cloud security (infosec) specialist Jobs in Qatar

cloud security (infosec) specialist

grc analyst (information security) Jobs in Qatar

grc analyst (information security)

condition monitoring analyst Jobs in Qatar

condition monitoring analyst

reporting analyst

soc analyst

grc analyst information security

<div>
 <ul>
  <li>
   Control frameServices mapping (ISO 27001, QCSF, NIA ) to business processes.
   <br/>
  </li>
  <li>
   Control design &amp; effectiveness testing (walkthroughs, sampling, test scripts).
   <br/>
  </li>
  <li>
   Audit lifecycle execution (readiness, fieldServices coordination, closure with auditors).
   <br/>
  </li>
  <li>
   Evidence management &amp; traceability (artifact collection, versioning, chain of custody).
   <br/>
  </li>
  <li>
   Risk assessment &amp; treatment (registers, scoring models, risk acceptance/mitigation plans).
   <br/>
  </li>
  <li>
   Policy/standard/procedure development and periodic review for auditability.
   <br/>
  </li>
  <li>
   Third-party/vendor risk management
   <br/>
  </li>
  <li>
   Cloud security compliance (AWS/Azure/GCP: IAM, logging, baseline configurations).
   <br/>
  </li>
  <li>
   Regulatory alignment (NIA, Qatar Privacy Law, Qatar Cyber Crime Law, GDPR/CCPA, PCI DSS, ) and applicability analysis.
   <br/>
  </li>
  <li>
   Metrics &amp; reporting (KPIs/KRIs, dashboards, executive summaries).
   <br/>
  </li>
  <li>
   Issue management &amp; remediation tracking
   <br/>
  </li>
  <li>
   GRC platform proficiency
   <br/>
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Requirements
 <br/>
 <br/>
 <ul>
  <li>
   Bachelor&rsquo;s in computer science, Information Security, IT and equivalent hands‑on experience.
   <br/>
  </li>
  <li>
   Certification: CompTIA Security+, ISO 27001 Internal Auditor/LeadImplementer, CCSK, CISA, CISM, CISSP
   <br/>
  </li>
  <li>
   Clear written and verbal communication
   <br/>
  </li>
  <li>
   4+ Years can lead an audit cycle end-to-end, mature control sets, and coach other
   <br/>
  </li>
 </ul>
</div>


GRC Analyst (Information Security)

ECCO Gulf Majorel Qatar

<div><b>Job Description</b>
<p><b>
Job Specific Skills:</b></p>
<ul><li>Control frameServices mapping (ISO 27001, QCSF, NIA ) to business processes.</li><li>Control design &amp; effectiveness testing (walkthroughs, sampling, test scripts).</li><li>Audit lifecycle execution (readiness, field Services coordination, closure with auditors).</li><li>Evidence management &amp; traceability (artifact collection, versioning, chain of custody).</li><li>Risk assessment &amp; treatment (registers, scoring models, risk acceptance/mitigation plans).</li><li>Policy/standard/procedure development and periodic review for auditability.</li><li>Third-party/vendor risk management</li><li>Cloud security compliance (AWS/Azure/GCP: IAM, logging, baseline configurations).</li><li>Regulatory alignment (NIA, Qatar Privacy Law, Qatar Cyber Crime Law, GDPR/CCPA, PCI DSS, ) and applicability analysis.</li><li>Metrics &amp; reporting (KPIs/KRIs, dashboards, executive summaries).</li><li>Issue management &amp; remediation tracking.</li><li>GRC platform proficiency.</li></ul>
<b>Minimum Qualifications</b>
<p>
Bachelors in computer science, Information Security, IT and equivalent hands&#8209;on experience.<br>
Certification: CompTIA Security+, ISO 27001 Internal Auditor/Lead Implementer, CCSK, CISA, CISM, CISSP<br>
Clear written and verbal communication</p>
<b>Minimum Experience
</b><p>4+ Years can lead an audit cycle end-to-end, mature control sets, and coach other.</p></div>

