Security & Compliance Analyst

AZ-Infratech LLC, a software development company committed to building reliable, secure, and scalable systems, is seeking a part-time Security & Compliance Analyst to join their remote team in Pakistan. This role focuses on ensuring that the company’s systems, processes, and products comply with relevant security standards and regulatory requirements. The ideal candidate will work closely with engineering and leadership teams to assess security controls, conduct risk assessments, support audits, and maintain compliance frameworks, all while preparing clear documentation and reports for various stakeholders.

Key Responsibilities
- Maintain and update compliance policies, procedures, and supporting evidence to ensure ongoing adherence to standards.
- Conduct risk assessments, identify vulnerabilities, and track remediation efforts through to closure.
- Review and verify evidence demonstrating the effectiveness of security controls.
- Provide support during internal and external audits, ensuring all requirements are met.
- Manage vendor compliance and conduct security reviews to mitigate third-party risks.
- Coordinate security awareness training initiatives to promote a security-conscious culture.
- Assist in documenting incident response activities and follow-up actions.
- Prepare detailed compliance reports for leadership and clients, highlighting key findings and progress.

Required Qualifications
- Minimum of 3 years’ experience in IT audit, information security, governance, risk and compliance (GRC), or regulatory compliance roles.
- Familiarity with industry frameworks such as ISO 27001, SOC 2, PCI DSS, or HIPAA.
- Strong technical understanding of IT infrastructure, including networks and access control mechanisms.
- Excellent analytical skills with an evidence-based approach to evaluating controls and risks.
- Knowledge of auditing principles and control testing methodologies.
- Proficient in written and spoken English.
- Ability to work independently, prioritize tasks effectively, and meet deadlines consistently.
- Bachelor’s degree in information security, information systems, computer science, finance, or a related discipline, or equivalent professional experience.

Preferred Qualifications and Benefits
- Professional certifications such as CISA, CISM, CISSP, Security+, or ISO 27001 Lead Auditor/Implementer are highly desirable.
- Flexible remote working hours, including late shifts, to accommodate different time zones and schedules.
- Sponsored certification programs and ongoing professional training to support career growth.
- Additional benefits to be determined.

Final candidates will undergo identity, education, certification, and reference verifications, along with a practical assessment to demonstrate their skills and suitability for the role. This position offers an excellent opportunity for professionals looking to contribute to a dynamic software company while working remotely on a flexible schedule.