IT Security Audit and Compliance Specialist

Starlink Qatar; Doha; On-site; QAR 180,000 - 300,000; Full time

Job summary

Starlink Qatar seeks an IT Security Audit and Compliance Specialist to develop and drive security-audit and compliance programmes across healthcare applications, infrastructure, cloud and security services. You will craft evidence-backed reports, lead risk-based audits and map controls to ISO 27001, NIST and other standards.

Based in Doha on-site, the role requires 15+ years in security/compliance, strong Azure/O365, DLP, IAM/PAM experience and leadership in audit initiatives.

Qualifications

• Bachelor's degree in Computer Science or similar field.
• 15+ years of progressive security and compliance experience across apps, infra and cloud.
• Demonstrates leadership in security-compliance or audit programs.
• Strong knowledge of ISO 27001-family standards, NIST, CIS benchmarks and common vulnerabilities.
• Practical knowledge of Azure, O365, DLP, IAM and PAM processes and technologies.
• Experience with risk-based audit planning and multi-framework mapping.

Responsibilities

• Lead security-audit and compliance programmes across healthcare tech.
• Develop auditable documentation: plans, designs, tests, reports and decisions.
• Map controls to multi-framework requirements and ensure traceability.
• Coordinate with internal/external audits and stakeholders.
• Oversee vulnerability management, remediation tracking and reporting.
• Ensure privacy, security, confidentiality and regulatory compliance.

Skills

Security governance

Auditing

Risk assessment

Regulatory compliance

Cloud security

Education

Bachelor's degree in Computer Science

Tools

Azure

O365

DLP

IAM

PAM

SIEM/SOAR/EDR

Job description

IT Security Audit and Compliance Specialist

Location: Doha, Qatar (On-site) | Seniority: Expert / Senior Specialist

Role Purpose

Develop and execute security-audit and compliance programmes across healthcare applications, infrastructure, cloud and security services, ensuring findings are evidenced, reported and remediated.

Core Responsibilities

• Work within a national eHealth ecosystem, collaborating with government, healthcare providers, technology vendors and multidisciplinary clinical and technical teams.
• Produce clear, auditable documentation: plans, requirements, designs, test evidence, operating procedures, reports, dashboards, risks, issues and decisions.
• Apply structured governance, elevate delivery or compliance risks early and maintain traceability from requirement to implementation and acceptance.
• Support knowledge transfer, training, stakeholder adoption and transition to sustainable business-as-usual operations.
• Protect health information and follow applicable privacy, security, confidentiality and regulatory requirements.
• Lead risk-based audit planning, scope, objectives and test programmes.
• Lead controls matrices and multi-framework mapping.
• Lead application, infrastructure, network and cloud-security audits.
• Lead Azure, O365, DLP, IAM/PAM and configuration/hardening reviews.
• Lead vulnerability management, attack-vector analysis and remediation tracking.
• Lead evidence collection, working papers, findings and executive reporting.

Mandatory Eligibility

• Bachelor's degree in Computer Science or a similar field.
• 15+ years of progressive security and compliance experience covering applications, infrastructure and cloud.
• Demonstrable security-compliance, security-management or audit leadership.
• Strong knowledge of ISO 27001-family standards, NIST, CIS benchmarks and common vulnerabilities.
• Mandatory practical knowledge of Azure, O365, DLP, IAM and PAM processes and technologies.
• Risk-based audit planning, scope, objectives and test programmes
• Controls matrices and multi-framework mapping
• Application, infrastructure, network and cloud-security audits
• Azure, O365, DLP, IAM/PAM and configuration/hardening reviews
• Vulnerability management, attack vectors and remediation tracking
• Evidence collection, working papers, findings and executive reports
• SOC, SIEM/SOAR/EDR, incident response and security monitoring awareness
• Coordination with internal/external audit and business/IT owners

Preferred

• CISA, CISSP, CISM, CRISC, CCSP, AZ-500 or equivalent
• ISO 27001 Lead Auditor/Implementer and national assurance certification
• Healthcare/HIPAA or health-sector security experience
• SOC design/operation and cloud-security architecture