ECCO Gulf WLL

<div>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 <strong>
  Job Specific Skills:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Control frameServices mapping (ISO 27001, QCSF, NIA ) to business processes.
  </li>
  <li>
   Control design &amp; effectiveness testing (walkthroughs, sampling, test scripts).
  </li>
  <li>
   Audit lifecycle execution (readiness, field Services coordination, closure with auditors).
  </li>
  <li>
   Evidence management &amp; traceability (artifact collection, versioning, chain of custody).
  </li>
  <li>
   Risk assessment &amp; treatment (registers, scoring models, risk acceptance/mitigation plans).
  </li>
  <li>
   Policy/standard/procedure development and periodic review for auditability.
  </li>
  <li>
   Third-party/vendor risk management
  </li>
  <li>
   Cloud security compliance (AWS/Azure/GCP: IAM, logging, baseline configurations).
  </li>
  <li>
   Regulatory alignment (NIA, Qatar Privacy Law, Qatar Cyber Crime Law, GDPR/CCPA, PCI DSS, ) and applicability analysis.
  </li>
  <li>
   Metrics &amp; reporting (KPIs/KRIs, dashboards, executive summaries).
  </li>
  <li>
   Issue management &amp; remediation tracking.
  </li>
  <li>
   GRC platform proficiency.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Minimum Qualifications
  <br/>
  <br/>
 </strong>
 Bachelors in computer science, Information Security, IT and equivalent hands‑on experience.
 <br/>
 <br/>
 Certification: CompTIA Security+, ISO 27001 Internal Auditor/Lead Implementer, CCSK, CISA, CISM, CISSP
 <br/>
 <br/>
 Clear written and verbal communication
 <br/>
 <br/>
 <strong>
  Minimum Experience
  <br/>
  <br/>
 </strong>
 4+ Years can lead an audit cycle end-to-end, mature control sets, and coach other.
</div>


Al Adyat consultancy

<p><b>Job Description:</b></p><p>We are seeking a highly skilled and experienced GRC (Governance, Risk, and Compliance) Expert to join our team. The ideal candidate will be responsible for ensuring compliance with legal standards, identifying and mitigating risks, and overseeing data privacy practices. The GRC Expert will play a crucial role in developing and implementing governance frameworks, promoting ethical behavior, and monitoring regulatory changes. This role requires a deep understanding of industry best practices, including ISO 27001, SOC 2, PCI, SOX, and specific frameworks such as the Qatar Cyber Security framework and the National Information Assurance (NIA) framework.</p><p><b>Key Responsibilities:</b></p><p>&middot; Develop, implement, and maintain governance, risk, and compliance programs in line with industry best practices and regulatory requirements.</p><p>&middot; Conduct risk assessments to evaluate the effectiveness of GRC programs and identify potential risks.</p><p>&middot; Ensure compliance with the Qatar Cyber Security framework and the National Information Assurance (NIA) framework.</p><p>&middot; Collaborate with process owners, auditors, and stakeholders to analyze, monitor, and address risk management and compliance issues.</p><p>&middot; Administer ISO 27001 and SOC 2 compliance programs, assisting with assessments and ensuring adherence to standards.</p><p>&middot; Oversee data privacy practices and ensure the protection of information assets from cyber threats.</p><p>&middot; Conduct regular audits and assessments to identify gaps and enhance governance, risk management, and compliance processes.</p><p>&middot; Provide legal guidance and support compliance initiatives within the organization.</p><p>&middot; Promote ethical behavior and foster a culture of integrity within the organization.</p><p>&middot; Monitor regulatory changes and ensure the organization remains compliant with all relevant laws and regulations.</p><p>&middot; Develop and deliver training programs to enhance awareness of GRC practices and policies.</p><p><b>Qualifications:</b></p><p>&middot; Bachelor's degree in Information Security, Risk Management, or a related field.</p><p>&middot; Professional certifications such as CISSP, CISM, CRISC, or equivalent.</p><p>&middot; Extensive experience in governance, risk, and compliance roles, preferably within the information security domain.</p><p>&middot; In-depth knowledge of industry standards and frameworks, including ISO 27001, SOC 2, PCI, SOX, Qatar Cyber Security framework, and NIA framework.</p><p>&middot; Strong analytical and problem-solving skills with the ability to identify and mitigate risks effectively.</p><p>&middot; Excellent communication and interpersonal skills, with the ability to collaborate with stakeholders at all levels.</p><p>&middot; Proven track record of successfully implementing and managing GRC programs.</p><p>Ability to work independently and as part of a team in a fast-paced environment.</p><p>Job Type: Full-time</p><p>Pay: QAR13,000.00 - QAR15,000.00 per month</p><p>Education:</p><ul><li>Bachelor's (Required)</li></ul><p>Experience:</p><ul><li>Administer ISO 27001 and SOC 2 compliance programs: 3 years (Required)</li><li>Governance, Risk, and Compliance (GRC): 3 years (Required)</li></ul><p>Language:</p><ul><li>Arabic (Required)</li><li>English (Required)</li></ul><p>License/Certification:</p><ul><li>degree in Information Security or Risk Management (Required)</li><li>CISSP (Required)</li><li>CISM (Required)</li><li>CRISC (Required)</li></ul>

