GRC Consultant / ISO 27001 Audit Readiness Specialist

About the role

A 30-day, project-based contract is sought for a GRC Consultant to support Qatar NIA audit readiness. The consultant collects, reviews, validates, organises and maintains compliance evidence in line with information security and governance requirements. The role suits someone with hands-on experience preparing audit-ready documentation and evidence repositories.

Key responsibilities

• Collect and consolidate information security and compliance evidence from departments and stakeholders.
• Review and validate evidence for completeness, accuracy and alignment with NIA audit requirements.
• Organise evidence into structured folders and repositories, map it to security controls and compliance requirements, and identify gaps.
• Coordinate with internal teams to obtain outstanding evidence and maintain evidence trackers, compliance matrices, audit registers and logs.
• Ensure evidence is labelled, version-controlled and traceable, and support internal audit preparation and audit queries.
• Provide regular progress updates on evidence collection and audit readiness.

Required profile

• Bachelor's degree in Information Technology, Cybersecurity, Information Security or a related field.
• Practical experience in GRC and in preparing audit documentation.
• Preferred certifications: ISO 27001 Lead Implementer, Lead Auditor, CISA, CRISC, CISSP or other GRC/audit certifications.
• Visa and ticket support offered for candidates from other nationalities; shared accommodation benefit of up to 1,500 QAR and transport to the office.

Required skills

• Strong understanding of ISO/IEC 27001 ISMS, information security governance, risk management and audit compliance.
• Familiarity with security controls, policies, procedures and risk assessments.
• Documentation, reporting, coordination and stakeholder management.