Cybersecurity Analyst

Description:

FAST NEXA is seeking a Cybersecurity Analyst – GRC (Governance, Risk & Compliance) to join its growing team based in DHA Phase 3, Lahore. This is a full-time, on-site opportunity tailored for professionals eager to advance their career in cybersecurity, particularly within risk, compliance, and audit domains.

The selected candidate will be responsible for implementing and maintaining cybersecurity governance frameworks, performing audits, identifying vulnerabilities, and ensuring continuous alignment with industry standards such as ISO 27001, NIST, GDPR, and SOC 2.

The role involves active coordination with internal and external auditors, development and maintenance of compliance documentation, and the promotion of a security-first culture across the organization.

Key Responsibilities:

• Conduct internal and external cybersecurity audits to ensure compliance

• Perform comprehensive risk assessments and gap analyses against recognized frameworks (ISO 27001, NIST, GDPR, SOC 2)

• Develop, maintain, and monitor cybersecurity policies, registers, audit findings, and CAPA (Corrective and Preventive Action) plans

• Coordinate effectively with auditors, stakeholders, and various business units

• Monitor and ensure ongoing regulatory and policy compliance

• Lead and support awareness campaigns to foster a culture of cybersecurity

• Stay updated with the latest threats, vulnerabilities, and compliance regulations

Requirements:

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field

• 6 months to 1 year of relevant experience in cybersecurity or GRC roles

• Strong understanding of cybersecurity frameworks, audit methodologies, and regulatory landscapes

• Excellent written and verbal communication skills

• Strong organizational skills with attention to detail

• Ability to work independently and in team environments