Governance, Risk, and Compliance (GRC)

Arab Solutions

<div>
 <strong>
  Position:
 </strong>
 SAP Consultant &ndash; GRC Access Control (SAP UI Data Protection)
 <br/>
 <br/>
 <strong>
  Duration:
 </strong>
 12 Months &ndash; Extendable
 <br/>
 <br/>
 <strong>
  Location:
 </strong>
 Qatar
 <br/>
 <br/>
 <strong>
  About The Role
  <br/>
  <br/>
 </strong>
 We are seeking an experienced
 <strong>
  SAP UI Data Protection Consultant
 </strong>
 with proven expertise in implementing
 <strong>
  data masking, access control, and privacy compliance solutions
 </strong>
 within SAP environments. The ideal candidate will demonstrate strong technical capabilities in
 <strong>
  SAP UI masking, attribute-based access, and data privacy frameworks
 </strong>
 , ensuring sensitive data is protected across
 <strong>
  SAP Fiori and GUI interfaces
 </strong>
 in alignment with
 <strong>
  global data protection regulations
 </strong>
 .
 <br/>
 <br/>
 <strong>
  Key Responsibilities
 </strong>
 <br/>
 <br/>
 <ul>
  <li>
   Implementation &amp; Configuration
  </li>
  <li>
   Lead end-to-end SAP UI Data Protection implementations (minimum two successful rollouts).
  </li>
  <li>
   Design and configure data masking strategies at multiple levels:
  </li>
  <ul>
   <li>
    Table level
   </li>
   <li>
    Fiori application level
   </li>
   <li>
    Data-element level
   </li>
  </ul>
  <li>
   Implement Reveal on Demand functionality for controlled sensitive data visibility.
  </li>
  <li>
   Configure role-based, attribute-based, and data-element-based masking to enforce granular access controls.
  </li>
  <li>
   Utilize Field Access Trace tools for monitoring and auditing user access patterns.
  </li>
  <li>
   Develop BAdI implementations for custom business scenarios requiring dynamic masking.
  </li>
  <li>
   Use SAP recording tools to streamline configuration and testing of masking rules.
  </li>
  <li>
   Collaborate with Basis, Security, and Functional teams to align data protection measures with business processes.
  </li>
  <li>
   Ensure adherence to GDPR, CCPA, and other applicable data privacy laws.
  </li>
  <li>
   Documentation
  </li>
  <li>
   Prepare comprehensive documentation for workflows, configurations, and user guides.
  </li>
  <li>
   Develop functional specifications for custom developments or system enhancements.
  </li>
  <li>
   Project Management Support
  </li>
  <li>
   Support project planning, scheduling, and deliverables tracking.
  </li>
  <li>
   Monitor implementation progress and provide status updates to stakeholders.
  </li>
  <li>
   Ensure project execution aligns with defined timelines, scope, and objectives.
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Information Systems, or related field.
  </li>
  <li>
   SAP Certification in Security, GRC, or Data Protection modules.
  </li>
  <li>
   Hands-on experience with SAP Fiori, S/4HANA, and ECC systems.
  </li>
  <li>
   Familiarity with cross-functional modules (e.g., HR, Finance) for data sensitivity mapping.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Required Professional Qualifications/Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Qualifications and Skills:
  </li>
  <li>
   +8 years of experience with 2-3 full life cycle implementation
  </li>
  <li>
   Experience in S4 HANA and FIORI apps
  </li>
  <li>
   Preferably has experience in the oil and gas and Middle East region.
  </li>
  <li>
   Familiar with change management procedures and project documentation
  </li>
  <li>
   SAP UI Data Protection
  </li>
  <li>
   Advanced configuration and implementation
  </li>
  <li>
   Data Masking Techniques
  </li>
  <li>
   Table, Fiori, Role, Attribute, Data-element
  </li>
  <li>
   Reveal on Demand
  </li>
  <li>
   Setup and customization
  </li>
  <li>
   Field Access Tracing
  </li>
  <li>
   Configuration and analysis
  </li>
  <li>
   BAdI Implementation
  </li>
  <li>
   Custom scenario development
  </li>
  <li>
   SAP Security &amp; Authorization
  </li>
  <li>
   Role design and access control
  </li>
  <li>
   Compliance &amp; Audit Readiness
  </li>
  <li>
   GDPR, CCPA, internal audit support
  </li>
  <li>
   Communication &amp; Documentation
  </li>
  <li>
   Professional reporting and stakeholder engagement
   <br/>
   <br/>
  </li>
 </ul>
 Skills: s/4hana,sap fiori,data protection,ecc,grc,finance
</div>


