GRC Senior Analyst / Specialist

About the role

The GRC Senior Analyst / Specialist will support the governance, risk, and compliance framework to ensure alignment with national cyber regulations, security policies and government assurance standards. The role focuses on identifying, assessing and managing cyber and information security risks across systems and operations while maintaining continuous compliance.

Key responsibilities

• Provide expert consultation on Governance, Risk, and Compliance (GRC) matters.
• Review, assess and enhance enterprise cybersecurity architecture.
• Conduct reviews of Qatar Cyber Security Framework (QCSF) evidence and deliver compliance recommendations.
• Identify cybersecurity risks, recommend mitigation strategies and track remediation of vulnerabilities.
• Support the implementation of cybersecurity policies, standards and best practices.
• Collaborate with business and technical teams to improve the organization’s cybersecurity posture.
• Prepare reports, assessments and recommendations for senior management.
• Support audits, assessments and accreditation processes.

Required profile

• Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, IT or a related field.
• Minimum 10 years of experience in cybersecurity with strong expertise in GRC, enterprise cybersecurity architecture and regulatory compliance.
• Mandatory certifications: CIIP and CISM.
• Preferred certifications: GICSP and CCISO.

Required skills

• Strong knowledge of Governance, Risk & Compliance (GRC) frameworks.
• Extensive experience with enterprise cybersecurity architecture.
• Cybersecurity risk assessment and mitigation.
• Implementation and management of security controls.
• Audit support and compliance documentation.