and third-party risk assessments.
Key Responsibilities
- Lead and maintain the Information Security Governance, Risk, and Compliance (GRC) framework across the enterprise.
- Drive ISO/IEC 27001:2022 implementation, internal audits, surveillance reviews, and external certification maintenance.
- Conduct periodic cybersecurity risk assessments, vulnerability management follow-ups, and business impact analyses.
- Ensure full compliance with SECP Cybersecurity Directives and statutory insurance regulations.
- Manage vendor and third-party risk assessments, reviewing cloud security and data confidentiality controls.
- Conduct security awareness sessions, phishing simulations, and prepare executive risk reports for the Board Audit Committee.
Qualifications & Skills
Basic Requirements
- Bachelor's degree in Computer Science, Information Technology, Cyber Security, or related discipline.
- 3+ years of information security experience, including at least 2 years dedicated to GRC functions.
- Mandatory ISO/IEC 27001 Lead Implementer or Lead Auditor certification.
- Solid understanding of risk management frameworks (NIST, CIS, ISO 27005) and local SECP/SBP regulatory mandates.
- Strong analytical, documentation, and policy drafting skills.
Preferred Qualifications
- Additional certifications such as CISA, CRISC, or CISSP.
- Hands-on experience with automated GRC software platforms.
How to Apply
Applying with JobAsaan takes less than a minute with zero manual form filling.
Choose Your Application Method
Apply directly on the employer's official portal, or let JobAsaan's concierge team prepare your ATS CV and submit for you.
Review & Tailor
Ensure your qualifications and resume align with Jubilee General Insurance's key requirements before submission.
Submission & Interview Tracking
Submit your application and prepare for the interview with verified job specifications.
About Jubilee General Insurance
Jubilee General Insurance is Pakistan's highest-rated and largest private non-life insurance company, providing comprehensive underwriting solutions in fire, marine, health, and financial casualty.
Let our professional HR team handle your entire application for Jubilee General Insurance from start to finish.