SAP Consultant – GRC Access Control (SAP UI Data Protection)

Qatar Airways

<div><div><div><div><div><div><div><div>Job title
</div><div>Cyber Security Manager - GRC
</div></div><div><div>Ref #
</div><div>204730
</div></div><div><div>Location
</div><div>Qatar - Doha
</div></div><div><div>Job family
</div><div>Corporate &amp; Commercial
</div></div><div><div><ul><li>Closing date: 09-Dec-2025</li></ul><br>
</div></div></div></div></div><div><div><div><div><div><p><b>About Role</b></p>
<p>You will be responsible for providing support to the cyber security team in areas including Data Protection, Security Incident Management, Compliance, Identity and Access Management, and Operational Technology security. This role involves managing core technical staff to ensure that cyber governance, security operations, and cyber architecture and design objectives are effectively translated into technical and organizational controls.</p>
<p><b>Responsibilities</b></p>
<ul><li>Collaborate with the Senior Manager Cyber Security to plan and design IT cybersecurity solutions for Qatar Airways and its subsidiaries, safeguarding the organization from internal and external cyber threats while protecting critical company information.</li>
<li>Ensure that Cyber Security analysts and senior analysts receive adequate technical training to effectively carry out cybersecurity-related tasks for Qatar Airways.</li>
<li>Monitor and manage the timely delivery of cybersecurity projects and ensure all assigned tasks are completed efficiently by the technical cybersecurity team.</li>
<li>Support the internal cybersecurity incident response by understanding, mitigating, and remediating threats and risks that could impact Qatar Airways operations.</li>
<li>Identify security events and exposures, determine the root causes of violations, and implement solutions to prevent and minimize future incidents.</li>
<li>Oversee the daily operations of the Security Operations Centre (SOC), ensuring strict adherence to defined Service Level Agreements (SLAs).</li>
<li>Ensure all cybersecurity compliance activities - such as those related to PCI-DSS, Qatar 2022, and ISO 27001-are completed accurately and on time to avoid any non-conformities.</li>
</ul><p><b>Be part of an extraordinary story</b></p>
<p>Your skills. Your imagination. Your ambition. Here, there are no boundaries to your potential and the impact you can make. You&rsquo;ll find infinite opportunities to grow and work on the biggest, most rewarding challenges that will build your skills and experience. You have the chance to be a part of our future, and build the life you want while being part of an international community.</p>
<p>Our best is here and still to come. To us, impossible is only a challenge. Join us as we dare to achieve what&rsquo;s never been done before. Together, everything is possible</p>
</div></div></div></div></div><p></p><div><div><div><h3 class="jobSectionHeader"><b>Qualifications
</b></h3></div></div><div><div><div><div><p><b>Knowledge Skills &amp; Experience</b></p>
<ul> <li>Bachelor&rsquo;s Degree or equivalent with a minimum of 6 years of job-related experience</li>
<li> Experience working with cybersecurity frameworks.</li>
<li> Skills in Incident Handling, Forensic Analysis, and Evidence Handling.</li>
<li> Advanced capabilities in Network Security.</li>
<li> Analytical mindset and attention to detail.</li>
<li> Excellent written and verbal communication skills, with the ability to effectively interact with employees at all levels in the organization.</li>
</ul><p><b>About Qatar Airways Group</b></p>
<p>Our story started with four aircraft. Today, we deliver excellence across 12 different businesses coming together as one. We&rsquo;ve grown fast, broken records and set trends that others follow. We don&rsquo;t slow down by the fear of failure. Instead, we dare to achieve what&rsquo;s never been done before.</p>
<p>So whether you&rsquo;re creating a unique experience for our customers or innovating behind the scenes, every person contributes to our proud story. A story of spectacular growth and determination. Now is the time to bring your best ideas and passion to a place where your ambition will know no boundaries, and be part of a truly global community.</p><br>
</div></div><p></p><div><div><br>
<div><b>About Qatar Airways Group
</b></div><br>
Our story started with four aircraft. Today, we deliver excellence across 12 different businesses coming together as one. We&rsquo;ve grown fast, broken records and set trends that others follow. We don&rsquo;t slow down by the fear of failure. Instead, we dare to achieve what&rsquo;s never been done before.<br>
<br>
So whether you&rsquo;re creating a unique experience for our customers or innovating behind the scenes, every person contributes to our proud story. A story of spectacular growth and determination. Now is the time to bring your best ideas and passion to a place where your ambition will know no boundaries, and be part of a truly global community.<br>
</div></div><div><div>https://aa115.taleo.net/careersection/QA_External_CS/jobapply.ftl?lang=en&amp;job=204730</div></div></div></div></div></div></div></div>

