Senior GRC Analyst / Specialist

About the role

The Senior GRC Analyst / Specialist will support the governance, risk, and compliance framework to ensure alignment with Qatar's national cyber regulations, security policies, and assurance standards. The role focuses on identifying, assessing, and managing cyber and information‑security risks across systems while maintaining compliance with regulatory frameworks and audit requirements.

Key responsibilities

• Provide expert consultation on Governance, Risk, and Compliance (GRC) matters.
• Review, assess, and enhance enterprise cybersecurity architecture.
• Conduct reviews of Qatar Cyber Security Framework (QCSF) evidence and recommend corrective actions.
• Support security assessments, vulnerability remediation, and tracking of control gaps.
• Collaborate with security, IT, and government stakeholders to strengthen cybersecurity governance.
• Prepare reports, assessments, and recommendations for senior management.
• Stay updated on emerging cyber threats, technologies, and regulatory changes.

Required profile

• Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, IT or related field.
• Minimum 10 years of experience in cybersecurity with strong GRC expertise.
• Mandatory certifications: CIIP (Certified Information Infrastructure Professional) and CISM (Certified Information Security Manager).
• Preferred certifications: GICSP (Global Industrial Cyber Security Professional) and CCISO (Certified Chief Information Security Officer).

Required skills

• Governance, Risk & Compliance (GRC) frameworks.
• Enterprise cybersecurity architecture design.
• Cybersecurity risk assessment and mitigation.
• Qatar Cyber Security Framework (QCSF) compliance.
• Implementation of security controls and vulnerability remediation.