Threat and Risk Assessment Expert

About the role

The Threat and Risk Assessment Expert will lead the evaluation of security risks for new initiatives, architectural changes, and existing systems across cloud, hybrid, and on‑prem environments. The role works closely with Information Security, Architecture, Legal, ERM, and project teams to ensure risk decisions are well‑informed and aligned with business objectives.

Key responsibilities

• Perform Threat and Risk Assessments (TRAs) for new initiatives, architectural changes, cloud/hybrid/on‑prem deployments, third‑party arrangements, and legacy systems.
• Produce structured TRA outputs, including risk statements, likelihood and impact ratings, control effectiveness assessments, and residual risk determinations with recommended treatments.
• Evaluate security controls such as identity and access management, encryption, logging and monitoring, network and cloud controls, and resilience measures.
• Collaborate with cross‑functional teams to support risk acceptance, transfer, or treatment decisions and prepare risk summaries for governance forums.

Required profile

• Preferably based in Qatar; visa and medical sponsorship provided.
• Open to candidates outside Qatar (relocation costs not covered).
• Proven experience performing Threat & Risk Assessments in financial institutions and/or government entities.
• Experience operating in embedded roles within Information Security teams.

Required skills

• Threat modelling
• Risk analysis
• Cloud, hybrid, and on‑prem architectures
• Identity and Access Management (IAM)
• Encryption
• Logging and monitoring
• Network controls
• Cloud controls
• Resilience measures

What we offer

• 12‑month initial contract
• Visa and medical sponsorship