business analyst

ics cybersecurity analyst

business analyst (sap)

business development analyst Jobs in Doha

business development analyst

business intelligence analyst Jobs in Doha

business intelligence analyst

information security analyst

QatarEnergy

<div>
 
 Primary Purpose Of The Job
 
 
 
 Governance and execution of the Information Security Management System (ISMS) including developing
 
 
 policies,standards and procedures required for the corporate information security in both an Information
 
 
 technology (IT) and Operational Technology (OT) capacity.
 
 
 Define required information security policies, standards and procedures related to their areas of operation as well as
 
 
 raising awareness of those polices, standards and procedures.
 
 
 Ensure adequate an effective IT controls exist to meet applicable current and future security compliance requirements.
 
 
 Conduct compliance and operational maturity assessments to ensure optimal operation of the information and
 
 
 operational technology environments under the guidelines of the ISMS.
 
 
 Develop reporting Metrics, dashboards and evidences of compliance activities.
 
 
 Coordinate with IT stakeholders, project managers, and business owners to facilitate vendor risk assessments, due
 
 
 diligence review and security requirements definition. Maintain third-party assessment documentation.
 
 
 Stay updated on the latest security trends, emerging threats and best practices to continuously improve the overall
 
 
 security posture.
 
 
 Coordinate and align activities between Information Security and Business Continuity, and liaise within IT Department
 
 
 to ensure business continuity and disaster recovery plans are in place, tested, and report regularly.
 
 
 Carry out other Security related activities as assigned by team Lead.
 
 
 
 Required Experience And Skills
 
 
 
 10+ years of relevant professional experience.
 
 
 <ul>
 <li>
 Experience with large ICS &amp; ICT environments in the Energy sector, preferably in Oil &amp; Gas.
 </li>
 <li>
 Experience with and understanding of customized information security management systems.
 </li>
 <li>
 Experience in defining Governance, Risk, and Compliance (GRC) processes and leveraging industry-standard GRC
 
 
 </li>
 </ul>
 tools and products.
 
 
 <ul>
 <li>
 Knowledge of information security capabilities and requirements analysis.
 </li>
 <li>
 Knowledge of relevant state laws, industry regulations, and security standards.
 </li>
 <li>
 Excellent written, verbal and presentation communication skills.
 
 
 </li>
 </ul>
 
 Educational Qualifications
 
 
 
 Bachelor degree in information security, computer science, or engineering.
 
 
 <ul>
 <li>
 Professional certifications in information security management and standards compliance (e.g., CISSP, CISM,
 
 
 </li>
 </ul>
 CRISC, GIAC, ISO27001, etc.) and experience with control frameworks (e.g., NIST Cybersecurity Control Framework).
</div>

SR. INFORMATION SECURITY ANALYST

PROZ TECHNOLOGIES

Job Title: Vulnerability and Risk Analyst Location: Doha, QatarJob Overview: We are hiring a Vulnerability and Risk Analyst to identify, assess, and mitigate risks across digital assets and IT infrastructure. The role requires expertise in risk frameworks, vulnerability management, and OSINT techniques.Key Responsibilities:<ul><li>Conduct contextual risk analysis across multiple domains</li><li>Apply standardized frameworks (NIST, ISO) to assess risk</li><li>Use vulnerability management tools &amp; automate reporting with data analysis tools</li><li>Identify and analyze exposed sensitive data via OSINT</li><li>Perform penetration testing to validate security findings</li><li>Produce risk assessment reports &amp; advisory documents</li></ul>Qualifications:<ul><li>Bachelor&rsquo;s in Computer Science, Engineering, or related fields</li><li>6+ years of cybersecurity risk management experience</li><li>Relevant certifications: CISSP, CISM, ISO 27001 LA, CCNP, GEVA, vendor certifications (Tenable, Rapid7)</li><li>Strong knowledge of networks, infrastructure, and security operations</li><li>Excellent documentation &amp; communication skills</li></ul>About Proztec: Proz Technologies (PROZTEC) is a top ICT firm based in Doha, Qatar with 300+ employees. Be part of our cybersecurity team and work on cutting-edge risk management.Apply now with your CV to Recruitment@proztec.comJob Type: Full-timePay: QAR10,000.00 - QAR15,000.00 per month

