cloud security (infosec) specialist Jobs in Doha

cloud security (infosec) specialist

grc analyst (information security) Jobs in Doha

grc analyst (information security)

senior project analyst

reporting analyst

soc analyst

grc analyst information security

<div>
 <ul>
 <li>
 Control frameServices mapping (ISO 27001, QCSF, NIA ) to business processes.
 
 </li>
 <li>
 Control design &amp; effectiveness testing (walkthroughs, sampling, test scripts).
 
 </li>
 <li>
 Audit lifecycle execution (readiness, fieldServices coordination, closure with auditors).
 
 </li>
 <li>
 Evidence management &amp; traceability (artifact collection, versioning, chain of custody).
 
 </li>
 <li>
 Risk assessment &amp; treatment (registers, scoring models, risk acceptance/mitigation plans).
 
 </li>
 <li>
 Policy/standard/procedure development and periodic review for auditability.
 
 </li>
 <li>
 Third-party/vendor risk management
 
 </li>
 <li>
 Cloud security compliance (AWS/Azure/GCP: IAM, logging, baseline configurations).
 
 </li>
 <li>
 Regulatory alignment (NIA, Qatar Privacy Law, Qatar Cyber Crime Law, GDPR/CCPA, PCI DSS, ) and applicability analysis.
 
 </li>
 <li>
 Metrics &amp; reporting (KPIs/KRIs, dashboards, executive summaries).
 
 </li>
 <li>
 Issue management &amp; remediation tracking
 
 </li>
 <li>
 GRC platform proficiency
 
 
 
 
 </li>
 </ul>
 Requirements
 
 
 <ul>
 <li>
 Bachelor&rsquo;s in computer science, Information Security, IT and equivalent hands‑on experience.
 
 </li>
 <li>
 Certification: CompTIA Security+, ISO 27001 Internal Auditor/LeadImplementer, CCSK, CISA, CISM, CISSP
 
 </li>
 <li>
 Clear written and verbal communication
 
 </li>
 <li>
 4+ Years can lead an audit cycle end-to-end, mature control sets, and coach other
 
 </li>
 </ul>
</div>

GRC Analyst (Information Security)

ECCO Gulf Majorel Qatar

<div>Job Description

Job Specific Skills:
<ul><li>Control frameServices mapping (ISO 27001, QCSF, NIA ) to business processes.</li><li>Control design &amp; effectiveness testing (walkthroughs, sampling, test scripts).</li><li>Audit lifecycle execution (readiness, field Services coordination, closure with auditors).</li><li>Evidence management &amp; traceability (artifact collection, versioning, chain of custody).</li><li>Risk assessment &amp; treatment (registers, scoring models, risk acceptance/mitigation plans).</li><li>Policy/standard/procedure development and periodic review for auditability.</li><li>Third-party/vendor risk management</li><li>Cloud security compliance (AWS/Azure/GCP: IAM, logging, baseline configurations).</li><li>Regulatory alignment (NIA, Qatar Privacy Law, Qatar Cyber Crime Law, GDPR/CCPA, PCI DSS, ) and applicability analysis.</li><li>Metrics &amp; reporting (KPIs/KRIs, dashboards, executive summaries).</li><li>Issue management &amp; remediation tracking.</li><li>GRC platform proficiency.</li></ul>
Minimum Qualifications

Bachelors in computer science, Information Security, IT and equivalent hands&#8209;on experience. 
Certification: CompTIA Security+, ISO 27001 Internal Auditor/Lead Implementer, CCSK, CISA, CISM, CISSP 
Clear written and verbal communication
Minimum Experience
4+ Years can lead an audit cycle end-to-end, mature control sets, and coach other.</div>

ECCO Gulf WLL

<div>
 
 Job Description
 
 
 
 
 Job Specific Skills:
 
 
 
 <ul>
 <li>
 Control frameServices mapping (ISO 27001, QCSF, NIA ) to business processes.
 </li>
 <li>
 Control design &amp; effectiveness testing (walkthroughs, sampling, test scripts).
 </li>
 <li>
 Audit lifecycle execution (readiness, field Services coordination, closure with auditors).
 </li>
 <li>
 Evidence management &amp; traceability (artifact collection, versioning, chain of custody).
 </li>
 <li>
 Risk assessment &amp; treatment (registers, scoring models, risk acceptance/mitigation plans).
 </li>
 <li>
 Policy/standard/procedure development and periodic review for auditability.
 </li>
 <li>
 Third-party/vendor risk management
 </li>
 <li>
 Cloud security compliance (AWS/Azure/GCP: IAM, logging, baseline configurations).
 </li>
 <li>
 Regulatory alignment (NIA, Qatar Privacy Law, Qatar Cyber Crime Law, GDPR/CCPA, PCI DSS, ) and applicability analysis.
 </li>
 <li>
 Metrics &amp; reporting (KPIs/KRIs, dashboards, executive summaries).
 </li>
 <li>
 Issue management &amp; remediation tracking.
 </li>
 <li>
 GRC platform proficiency.
 
