GRC Senior Analyst / Specialist

About the role

The GRC Senior Analyst / Specialist will support the governance, risk, and compliance framework, ensuring alignment with national cyber regulations, security policies, and government assurance standards. The role focuses on identifying, assessing, and managing cyber and information security risks across systems and operations while maintaining continuous compliance.

Key responsibilities

• Provide expert consultation on Governance, Risk, and Compliance (GRC) matters.
• Review, assess, and enhance enterprise cybersecurity architecture.
• Conduct reviews of Qatar Cyber Security Framework (QCSF) evidence and deliver compliance recommendations.
• Support security assessments, vulnerability remediation, and tracking of control gaps.
• Collaborate with security, IT, and government stakeholders to strengthen cybersecurity governance.
• Prepare reports, assessments, and strategic recommendations for management.

Required profile

• Bachelor’s or Master’s degree in Cybersecurity, Information Security, Computer Science, IT or related field.
• Minimum 10 years of experience in cybersecurity with strong GRC expertise.
• Mandatory certifications: CIIP, CISM.
• Preferred certifications: GICSP, CCISO.

Required skills

• Governance, Risk & Compliance (GRC) frameworks.
• Enterprise cybersecurity architecture.
• Cybersecurity risk assessment and mitigation.
• Security assessments and vulnerability remediation.