Vulnerability & Risk Analyst

People Dynamics

Designation: Cyber Security AnalystLocation: Mesaieed OR Ras LaffanEducation &amp; Qualifications<ul><li>Required: Graduate Degree in Engineering, Computer Science, IT, Electrical, Instrumentation, Automation, Mechatronics, Cybersecurity, Electronics, or equivalent discipline.</li><li>Alternative (subject to client approval): 3-Year Diploma in Engineering, Computer Science, Electrical, Instrumentation, Automation, Mechatronics, Cybersecurity, Electronics, or equivalent discipline with 10+ years&rsquo; experience in a Petrochemicals plant.</li></ul>Experience<ul><li>Required: Minimum 5+ years&rsquo; experience within Oil &amp; Gas or Chemical facilities, with a focus on ICS/OT Cybersecurity.</li><li>Preferred: 7+ years&rsquo; relevant experience in Oil &amp; Gas or Chemical facilities with strong ICS/OT Cybersecurity exposure.</li></ul>Preferred Skills &amp; Certifications<ul><li>Networking &amp; Security: CCNA / Network+ certification.</li><li>Cybersecurity Standards &amp; Governance: CISM / IEC-62443 certification.</li><li>Technical Security: CEH, CompTIA Security+, CySA+, or equivalent. (At least one recognized cybersecurity certification is desirable).</li><li>Experience working in Oil &amp; Gas or Chemical manufacturing environments.</li><li>Knowledge and hands-on experience with bare-metal hypervisors (MS Hyper-V) and Hyper-Converged Infrastructure (HCI).</li><li>Strong analytical, troubleshooting, communication, and interpersonal skills.</li></ul>Key Responsibilities<ul><li>Manage system patches, Anti-Virus updates, backups, and restorations for installed OT assets.</li><li>Review firewall and security logs to identify threats, anomalies, intrusions, and abnormal connection behaviors; escalate incidents as required.</li><li>Troubleshoot network performance and security issues, analyze network traffic, and resolve problem tickets/service requests.</li><li>Participate in incident response, forensic analysis, data preservation, and investigations related to security breaches and unauthorized access.</li><li>Support reporting and analysis activities, including vulnerability assessments, risk reports, remediation strategies, and performance metrics.</li><li>Configure, test, and troubleshoot cybersecurity technologies and tools; resolve cybersecurity and data-related issues.</li><li>Perform hardware/software upgrades and maintain accurate configuration documentation.</li><li>Maintain and update security operations records, including incident response procedures, policies, and standards.</li><li>Provide technical support to users and assist in the evaluation and deployment of security solutions.</li><li>Monitor external threat intelligence feeds; coordinate vulnerability patching and remediation.</li><li>Maintain and optimize security tools, systems, and processes in alignment with company policies.</li><li>Support implementation of secure on-premises, physical, and virtual/cloud infrastructures.</li><li>Promote and maintain an active cybersecurity awareness culture within the organization.</li><li>Assist with audit and compliance requirements (internal and external).</li><li>Perform hands-on field work in a 24/7 Petrochemical manufacturing environment.</li></ul>Job Type: Contract Contract length: 36 monthsPay: QAR1.00 per month

Cyber Security Analyst (Oil & Gas/ Petrochemicals)