 
 </li>
 </ul>
 
 Minimum Qualifications
 
 
 
 Bachelors in computer science, Information Security, IT and equivalent hands‑on experience.
 
 
 Certification: CompTIA Security+, ISO 27001 Internal Auditor/Lead Implementer, CCSK, CISA, CISM, CISSP
 
 
 Clear written and verbal communication
 
 
 
 Minimum Experience
 
 
 
 4+ Years can lead an audit cycle end-to-end, mature control sets, and coach other.
</div>

Al Adyat consultancy

Job Description:We are seeking a highly skilled and experienced GRC (Governance, Risk, and Compliance) Expert to join our team. The ideal candidate will be responsible for ensuring compliance with legal standards, identifying and mitigating risks, and overseeing data privacy practices. The GRC Expert will play a crucial role in developing and implementing governance frameworks, promoting ethical behavior, and monitoring regulatory changes. This role requires a deep understanding of industry best practices, including ISO 27001, SOC 2, PCI, SOX, and specific frameworks such as the Qatar Cyber Security framework and the National Information Assurance (NIA) framework.Key Responsibilities:&middot; Develop, implement, and maintain governance, risk, and compliance programs in line with industry best practices and regulatory requirements.&middot; Conduct risk assessments to evaluate the effectiveness of GRC programs and identify potential risks.&middot; Ensure compliance with the Qatar Cyber Security framework and the National Information Assurance (NIA) framework.&middot; Collaborate with process owners, auditors, and stakeholders to analyze, monitor, and address risk management and compliance issues.&middot; Administer ISO 27001 and SOC 2 compliance programs, assisting with assessments and ensuring adherence to standards.&middot; Oversee data privacy practices and ensure the protection of information assets from cyber threats.&middot; Conduct regular audits and assessments to identify gaps and enhance governance, risk management, and compliance processes.&middot; Provide legal guidance and support compliance initiatives within the organization.&middot; Promote ethical behavior and foster a culture of integrity within the organization.&middot; Monitor regulatory changes and ensure the organization remains compliant with all relevant laws and regulations.&middot; Develop and deliver training programs to enhance awareness of GRC practices and policies.Qualifications:&middot; Bachelor's degree in Information Security, Risk Management, or a related field.&middot; Professional certifications such as CISSP, CISM, CRISC, or equivalent.&middot; Extensive experience in governance, risk, and compliance roles, preferably within the information security domain.&middot; In-depth knowledge of industry standards and frameworks, including ISO 27001, SOC 2, PCI, SOX, Qatar Cyber Security framework, and NIA framework.&middot; Strong analytical and problem-solving skills with the ability to identify and mitigate risks effectively.&middot; Excellent communication and interpersonal skills, with the ability to collaborate with stakeholders at all levels.&middot; Proven track record of successfully implementing and managing GRC programs.Ability to work independently and as part of a team in a fast-paced environment.Job Type: Full-timePay: QAR13,000.00 - QAR15,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Administer ISO 27001 and SOC 2 compliance programs: 3 years (Required)</li><li>Governance, Risk, and Compliance (GRC): 3 years (Required)</li></ul>Language:<ul><li>Arabic (Required)</li><li>English (Required)</li></ul>License/Certification:<ul><li>degree in Information Security or Risk Management (Required)</li><li>CISSP (Required)</li><li>CISM (Required)</li><li>CRISC (Required)</li></ul>

Governance, Risk, and Compliance (GRC)

Arab Solutions

<div>
 
 Position:
 
 SAP Consultant &ndash; GRC Access Control (SAP UI Data Protection)
 
 
 
 Duration:
 
 12 Months &ndash; Extendable
 
 
 
 Location:
 
 Qatar
 
 
 
 About The Role
 
 
 
 We are seeking an experienced
 
 SAP UI Data Protection Consultant
 
 with proven expertise in implementing
 
 data masking, access control, and privacy compliance solutions
 
 within SAP environments. The ideal candidate will demonstrate strong technical capabilities in
 
