Senior GRC & Cyber Governance Analyst

BAE Systems; Qatar; On-site; QAR 240,000 - 320,000; Full time

Job summary

BAE Systems is seeking a GRC Senior Analyst/Specialist in Qatar to govern risk and compliance across systems and operations. The role focuses on identifying, assessing, and managing cyber risks while ensuring alignment with national regulations and security policies.

The ideal candidate will enhance cybersecurity architecture, support accreditation processes, and ensure continuous compliance with national mandates. Strong consulting, stakeholder management, and reporting skills are essential.

Qualifications

• Bachelor's or master's degree in cybersecurity or related field.
• At least 10 years of experience in cybersecurity with strong GRC, enterprise cybersecurity architecture and regulatory compliance.
• Mandatory certifications: CIIP and CISM.

Responsibilities

• Act as subject matter expert for cybersecurity governance, risk, and compliance.
• Review and improve enterprise cybersecurity architecture to align with business objectives.
• Evaluate compliance against the Qatar Cyber Security Framework (QCSF) and recommend corrective actions.
• Provide strategic cybersecurity guidance to stakeholders across the organisation.
• Develop and recommend cybersecurity controls based on risk assessments.
• Support cybersecurity audits, assessments, and compliance activities.
• Ensure cybersecurity initiatives align with policies and standards.
• Produce documentation, reports, and technical recommendations.
• Mentor stakeholders on cybersecurity best practices.

Skills

GRC knowledge

Cybersecurity architecture

Risk assessment

Stakeholder management

Report writing

Communication skills

Independent work

International standards

Education

Bachelor's or Master's degree in Cybersecurity or related field

Job description

BAE Systems is seeking a GRC Senior Analyst/Specialist in Qatar to govern risk and compliance across systems and operations. The role focuses on identifying, assessing, and managing cyber risks while ensuring alignment with national regulations and security policies.

The ideal candidate will enhance cybersecurity architecture, support accreditation processes, and ensure continuous compliance with national mandates. Strong consulting, stakeholder management, and reporting skills are essential.