Mindstream

We Are Hiring: Information Security Specialist (Data Centre Services) Location: Qatar Duration: 6 Months (Extendable) Salary: QAR 12,000 &ndash; 15,000 We are seeking a skilled Information Security Specialist to support our Data Centre Services team in implementing and maintaining ISO 27001 standards for one of Qatar&rsquo;s ministries. The ideal candidate will have strong expertise in governance, risk, and compliance, with ISO/IEC 27001:2022 certification and knowledge of related standards Key Responsibilities Lead the implementation of ISO 27001 framework. Conduct ISO/IEC 27001:2022 gap assessment and develop upgrade plans. Review and enhance policies, procedures, and documentation. Maintain and update risk registers and treatment plans (ISO 27005/31000). Align KPIs with ISO 27004 standards. Review CAPA (Corrective and Preventive Actions) and drive continual improvement. Conduct internal audits and prepare for Management Review Meetings (MRM). Provide support for external audits (Recertification, SA-1, SA-2). Requirements Proven experience in information security management and risk compliance. Certification in ISO/IEC 27001:2022 and knowledge of related standards. Hands-on experience with audit preparation and execution. Excellent communication and documentation skills. Ability to work independently and deliver within tight deadlines.Job Type: Full-timePay: QAR12,000.00 - QAR15,000.00 per monthApplication Question(s):<ul><li>Do you hold a valid ISO/IEC 27001 certification?</li><li>How many years of experience do you have in information security, governance, risk, and compliance (GRC)?</li><li>Have you previously implemented ISO 27001 in an organization?</li><li>Are you currently based in Qatar and available to join immediately or within one month?</li></ul>

Information Security Specialist

Metazyber Technologies

Job Responsibility:<ul><li>Good knowledge SIEM, SOAR, FW, Sandboxing, VPNs, and enterprise level cyber security products.</li><li>Ability to analyze, triage and remediate security incidents and strong understanding of security incident management, malware management processes.</li><li>Constantly monitor data flow and network flow (internally and externally), analyze the traffic and report any suspicious activity.</li><li>Understanding on the latest current IT/OT cyber security intrusions, attacks, hacking techniques, vulnerability disclosures, data breach incidents and security analysis techniques is a big plus.</li><li>Good understanding on cloud, client-server applications, multi-tier web applications, relational databases and any services.</li><li>Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols and OT segmentations.</li><li>Knowledge on IT/OT security best practices and concepts Vulnerability Assessment &amp; Penetration Testing</li><li>Assist with deploying security tools and operating these tools.</li><li>Managing and updating current security tools and measures.</li><li>Good understanding of Security frameworks and techniques specially Qatar&rsquo;s approved frameworks.</li><li>Provide all necessary consultations for application developers, network engineers, and other personnel.</li><li>To enforce the implementation of security and access policy adopted by QOC.</li><li>To monitor and report any misuse or abuse of access granted to user.</li><li>Report any vulnerabilities and assure that they are mitigated by the related section.</li></ul>Qualifications:<ul><li>Minimum Qualification: Bachelor&rsquo;s in information Security, computer science , or computer engineer or a related field.</li><li>Minimum Work Experience: Min of 8+ years of experience in cyber security.</li><li>Level of English: Excellent in both reading and writing.</li><li>Certificates in information security</li></ul>Job Types: Full-time, ContractApplication Question(s):<ul><li>What is your current CTC, and what are your expectations for the new role?</li><li>What is your notice period, and when would you be available to join if selected?</li></ul>Experience:<ul><li>Cyber security: 8 years (Preferred)</li></ul>

IT CyberSecurity Officer

Naufar

<div>
 
 
 JOB PURPOSE:
 
 
 
 The Cyber Security Analyst creates a comprehensive program for establishing a Healthcare carrier-class Security Operation Center. S/he develop and maintain threat monitoring and security incident response procedures within Naufar. The analyst designs frameworks, procedures, and toolkits to enhance capabilities in professional forensic collection and digital evidence analysis. S/he also develop dashboards for reporting the organization's threat landscape, Awareness and security posture to senior management. This role is expert role with roles and responsibilities.
 