Cyber Security Manager - GRC

<div>
 <strong>
  Introduction
  <br/>
  <br/>
 </strong>
 The IBM security consulting team provides customized solutions for our clients, not point solutions or basic product installation. The Managing Consultant will work with our clients to understand their specific business issues, both internally and externally and provide solutions to solve specific business issues for our clients. They will be able to look at our client&rsquo;s issues and work with other senior IBM consultants to provide guidance on a systematic approach to solve these within our client&rsquo;s budget and timeframe.
 <br/>
 <br/>
 The Managing Consultants will provide subject matter expertise in the form of workshops, and consulting engagements, which assess a client&rsquo;s security capabilities, which could be in the policy, process, technology or organizational areas, identify gaps and recommend cost effective best practices to reduce client risk and increase their handle on security risk. Having hands on implementation experience is a requirement of this position as well at deep technical knowledge of Security Governance tools. The Senior Consultant will assist in pre-sales, sales, closure, and then organizing the delivery of security consulting services with local teams.
 <br/>
 <br/>
 <strong>
  Your Role And Responsibilities
  <br/>
  <br/>
 </strong>
 The IBM security consulting team provides customized solutions for our clients, not point solutions or basic product installation. The Managing Consultant will work with our clients to understand their specific business issues, both internally and externally and provide solutions to solve specific business issues for our clients. They will be able to look at our client&rsquo;s issues and work with other senior IBM consultants to provide guidance on a systematic approach to solve these within our client&rsquo;s budget and timeframe.
 <br/>
 <br/>
 The Managing Consultants will provide subject matter expertise in the form of workshops, and consulting engagements, which assess a client&rsquo;s security capabilities, which could be in the policy, process, technology or organizational areas, identify gaps and recommend cost effective best practices to reduce client risk and increase their handle on security risk. Having hands on implementation experience is a requirement of this position as well at deep technical knowledge of Security Governance tools. The Senior Consultant will assist in pre-sales, sales, closure, and then organizing the delivery of security consulting services with local teams.
 <br/>
 <br/>
 <strong>
  Required Technical And Professional Expertise
  <br/>
  <br/>
 </strong>
 Security Domain Skills
 <br/>
 <br/>
 <ul>
  <li>
   This position requires knowledge across multiple platforms, processes or architectures. This position requires security consulting skills and the ability to act as a trusted client advisor and a trusted technical lead for the team. The Managing Consultant will need to have skills to be able to work with other IBM teams and:
  </li>
  <li>
   Deliver strategic security advisory services
  </li>
  <li>
   A proven record of security thought leadership and be recognized for business and technical acumen Cyber Strategy and Risk services
  </li>
  <li>
   Depth of knowledge in one or more of the core security areas in Cyber Strategy and Risk such as Security Architecture/Cloud Security/ OT Security/ SAP Security/e-GRC.
  </li>
  <li>
   Hands on experience and understanding of compliance (ISO 27001, NCA, SOC 2, COBIT, NIST, PCI DSS, GDPR etc) and Regulatory requirements.
   <br/>
   <br/>
  </li>
 </ul>
 Core consulting skills
 <br/>
 <br/>
 <ul>
  <li>
   Strong communication and presentation skills
  </li>
  <li>
   The ability to lead large groups and be a primary facilitator and lead.
  </li>
  <li>
   Strong written skills
  </li>
  <li>
   Comfortable working in a project based / client serving model
  </li>
  <li>
   Ability to lead and shape client expectations
  </li>
  <li>
   Help drive pursuits and engage in complex deals, matching outcomes to expectations
  </li>
  <li>
   Ability to work easily with diverse and dynamic teams
  </li>
  <li>
   Ability to work in a matrix management model
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Technical And Professional Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   At least 5 years relevant consulting experience in Cyber Strategy and Risk domain
  </li>
  <li>
   Security consulting experience across multiple client verticals, including Financial Services, Public Sector, Technology, Telecommunications, Manufacturing, Industrial &amp; Mining etc.
  </li>
 </ul>
</div>


Managing Consultant - Cyber Strategy & Risk

Explore 1597+ Grc analyst information security in Qatar this December. Find roles across top companies and apply now to boost your career.

1597 grc analyst information security jobs IN Qatar

GRC Analyst (Information Security)

GRC Analyst (Information Security)

GRC Analyst (Information Security)

Governance, Risk, and Compliance (GRC)

SAP Consultant – GRC Access Control (SAP UI Data Protection)

Cyber Security Manager - GRC

Managing Consultant - Cyber Strategy & Risk