GRC & InfoSec Specialist: ISO 27001, PCI-DSS

Starlink Qatar; Doha; On-site; QAR 240,000 - 360,000; Full time

Job summary

Starlink Qatar seeks an experienced Information Security Governance, Risk & Compliance Specialist to strengthen the organization’s cybersecurity governance framework in Qatar. You will drive information security governance initiatives, manage enterprise security risks, and support audits with a focus on ISO/IEC 27001, NIA, PCI-DSS, and data privacy.

You will collaborate with business and technology teams, auditors, and regulators to ensure effective security controls and ongoing regulatory

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, or related field.
• 5–8 years in information security governance, risk management, compliance, or audits.
• Hands-on ISMS experience based on ISO/IEC 27001.
• Experience with Qatar NIA framework and PCI-DSS compliance.
• Strong data privacy, risk assessment, and control testing knowledge.

Responsibilities

• Lead ISMS governance aligned with ISO/IEC 27001 and maintain docs.
• Drive risk assessments across technology, processes, and cloud.
• Coordinate audits, evidence collection, and remediation tracking.
• Develop and monitor compliance with policies and standards.
• Produce executive dashboards and governance reports.
• Coordinate ICOFR reviews and control testing activities.
• Collaborate with stakeholders, auditors, and regulators.

Skills

GRC frameworks

ISO 27001

NIA compliance

PCI‑DSS

Data privacy

Risk management

Internal controls

Audits

Executive reporting

Stakeholder management

ISMS implementation

Regulatory compliance

Education

Bachelor's degree in Information Technology/Cybersecurity

Tools

GRC platforms

Job description

Starlink Qatar seeks an experienced Information Security Governance, Risk & Compliance Specialist to strengthen the organization’s cybersecurity governance framework in Qatar. You will drive information security governance initiatives, manage enterprise security risks, and support audits with a focus on ISO/IEC 27001, NIA, PCI-DSS, and data privacy.

You will collaborate with business and technology teams, auditors, and regulators to ensure effective security controls and ongoing regulatory