Senior Information Security / Cyber Security Auditor (Accreditation)

BAE Systems Strategic Aerospace Services WLL; Doha; On-site; QAR 360,000 - 600,000; Full time

Job summary

BAE Systems Strategic Aerospace Services WLL in Doha seeks a Senior Cybersecurity Accreditation Auditor to lead day-to-day accreditation services, manage national schemes, and ensure compliant assessments against ISO/IEC 27001 and related frameworks.

The role requires a bachelor’s degree, 12+ years in information security, and hands-on auditing experience. Knowledge of national cyber laws and strong documentation skills are essential for success in this 12-month contract.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or equivalent.
• Minimum 12 years of experience in Information Security, Cybersecurity, Risk Assessment, or Assurance.
• Hands-on experience in information security auditing, accreditation, or cybersecurity management.
• Experience in cybersecurity consulting or implementation aligned with national/international standards is an advantage.

Responsibilities

• Conduct day-to-day accreditation services.
• Maintain detailed records of the accreditation process with accuracy.
• Ensure competence, impartiality, and consistency across accreditation activities.
• Undertake compliance activities against security standards.
• Manage national accreditation scheme applications as part of operations.
• Document observations clearly and with traceable evidence.
• Develop and maintain accreditation procedures based on the National Information Security Compliance framework.
• Maintain confidentiality and declare conflicts of interest.
• Perform periodic surveillance accreditation assessments on third parties.
• Develop measurement and compliance tools to monitor improvements.
• Understand and apply various international standards and frameworks (ISO27001, OWASP, PTES, SOC CMM).
• Stay updated on national cybersecurity standards and industry developments.
• Manage external communication from application to decision issuance.
• Serve as escalation point of contact for accreditation issues/requests.
• Collaborate to improve the accreditation program.

Skills

Analytical thinking

Problem solving

Report writing

Documentation

Clear communication

Stakeholder management

Workshop delivery

Attention to detail

Team collaboration

Integrity & professionalism

Education

Bachelor’s degree in Computer Science/IT/Info Security

12+ years info security/cybersecurity experience

Certifications: CISSP/CISA/CISM or ISO 27001 Lead Auditor

Tools

ISO/IEC 17011 knowledge

ISO/IEC 17025 knowledge

Job description

BAE Systems Strategic Aerospace Services WLL | Full time

Senior Cybersecurity Accreditation Auditor

The Senior Cybersecurity Accreditation Auditor is responsible for delivering day-to-day accreditation services and ensuring that assessments of third parties are conducted in a fair, consistent, and objective manner. The role focuses on evaluating compliance with national and international cybersecurity standards, managing accreditation applications, and maintaining the integrity of the accreditation process. It also supports continuous improvement of accreditation frameworks, tools, and methodologies aligned with national cybersecurity requirements.

Key Responsibilities

• Responsible for the conduct of the day-to-day accreditation services.
• Maintain detailed and organized records of the accreditation process, ensuring accuracy and completeness.
• Ensure that the highest standards of competence and impartiality are maintained, and that consistency is achieved across accreditation activities.
• Undertake compliance activities against security standards.
• Manage national accreditation scheme applications as part of the operational role.
• Document observations/findings in such a manner that they are clearly understandable and traceable, based on objective evidence.
• Develop and maintain accreditation procedures and required tools based on the National Information Security Compliance framework.
• Maintain impartiality, confidentiality and declare any potential conflicts of interest that might jeopardize an objective assessment as required.
• Perform periodic surveillance accreditation assessments on third parties to monitor and review compliance.
• Develop measurement and compliance mechanisms & tools to monitor improvements.
• Possess knowledge of various international standards, regulation, and best practices (ISO27001, OWASP, PTES, SOC CMM, etc.) and implementation experience against at least one.
• Understand local laws & regulations in different sectors: Cybercrime, PDPPL, eCommerce, etc.
• Be familiar with national cybersecurity standards and frameworks (NIA, CSF, …).
• Stay up to date with the latest developments in security, emerging threats, and evolving technology to ensure the accreditation process remains relevant.
• Manage external communication during the assessment: from the application until the issue of decision.
• Act as escalation point of contact for accreditation issues/requests.
• Collaborate with the team to maintain and improve the accreditation program.

Education & Experience

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or equivalent.
• Minimum 12 years of experience in Information Security, Cybersecurity, Risk Assessment, or Assurance.
• Hands‑on experience in information security auditing, accreditation, or cybersecurity management.
• Experience in cybersecurity consulting or implementation aligned with national/international standards is an advantage.

Certifications (Preferred)

• NIA Certified Auditor, CISSP, CISA, CISM, ISO 27001 Lead Auditor or equivalent.

Technical Skills

• Strong knowledge of cybersecurity frameworks and standards (ISO 27001, NIST, NIA, OWASP, PTES, SOC‑CMM, etc.).
• Understanding of accreditation standards (ISO/IEC 17011, ISO/IEC 17025) and certification processes.
• Experience in risk assessment and audit methodologies.
• Knowledge of national cybersecurity laws and regulations (e.g., Cybercrime laws, data protection, eCommerce regulations).
• Strong awareness of third‑party audit and certification practices.
• Ability to assess security controls and compliance against formal schemes objectively.

Core Skills

• Strong analytical thinking and problem‑solving abilities.
• Excellent technical report writing and documentation skills.
• Ability to communicate clearly with technical and senior executive stakeholders.
• Experience in delivering workshops, training, or knowledge‑sharing sessions.
• Strong attention to detail and ability to work under pressure and tight deadlines.
• Strong teamwork and collaboration skills.
• High level of integrity, impartiality, and professionalism.
• Ability to manage multiple stakeholders and competing priorities.
• Strong interpersonal and communication skills.
• Proactive, self‑driven, and able to work independently with minimal supervision.

Availability: As soon as possible

The contract duration is 12 months, with the possibility of extension based on departmental requirements.