Senior Cybersecurity Certification & QMS Specialist (Common Criteria)

BAE Systems; Qatar; On-site; QAR 300,000 - 520,000; Full time

Job summary

BAE Systems is seeking a Senior Cybersecurity Certification and QMS Specialist to lead the quality management system for cybersecurity certification schemes, aligning with ISO/IEC standards and regulatory requirements.

You will conduct internal audits, manage documentation, drive corrective actions, and collaborate with technical teams to ensure rigorous evaluation, impartiality, and continuous process improvement.

Qualifications

• Master's degree in IT, information security, or related field.
• Experience with Common Criteria is preferred.
• Strong audit and risk management capabilities.

Responsibilities

• Plan, implement, monitor and improve the QMS for cybersecurity certification schemes.
• Conduct internal audits and reviews to verify compliance and identify improvements.
• Manage documentation and records to ensure accuracy and accessibility.
• Drive corrective and preventive actions for non-conformities.
• Ensure alignment with ISO 17021, 17024, 17065, 17025 and related standards.
• Provide guidance and mentorship to CB team members and evaluators.

Skills

Master's degree in IT/InfoSec

Arabic and English proficiency

Analytical and problem solving

Audit and risk management

Strong communication skills

Education

Master's degree in IT/Information Security

Tools

Common Criteria training

ISO27001 audit tools

Job description

Overview

The Senior Cybersecurity Certification and QMS Specialist is responsible for managing and continuously improving the quality management system (QMS) that governs cybersecurity certification schemes. The role ensures compliance with international standards and regulatory requirements while enhancing the efficiency, consistency, and reliability of certification processes. This position combines expertise in cybersecurity certification with strong quality assurance and audit capabilities, including conducting internal audits, managing documentation, and driving corrective and preventive actions. The specialist works closely with technical teams and stakeholders to maintain high standards of certification, support governance activities, and align processes with evolving industry frameworks and best practices.

Key Responsibilities

• Planning, implementing, monitoring, and improving the QMS for the different schemes in NISCF.
• Ensuring that the internal processes comply with relevant national and international regulations and guidelines.
• Reviewing the quality of technical content.
• Continuously assessing and improving the efficiency and effectiveness of the certification process.
• Overseeing documentation and record‑keeping processes to ensure that records are accurate, complete, and readily accessible.
• Ensuring that QMS documentation is up‑to‑date.
• Planning and conducting internal audits and reviews of the certification process to verify compliance and identify opportunities for improvement.
• Planning and organizing scheme management review meetings.
• Reviewing the quality of scheme documents, such as manuals, policies, procedures, forms, templates, etc.
• Implementing corrective and preventive actions to address non‑conformities and improve the QMS.
• Ensuring corrective actions are taken when issues are identified.
• Monitoring changes in requirements (International Standards ISO 17021, 17024, 17065, 17025, 27006, 9001; National Standards).
• Assisting with the development of policies, standards, procedures, and guidance based on audit findings.
• Ensuring the highest standards of competence and impartiality are maintained and consistency achieved across all evaluation and certification activities.
• Possessing a deep understanding of Common Criteria standards, Protection Profiles, Security Targets, Evaluation Assurance Levels (EALs), and related documentation.
• Providing guidance and mentorship to CB team members, certifiers, and evaluators to ensure their understanding of the certification process and assist with complex evaluations.
• Assisting with the development of policies, standards, procedures, and guidelines.
• Making recommendations regarding certification at specific EALs based on extensive evaluation expertise and knowledge of the certification process.
• Staying up‑to‑date with the latest developments in security, emerging threats, and evolving technology to ensure the certification process remains relevant.

Qualifications

• Master's degree level qualification in IT, information security, or a related field, ideally with a focus on security domains.
• Certification from a recognized Common Criteria certification body and prior experience as a certifier (desired).
• IT Security Overview Training and certification.
• Common Criteria for IT Security Evaluation Training and certification.
• Minimum 10 years experience, with at least 5 years as a Senior IT / Information Security / Cyber Security Auditor and/or Risk Management and/or Cyber Security/Information Security Management.
• Proficiency in Arabic and English (spoken and written) is preferred.
• Analytical and problem‑solving skills.
• Proven experience in IT and Information Security assessment.
• Common Criteria for IT Security Evaluation training.
• Experience in risk assessment and management.
• Hands‑on experience in information security.
• Understanding of ISO 27001 certification audit requirements.
• Excellent communication, documentation, and report‑writing skills.
• In‑depth knowledge of security testing methodologies and tools.
• Experience in information security understanding and assessment of formal schemes.
• Hands‑on experience in risk assessment, audit methodologies and risk assessment methodologies.
• Training, workshops planning and delivery experience across government and private sector.
• Proving experience in IT, Information Security and Quality management audit.
• Hands‑on experience in information security, cyber security & quality management systems.
• Experience in risk management and GAP analysis.
• Experience briefing senior executive staff.
• Behavioral: Ability to multitask and work effectively with multiple project teams, sponsors, and customers; accept close attention to detail; meet deadlines and work under pressure.
• Interpersonal skills – Work autonomously with a high degree of enthusiasm.
• Excellent technical report writing skills.
• Capabilities to understand and interpret the Certification Criteria (ISO/IEC 17021, ISO/IEC 17024, ISO/IEC 27006, ISO/IEC 17065).
• Knowledge of auditing and information assurance standards like ISA, ITAF, ISO 17021, ISO 19011.
• Proficiency in security frameworks and standards such as ISO27001, NIA, CSF Q2022.
• Familiarity with third‑party audit, certification and information security / cyber security audits.
• Proven hands‑on experience in Information Security audit or information security management.