IT Security Audit and Compliance Specialist

About the role

Starlink is hiring an IT Security Audit and Compliance Specialist for an on-site position in Doha, Qatar. The role develops and runs security-audit and compliance programmes across healthcare applications, infrastructure, cloud and security services, ensuring findings are evidenced, reported and remediated. It sits within a national eHealth ecosystem, working with government, healthcare providers, technology vendors and clinical and technical teams.

Key responsibilities

• Produce clear, auditable documentation: plans, requirements, designs, test evidence, operating procedures, reports, dashboards, risks, issues and decisions.
• Apply structured governance, escalate delivery or compliance risks early and keep traceability from requirement to implementation and acceptance.
• Support knowledge transfer, training, stakeholder adoption and transition to sustainable business-as-usual operations.
• Protect health information and follow applicable privacy, security, confidentiality and regulatory requirements.
• Lead risk-based audit planning, scope, objectives and test programmes, and lead controls matrices and multi-framework mapping.
• Lead application, infrastructure, network and cloud-security audits, and Azure, O365, DLP, IAM/PAM and configuration/hardening reviews.
• Lead vulnerability management, attack-vector analysis and remediation tracking, and evidence collection, working papers, findings and executive reporting.

Required profile

• Bachelor's degree in Computer Science or a similar field.
• 15+ years of progressive security and compliance experience covering applications, infrastructure and cloud.
• Demonstrable security-compliance, security-management or audit leadership.
• Mandatory practical knowledge of Azure, O365, DLP, IAM and PAM processes and technologies.

Required skills

• Risk-based audit planning, controls matrices and multi-framework mapping.
• Application, infrastructure, network and cloud-security audits; Azure, O365, DLP, IAM/PAM and configuration/hardening reviews.
• Vulnerability management, attack vectors and remediation tracking; evidence collection, working papers and executive reports.
• SOC, SIEM/SOAR/EDR, incident response and security monitoring awareness.
• Strong knowledge of ISO 27001-family standards, NIST and CIS benchmarks.
• Preferred: CISA, CISSP, CISM, CRISC, CCSP, AZ-500, ISO 27001 Lead Auditor/Implementer, healthcare/HIPAA experience, SOC design and cloud-security architecture.