Senior Analyst

Experience; Doha; On-site; QAR 250,000 - 350,000; Full time

Job summary

UrbaCon Contracting & Trading Company - Qatar is seeking a Senior GRC Analyst/Specialist to strengthen governance, risk and compliance across systems and operations in line with national cyber regulations. The role focuses on identifying and managing cyber risks, maintaining risk registers, and supporting remediation of vulnerabilities.

Key activities include advising on GRC matters, reviewing cybersecurity architecture for alignment with objectives, and coordinating with security, IT and

Qualifications

• Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline.
• Minimum of 10 years' experience in cybersecurity, with strong expertise in Governance, Risk & Compliance (GRC), enterprise cybersecurity architecture and regulatory compliance.
• Mandatory certifications: CIIP and CISM.
• Proficiency in English and Arabic.

Responsibilities

• Act as a subject matter expert for cybersecurity governance, risk, and compliance.
• Review and improve enterprise cybersecurity architecture to align with business and security objectives.
• Evaluate compliance against the Qatar Cyber Security Framework (QCSF) and recommend corrective actions.
• Provide strategic cybersecurity guidance to stakeholders across the organisation.
• Develop and recommend cybersecurity controls and solutions based on risk assessments.
• Support cybersecurity audits, assessments, and compliance activities.
• Ensure cybersecurity initiatives align with organisational policies and industry standards.
• Produce high-quality documentation, reports, and technical recommendations.
• Mentor stakeholders on cybersecurity best practices where required.

Skills

GRC governance

Cybersecurity architecture

Regulatory compliance

Risk assessments

Security controls

Stakeholder management

Report writing

Cybersecurity consulting

Education

Master of Technology/Engineering (Computers)

Master of Science (Computers)

MBA/PG Diploma in Business Mgmt (Information Technology)

Job description

Education Master of Technology/Engineering(Computers), Master of Science(Computers), MBA/PG Diploma in Business Mgmt(Information Technology)

Category Information Technology

Industry Information Technology and Services

GRC Senior Analyst / Specialist supports the governance, risk, and compliance framework to ensure alignment with national cyber regulations, security policies and government assurance standards.

The role focuses on identifying, assessing and managing cyber and information security risks across systems and operations, while ensuring compliance with applicable regulatory frameworks, security controls and audit requirements. It involves maintaining risk registers, supporting security assessments and tracking remediation of vulnerabilities and control gaps.

The position also works closely with security, IT, and government stakeholders to strengthen cybersecurity governance, support accreditation processes and ensure continuous compliance with national cybersecurity mandates.

Core Activities:

• Provide expert consultation on Governance, Risk, and Compliance (GRC) matters.


• Review, assess, and enhance enterprise cybersecurity architecture.


• Conduct reviews of QCSF evidence and provide compliance recommendations.


• Deliver cybersecurity consultancy and practical security solutions to internal stakeholders.


• Identify cybersecurity risks and recommend mitigation strategies.


• Support the implementation of cybersecurity policies, standards, and best practices.


• Collaborate with business and technical teams to improve cybersecurity posture.


• Prepare reports, assessments, and recommendations for management.


• Stay updated with emerging cybersecurity threats, technologies, and regulatory requirements.

Key Responsibilities:

• Act as a subject matter expert for cybersecurity governance, risk, and compliance.


• Review and improve enterprise cybersecurity architecture to ensure alignment with business and security objectives.


• Evaluate compliance against the Qatar Cyber Security Framework (QCSF) and recommend corrective actions.


• Provide strategic cybersecurity guidance to stakeholders across the organisation.


• Develop and recommend cybersecurity controls and solutions based on risk assessments.


• Support cybersecurity audits, assessments, and compliance activities.


• Ensure cybersecurity initiatives align with organisational policies and industry standards.


• Produce high-quality documentation, reports, and technical recommendations.


• Mentor stakeholders on cybersecurity best practices where required

Desired Candidate Profile

Education:

• Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline.

Experience:

• Minimum of 10 years' experience in cybersecurity, with strong expertise in Governance, Risk & Compliance (GRC), enterprise cybersecurity architecture and regulatory compliance.

Mandatory Certifications:

• CIIP (Certified Information Infrastructure Professional)


• CISM (Certified Information Security Manager)

Preferred Certifications:

• GICSP (Global Industrial Cyber Security Professional)


• CCISO (Certified Chief Information Security Officer)

• Strong knowledge of Governance, Risk & Compliance (GRC) frameworks.


• Extensive experience with Enterprise Cybersecurity Architecture.


• Thorough understanding of the Qatar Cyber Security Framework (QCSF).


• Strong cybersecurity consulting and advisory skills.


• Excellent analytical and problem-solving abilities.


• Ability to assess risks and recommend effective security solutions.


• Excellent communication, stakeholder management, and report-writing skills.


• Ability to work independently and collaboratively within multidisciplinary teams.


• Strong understanding of international cybersecurity standards and best practices.


• Proficiency in English & Arabic is required.

UrbaCon Contracting & Trading Company - Qatar