GRC Specialist: NCSA Certification Support

Accenture Middle East; Doha; On-site; QAR 180,000 - 320,000; Full time

Job summary

Accenture in Doha seeks an experienced cybersecurity professional to lead governance, risk management, and compliance initiatives within Accenture Security. You will develop frameworks, policies, and dashboards while ensuring regulatory conformity and effective risk mitigation across complex programs.

Ideal candidates bring 5+ years in cybersecurity leadership, fluency in English and Arabic, and a track record of collaborating with executives to align security strategy with business goals.

Qualifications

• Excellent communication (written and oral) and interpersonal skills.
• Ability to work creatively and analytically in a problem-solving environment.
• Flexibility to travel.
• Consulting, stakeholder engagement and relationship management skills.
• Fluent in Arabic and English language.
• Ability to effectively communicate insights relating to an organization’s threat environment to improve its risk management posture.
• Ability to work with the organization's leadership to provide a comprehensive, organization wide approach to address Cybersecurity risk and compliance.
• Ability to work with the organization's leadership to develop a risk management strategy to address Cybersecurity related risks.
• Ability to develop and maintain Cybersecurity policies, standards and related documentations to support business strategy and maintain compliance with legislative, regulatory, and contractual obligations.
• Ability to communicate technical and planning information at the same level as a stakeholder’s understanding.
• Knowledge and understanding of risk assessment, mitigation, and treatment methods.
• Knowledge of relevant Cybersecurity aspects of legislative and regulatory requirements, relating to ethics and privacy.
• Knowledge of Cybersecurity threats and vulnerabilities posed by new technologies and malicious actors.
• Knowledge of risk assessment, mitigation, and management methods.
• Knowledge of the likely operational impact on an organization of Cybersecurity breaches.
• Knowledge of national Cybersecurity laws and regulations such as SAMA CSF, NCA ECC, etc.
• Knowledge of common information security standards, such as: ISO 27001/27002, NIST, PCI DSS, ITIL, etc.

Responsibilities

• Governance: Develop cyber frameworks, policies, processes, procedures, guidelines, and related documentation.
• Governance: Review existing and proposed policies and related documentation with stakeholders.
• Governance: Develop reporting metrics, KPIs, and dashboards.
• Governance: Monitor how effectively cybersecurity policies, principles and practices are implemented in the delivery of planning and management services.
• Governance: Ensure that cybersecurity workforce management policies and processes comply with legal and organizational requirements.
• Governance: Interpret and apply applicable laws, statutes and regulatory documents to ensure they are reflected in the cybersecurity policies.
• Governance: Provide policy guidance to cybersecurity management, staff and users.
• Risk Management: Effectively communicate Cybersecurity risks and posture to senior management.
• Risk Management: Develop risk mitigation strategies to effectively manage risk in accordance with organizational risk appetite.
• Risk Management: Ensure that decisions relating to Cybersecurity are based on sound risk management principles.
• Risk Management: Perform risk analysis whenever an application or system undergoes a major change.
• Risk Management: Provide input to the risk management framework and related documentation.
• Risk Management: Ensure Cybersecurity risks are identified and managed appropriately through the organization's risk governance process.
• Risk Management: Carry out a Cybersecurity risk assessments.
• Risk Management: Work with others to implement and maintain a Cybersecurity risk management program
• Risk Management: Identify and assign individuals to specific roles associated with the execution of the Risk Management Framework
• Risk Management: Establish a risk management strategy for the organization that includes a determination of risk tolerance
• Risk Management: Conduct an initial risk assessment of stakeholder assets and update the risk assessment on an ongoing basis
• Risk Management: Work with organizational officials to ensure continuous monitoring tool data provides situation awareness of risk levels
• Risk Management: Use risk management related tools such as eGRC and monitoring tools to assess risks
• Risk Management: Develop methods to effectively monitor and measure risk, compliance, and assurance efforts.
• Risk Management: Determine and document supply chain risks for critical system elements, where they exist.

Job description

Accenture in Doha seeks an experienced cybersecurity professional to lead governance, risk management, and compliance initiatives within Accenture Security. You will develop frameworks, policies, and dashboards while ensuring regulatory conformity and effective risk mitigation across complex programs.

Ideal candidates bring 5+ years in cybersecurity leadership, fluency in English and Arabic, and a track record of collaborating with executives to align security strategy with business goals.