 
 
 
 
 
 Description
 
 
 <ul>
 <li>
 Develops and implements a cyber-security program to enhance Naufar capabilities regarding Cyber Attack incident monitoring, incidents response and intrusive and non-intrusive forensics capabilities.
 </li>
 <li>
 Develops and matures the service capabilities of the SOC, such as Forensics, Threat Management, Penetration Assessments, and Tool Management.
 </li>
 <li>
 Develops, Contributes and maintains of the cyber security strategy.
 </li>
 <li>
 Implements, configures and maintains security control and process, to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.
 </li>
 <li>
 Identifies deficiencies and recommends corrective action to strengthen information security control and decrease the risk of data breach.
 </li>
 <li>
 Maintains and updates standard operation policies and procedures for incident response plans, e-discovery processing, remote acquisition/analysis tools, collections and forensic analysis techniques.
 </li>
 <li>
 Maintains industry standard tools and processes used for forensic analysis and eDiscovery collections and processes.
 </li>
 <li>
 Monitors security alerts for potential events/incidents as well as trending and historical analysis and ensuring all incident reports are complete and written within standard operations and ensures ticket audits and reviews are completed
 </li>
 <li>
 Utilizes leading forensic software to identify, collect, preserve and analyze electronic data from laptops, desktops, servers, email archives, infrastructure logs, network file servers, backup tapes, cell phones, PDAs and a wide variety of other media devices.
 </li>
 <li>
 Manages requests for electronic data and digital forensic investigations that relate to Litigation, Regulatory matters, Compliance, and Employee Investigations.
 </li>
 <li>
 Performs cybersecurity incident analysis and assist with incident response, including analysis of network content and metadata for investigations or malware detection and identifies the cause and extent of a breach.
 </li>
 <li>
 Serves as a subject matter expert and technical advisor in matters relating to the proper collection, preservation, packaging, and submission of digital and multimedia evidence.
 </li>
 <li>
 Participates in incident electronic evidence collection activities in major field investigations. Ensures evidence handling requirements are met.
 </li>
 <li>
 Performs post-incident report according to standard operations.
 </li>
 <li>
 Analyzes the tools and methodology used for investigation and accordingly presents improvements in control and corrective actions if any.
 </li>
 <li>
 Escalates and works with senior management on resolutions to overdue security items or any negative trends identified.
 </li>
 <li>
 Develops focused reporting and briefings for advanced cyber threats.
 </li>
 <li>
 Conducts studies and research for improving forensic analyses, scientific methods, and resolving forensic examination problems.
 </li>
 <li>
 Creates detailed, professional documentation and reports, including performance metrics and presentations for management.
 </li>
 <li>
 Leads or contributes to key projects related to corporate threat monitoring, forensics or information security initiatives.
 </li>
 <li>
 Facilitates group risk assessment activities and identifies any security-related process improvement opportunities.
 </li>
 <li>
 Monitors and performs trending on root cause analysis activities within assigned group and participates as needed to resolve clinical systems security related incidents.
 </li>
 <li>
 Assists on monitoring compliance with information security policies, standards and ENTERPRISE-WIDE strategy and facilitates threat and vulnerability evaluations on a regular basis. Measures and reports on the effectiveness of information security controls.
 </li>
 <li>
 Supports the security initiatives, corrective and preventative actions, and security measures by ensuring timely updates and escalating concerns and non-compliances.
 </li>
 <li>
 Understands and maintains the appropriate knowledge of Security Technologies, (Firewall, Anti-Virus, Email and Web Encryption, HIPS, NIPS, SIEM, WAF, DLP), security procedures, and services within Naufar IT Security as well as ensures all tools are functioning properly.
 </li>
 <li>
 Keeps up to date on changes to significant regulatory and applicable standards issued by internal or external agencies, as applicable to the Naufar&rsquo;s domain.
 </li>
 <li>
 Adheres to Naufar&rsquo;s standards as they appear in the Code of Conduct and Conflict of Interest policies
 </li>
 </ul>
 
 
 
 
 
 Academic Qualifications:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree &ndash; IT - Mandate
 </li>
 <li>
 Master&rsquo;s degree &ndash; Cybersecurity - Desired
 </li>
 </ul>
 
 
 
 
 
 Experience Requirements:
 
