Senior Information Security Specialist

ob Overview

The Senior Information Security Specialist is responsible for overseeing the governance risk management and compliance aspects of information security within the organization. This role involves developing and implementing security strategies ensuring adherence to regulatory requirements and managing risks to safeguard the organization s information assets.

• Develop and maintain information security governance frameworks and policies aligned with organizational goals and regulatory requirements.
• Integrate security governance practices into the organization s risk management and compliance strategies.
• Develop, implement, and review information security policies and procedures to ensure they meet regulatory requirements and industry best practices.
• Ensure effective communication and adherence to these policies across the organization.
• Conduct regular risk assessments to identify, assess, and mitigate information security risks.
• Ensure compliance with local and international information security regulations and standards e.g., Qatar National Information Assurance Policy, ISO IEC 27001 and Qatar Cybersecurity Framework CSF.
• Monitor changes in regulations and update policies and procedures as needed.
• Manage internal and external audits related to information security and compliance.
• Prepare and present detailed reports on security status, risk assessments, and audit findings to senior management and regulatory bodies.
• Support information security incident management from a compliance and risk perspective including documentation, reporting, and adherence to incident response procedures.
• Develop and deliver training and awareness programs focused on information security governance and risk management.
• Act as a liaison between IT, legal, compliance, and business units to ensure alignment on security and risk management initiatives.
• Address information security concerns raised by internal and external stakeholders.

• Bachelor’s degree in Information Security, Cybersecurity, or a related field.
• Advanced degrees or certifications (e.g., CISSP, CISM, CRISC, CISA) are highly desirable.

• Minimum of 8 years of experience in information security with a focus on governance, risk management, and compliance.
• Proven experience in developing and implementing security frameworks and managing compliance programs.

• In-depth knowledge of information security principles, practices, and regulations.
• Experience with security frameworks and standards (e.g., NIA, Qatar CSF, ISO/IEC 27001, NIST).
• Strong analytical, organizational, and problem-solving skills.
• Excellent communication skills, with the ability to effectively convey security concepts to various stakeholders.
• Proficiency with compliance and risk management tools is advantageous.
• Advanced level of Arabic and English language.
• Bi-lingual is preferred.