 SAP UI masking, attribute-based access, and data privacy frameworks
 
 , ensuring sensitive data is protected across
 
 SAP Fiori and GUI interfaces
 
 in alignment with
 
 global data protection regulations
 
 .
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Implementation &amp; Configuration
 </li>
 <li>
 Lead end-to-end SAP UI Data Protection implementations (minimum two successful rollouts).
 </li>
 <li>
 Design and configure data masking strategies at multiple levels:
 </li>
 <ul>
 <li>
 Table level
 </li>
 <li>
 Fiori application level
 </li>
 <li>
 Data-element level
 </li>
 </ul>
 <li>
 Implement Reveal on Demand functionality for controlled sensitive data visibility.
 </li>
 <li>
 Configure role-based, attribute-based, and data-element-based masking to enforce granular access controls.
 </li>
 <li>
 Utilize Field Access Trace tools for monitoring and auditing user access patterns.
 </li>
 <li>
 Develop BAdI implementations for custom business scenarios requiring dynamic masking.
 </li>
 <li>
 Use SAP recording tools to streamline configuration and testing of masking rules.
 </li>
 <li>
 Collaborate with Basis, Security, and Functional teams to align data protection measures with business processes.
 </li>
 <li>
 Ensure adherence to GDPR, CCPA, and other applicable data privacy laws.
 </li>
 <li>
 Documentation
 </li>
 <li>
 Prepare comprehensive documentation for workflows, configurations, and user guides.
 </li>
 <li>
 Develop functional specifications for custom developments or system enhancements.
 </li>
 <li>
 Project Management Support
 </li>
 <li>
 Support project planning, scheduling, and deliverables tracking.
 </li>
 <li>
 Monitor implementation progress and provide status updates to stakeholders.
 </li>
 <li>
 Ensure project execution aligns with defined timelines, scope, and objectives.
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Information Systems, or related field.
 </li>
 <li>
 SAP Certification in Security, GRC, or Data Protection modules.
 </li>
 <li>
 Hands-on experience with SAP Fiori, S/4HANA, and ECC systems.
 </li>
 <li>
 Familiarity with cross-functional modules (e.g., HR, Finance) for data sensitivity mapping.
 
 
 </li>
 </ul>
 
 Required Professional Qualifications/Skills
 
 
 
 <ul>
 <li>
 Qualifications and Skills:
 </li>
 <li>
 +8 years of experience with 2-3 full life cycle implementation
 </li>
 <li>
 Experience in S4 HANA and FIORI apps
 </li>
 <li>
 Preferably has experience in the oil and gas and Middle East region.
 </li>
 <li>
 Familiar with change management procedures and project documentation
 </li>
 <li>
 SAP UI Data Protection
 </li>
 <li>
 Advanced configuration and implementation
 </li>
 <li>
 Data Masking Techniques
 </li>
 <li>
 Table, Fiori, Role, Attribute, Data-element
 </li>
 <li>
 Reveal on Demand
 </li>
 <li>
 Setup and customization
 </li>
 <li>
 Field Access Tracing
 </li>
 <li>
 Configuration and analysis
 </li>
 <li>
 BAdI Implementation
 </li>
 <li>
 Custom scenario development
 </li>
 <li>
 SAP Security &amp; Authorization
 </li>
 <li>
 Role design and access control
 </li>
 <li>
 Compliance &amp; Audit Readiness
 </li>
 <li>
 GDPR, CCPA, internal audit support
 </li>
 <li>
 Communication &amp; Documentation
 </li>
 <li>
 Professional reporting and stakeholder engagement
 
 
 </li>
 </ul>
 Skills: s/4hana,sap fiori,data protection,ecc,grc,finance
</div>

SAP Consultant – GRC Access Control (SAP UI Data Protection)

<div>
 
 Introduction
 
 
 
 The IBM security consulting team provides customized solutions for our clients, not point solutions or basic product installation. The Managing Consultant will work with our clients to understand their specific business issues, both internally and externally and provide solutions to solve specific business issues for our clients. They will be able to look at our client&rsquo;s issues and work with other senior IBM consultants to provide guidance on a systematic approach to solve these within our client&rsquo;s budget and timeframe.
 
 
 The Managing Consultants will provide subject matter expertise in the form of workshops, and consulting engagements, which assess a client&rsquo;s security capabilities, which could be in the policy, process, technology or organizational areas, identify gaps and recommend cost effective best practices to reduce client risk and increase their handle on security risk. Having hands on implementation experience is a requirement of this position as well at deep technical knowledge of Security Governance tools. The Senior Consultant will assist in pre-sales, sales, closure, and then organizing the delivery of security consulting services with local teams.
 
 
 
 Your Role And Responsibilities
 
 
 
 The IBM security consulting team provides customized solutions for our clients, not point solutions or basic product installation. The Managing Consultant will work with our clients to understand their specific business issues, both internally and externally and provide solutions to solve specific business issues for our clients. They will be able to look at our client&rsquo;s issues and work with other senior IBM consultants to provide guidance on a systematic approach to solve these within our client&rsquo;s budget and timeframe.
 
 
 The Managing Consultants will provide subject matter expertise in the form of workshops, and consulting engagements, which assess a client&rsquo;s security capabilities, which could be in the policy, process, technology or organizational areas, identify gaps and recommend cost effective best practices to reduce client risk and increase their handle on security risk. Having hands on implementation experience is a requirement of this position as well at deep technical knowledge of Security Governance tools. The Senior Consultant will assist in pre-sales, sales, closure, and then organizing the delivery of security consulting services with local teams.
 
