GRC Analyst (Information Security)

Job Description

• Control frameServices mapping (ISO 27001, QCSF, NIA ) to business processes.
• Control design & effectiveness testing (walkthroughs, sampling, test scripts).
• Audit lifecycle execution (readiness, fieldServices coordination, closure with auditors).
• Evidence management & traceability (artifact collection, versioning, chain of custody).
• Risk assessment & treatment (registers, scoring models, risk acceptance / mitigation plans).
• Policy / standard / procedure development and periodic review for auditability.
• Third-party / vendor risk management
• Cloud security compliance (AWS / Azure / GCP : IAM, logging, baseline configurations).
• Regulatory alignment (NIA, Qatar Privacy Law, Qatar Cyber Crime Law, GDPR / CCPA, PCI DSS, ) and applicability analysis.
• Metrics & reporting (KPIs / KRIs, dashboards, executive summaries).
• Issue management & remediation tracking
• GRC platform proficiency

Requirements