GRC Coordinator

Physicians Revenue Group, Inc.

Lahore , Pakistan

Apply Now

Posted 9 hours ago 1 views Report Job

We are seeking a motivated Information Security professional to join our team and support the ongoing management and enhancement of our security compliance programs. The ideal candidate will assist in maintaining our Information Security Management System (ISMS), conduct internal audits, and help ensure adherence to industry standards such as ISO 27001, HIPAA, SOC2, and NIST CSF. This role requires a detail-oriented individual with a strong understanding of compliance frameworks and risk management, capable of supporting both internal and external audit processes while collaborating with various stakeholders.

Key Responsibilities

- Perform gap assessments for ISO 27001, HIPAA, SOC2, and NIST Cybersecurity Framework (CSF) to identify areas requiring improvement.
- Maintain and update the Information Security Management System (ISMS) to ensure it remains current and effective.
- Conduct internal audits to evaluate compliance and develop corrective action plans to address any identified issues.
- Support risk management activities including risk scoring, analysis, and mitigation planning to reduce organizational exposure.
- Manage the policy lifecycle by drafting, reviewing, and communicating updates to ensure policies remain relevant and aligned with regulatory requirements.
- Conduct vendor risk assessments and review security questionnaires to evaluate third-party security posture.
- Prepare and organize documentation required by external auditors during certification and compliance processes.

Required Qualifications

- Minimum of six months of relevant experience in information security or compliance roles.
- Strong understanding of compliance frameworks such as ISO 27001, HIPAA, SOC2, and NIST CSF, along with risk management practices.
- Experience in conducting internal audits and managing remediation plans effectively.
- Excellent writing, documentation, and communication skills to clearly articulate findings and recommendations.
- Ability to interpret technical security controls and align them with regulatory and compliance requirements.

Preferred Qualifications

- Certifications such as ISO 27001 Lead Implementer or Lead Auditor are highly desirable.
- Professional certifications like CISA (Certified Information Systems Auditor) or CRISC (Certified in Risk and Information Systems Control) are advantageous.
- HIPAA Professional Certification is a plus, demonstrating specialized knowledge in healthcare data protection.

This position requires the candidate to work on-site, fostering close collaboration with internal teams and stakeholders. If you are passionate about information security and compliance, and eager to contribute to a dynamic environment, we encourage you to apply.