 
 
 Required Technical And Professional Expertise
 
 
 
 Security Domain Skills
 
 
 <ul>
 <li>
 This position requires knowledge across multiple platforms, processes or architectures. This position requires security consulting skills and the ability to act as a trusted client advisor and a trusted technical lead for the team. The Managing Consultant will need to have skills to be able to work with other IBM teams and:
 </li>
 <li>
 Deliver strategic security advisory services
 </li>
 <li>
 A proven record of security thought leadership and be recognized for business and technical acumen Cyber Strategy and Risk services
 </li>
 <li>
 Depth of knowledge in one or more of the core security areas in Cyber Strategy and Risk such as Security Architecture/Cloud Security/ OT Security/ SAP Security/e-GRC.
 </li>
 <li>
 Hands on experience and understanding of compliance (ISO 27001, NCA, SOC 2, COBIT, NIST, PCI DSS, GDPR etc) and Regulatory requirements.
 
 
 </li>
 </ul>
 Core consulting skills
 
 
 <ul>
 <li>
 Strong communication and presentation skills
 </li>
 <li>
 The ability to lead large groups and be a primary facilitator and lead.
 </li>
 <li>
 Strong written skills
 </li>
 <li>
 Comfortable working in a project based / client serving model
 </li>
 <li>
 Ability to lead and shape client expectations
 </li>
 <li>
 Help drive pursuits and engage in complex deals, matching outcomes to expectations
 </li>
 <li>
 Ability to work easily with diverse and dynamic teams
 </li>
 <li>
 Ability to work in a matrix management model
 
 
 </li>
 </ul>
 
 Preferred Technical And Professional Experience
 
 
 
 <ul>
 <li>
 At least 5 years relevant consulting experience in Cyber Strategy and Risk domain
 </li>
 <li>
 Security consulting experience across multiple client verticals, including Financial Services, Public Sector, Technology, Telecommunications, Manufacturing, Industrial &amp; Mining etc.
 </li>
 </ul>
</div>

Managing Consultant - Cyber Strategy & Risk

Trust Arabia Administrative Services & Consultancy

About the RoleWe are seeking an experienced Security Operations Center (SOC) Analyst. The ideal candidate will have strong analytical skills, a proactive mindset, and proven experience in detecting, analyzing, and responding to cybersecurity incidents. This role combines strategic thinking with hands-on technical expertise to ensure our security defenses remain resilient against evolving threats.Key Responsibilities<ul><li>Monitor and analyze security alerts from SIEM, IDS/IPS, firewalls, and endpoint protection tools.</li><li>Investigate, triage, and respond to security incidents, identifying root causes and implementing corrective actions.</li><li>Conduct proactive threat hunting and vulnerability assessments.</li><li>Develop and maintain incident response procedures and playbooks.</li><li>Collaborate with IT and network teams to strengthen overall security posture.</li><li>Prepare detailed reports and provide recommendations to senior management on emerging threats and mitigation strategies.</li></ul>Mandatory Requirements<ul><li>Experience: 4&ndash;7 years in a SOC Analyst or related cybersecurity role.</li><li>Language: Fluent in English (written and spoken).</li><li>Availability: Ready to join by January 26.</li><li>License: Valid driving license.</li><li>Strong hands-on experience with systems and security tools (configuration, troubleshooting, optimization).</li><li>Solid understanding of security frameworks such as MITRE ATT&amp;CK, NIST, and ISO 27001.</li><li>Proficiency with SIEM platforms like Microsoft Sentinel, Splunk, or IBM QRadar.</li></ul>Preferred Qualifications (Plus Points)<ul><li>Arabic language proficiency.</li><li>Experience in the Oil &amp; Gas sector, especially with industrial control systems (ICS) or OT security.</li><li>Relevant certifications such as GCIA, GCIH, CEH, CompTIA Security+, or CISSP.</li></ul>Soft Skills<ul><li>Excellent communication and reporting abilities.</li><li>Strong analytical and problem-solving mindset.</li><li>Ability to perform effectively under pressure in incident response scenarios.</li><li>Team-oriented, adaptable, and committed to continuous improvement.</li></ul>Job Type: Full-time

SOC Analyst

Explore 1186+ Grc analyst information security in Doha this December. Find roles across top companies and apply now to boost your career.

1186 grc analyst information security jobs IN Doha

GRC Analyst (Information Security)

GRC Analyst (Information Security)

GRC Analyst (Information Security)

Governance, Risk, and Compliance (GRC)

SAP Consultant – GRC Access Control (SAP UI Data Protection)

Managing Consultant - Cyber Strategy & Risk

SOC Analyst