GRC Analyst (Information Security)

Job Description

Job Specific Skills

Control frameServices mapping (ISO 27001, QCSF, NIA) to business processes. Control design & effectiveness testing (walkthroughs, sampling, test scripts). Audit lifecycle execution (readiness, field Services coordination, closure with auditors). Evidence management & traceability (artifact collection, versioning, chain of custody). Risk assessment & treatment (registers, scoring models, risk acceptance / mitigation plans). Policy / standard / procedure development and periodic review for auditability. Third-party / vendor risk management Cloud security compliance (AWS / Azure / GCP : IAM, logging, baseline configurations). Regulatory alignment (NIA, Qatar Privacy Law, Qatar Cyber Crime Law, GDPR / CCPA, PCI DSS, ) and applicability analysis. Metrics & reporting (KPIs / KRIs, dashboards, executive summaries). Issue management & remediation tracking. GRC platform proficiency. Minimum Qualifications

Bachelors in computer science, Information Security, IT and equivalent hands-on experience. Certification : CompTIA Security+, ISO 27001 Internal Auditor / Lead Implementer, CCSK, CISA, CISM, CISSP Clear written and verbal communication Minimum Experience

4+ Years can lead an audit cycle end-to-end, mature control sets, and coach other.

#J-18808-Ljbffr