 
 <ul>
 <li>
 8+ years of experience working as a security analyst or SME within a Security Operations Center with exposure to cyber security collection, analysis and threats management, investigation and digital forensics.
 </li>
 <li>
 Demonstrated experience in threat detection and analysis, incident response, and reporting.
 </li>
 <li>
 Demonstrated experience with incident response, deep dive forensics, insider threat, cyber and data exfiltration incidents.
 </li>
 <li>
 Demonstrated experience conducting assessments, digital forensic investigations, vulnerability management and incident response.
 </li>
 <li>
 Demonstrated experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks.
 </li>
 <li>
 Demonstrated experience with SEIM products in the detection, response, mitigation, and/or reporting of cyber threats
 </li>
 <li>
 Demonstrated experience in the use of forensic tools (e.g. FTK, Encase, Forensic Toolkit, X-Ways, Linux based tools, etc.)
 </li>
 <li>
 Experienced with (or equivalent) the following regulations and frameworks: PCI, HIPAA, and ISO/IEC 2700x
 </li>
 </ul>
</div>

Cyber Security Analyst

<div>
 
 Role Overview:
 
 
 
 We are seeking
 
 Technical Analysts and Specialists
 
 to support the organization&rsquo;s cybersecurity operations. The role involves
 
 designing, implementing, and maintaining security infrastructure
 
 , monitoring systems for threats, and providing operational support to protect networks, systems, and data.
 
 
 
 
 
 Requirements
 
 
 
 Key Responsibilities:
 
 
 
 
 For All Levels:
 
 
 
 <ul>
 <li>
 
 Manage and maintain cybersecurity infrastructure (firewalls, IDS/IPS, VPNs, endpoint security).
 
 
 </li>
 <li>
 
 Monitor systems for security incidents and vulnerabilities.
 
 
 </li>
 <li>
 
 Assist in incident response and threat mitigation activities.
 
 
 </li>
 <li>
 
 Conduct security assessments and recommend improvements.
 
 
 </li>
 <li>
 
 Support compliance with cybersecurity policies and regulatory requirements.
 
 
 </li>
 </ul>
 
 
 Additional for Senior Analyst / Specialist:
 
 
 
 <ul>
 <li>
 
 Lead technical security projects and upgrades.
 
 
 </li>
 <li>
 
 Analyze complex security incidents and coordinate response.
 
 
 </li>
 <li>
 
 Mentor junior technical staff.
 
 
 </li>
 <li>
 
 Develop and implement standard operating procedures for cybersecurity operations.
 
 
 </li>
 </ul>
 
 Qualifications &amp; Experience:
 
 
 <ul>
 <li>
 
 
 Education:
 
 Bachelor&rsquo;s degree in Cybersecurity, Computer Science, or related field.
 
 
 </li>
 <li>
 
 
 Analyst / Specialist:
 
 5&ndash;7 years of experience in cybersecurity operations, technical support, or security engineering.
 
 
 </li>
 <li>
 
 
 Senior Analyst / Specialist:
 
 8&ndash;10 years of progressive experience, including managing security infrastructure and incident response.
 
 
 </li>
 </ul>
 
 Skills &amp; Competencies:
 
 
 <ul>
 <li>
 
 Strong knowledge of security technologies (firewalls, SIEM, IDS/IPS, endpoint security).
 
 
 </li>
 <li>
 
 Understanding of network protocols, operating systems, and security frameworks.
 
 
 </li>
 <li>
 
 Analytical and problem-solving skills for incident detection and response.
 
 
 </li>
 <li>
 
 Excellent communication and collaboration abilities.
 
 
 </li>
 <li>
 
 
 For Senior Level:
 
 Ability to lead technical projects and implement security best practices.
 
 
 </li>
 </ul>
 
 Preferred Certifications:
 
 
 <ul>
 <li>
 
 CISSP, CEH, CompTIA Security+, CISM, or equivalent cybersecurity certifications.
 
 
 </li>
 </ul>
</div>

Technical Analyst / Specialist (Mid & Senior Levels)

Explore 1106+ Information security analyst in Doha this September. Find roles across top companies and apply now to boost your career.