Senior Information Security: Governance, Risk & Compliance

METROMET CONTRACTING WLL; Doha; On-site; QAR 300,000 - 540,000; Full time

Job summary

METROMET CONTRACTING WLL seeks a Senior Information Security Specialist to oversee governance, risk management, and compliance across the organization, developing security strategies and safeguarding information assets.

You will implement policies aligned with Qatar CSF, ISO/IEC 27001, and local regulations, lead audits, and train staff, working with IT, legal, and business units. Requires 8+ years experience and CISSP/CISM/CRISC/CISA certifications.

Qualifications

• Bachelor’s degree in Information Security or related field
• CISSP/CISM/CRISC/CISA certifications preferred
• 8+ years in information security governance, risk, and compliance

Responsibilities

• Develop and maintain information security governance frameworks and policies aligned with organizational goals and regulatory requirements.
• Integrate security governance practices into risk management and compliance strategies.
• Develop, implement, and review information security policies and procedures to meet regulatory requirements and industry best practices.
• Ensure effective communication and adherence to these policies across the organization.
• Conduct regular risk assessments to identify, assess, and mitigate information security risks.
• Ensure compliance with local and international information security regulations and standards (e.g., Qatar NIA, Qatar CSF, ISO/IEC 27001, NIST).
• Manage internal and external audits related to information security and compliance.
• Prepare and present reports on security status, risk assessments, and audit findings to senior management and regulators.
• Support information security incident management from a compliance and risk perspective including documentation and reporting.
• Develop and deliver training and awareness programs on governance and risk management.
• Liaise with IT, legal, compliance, and business units to ensure alignment on security initiatives.

Skills

InfoSec governance

Regulatory compliance

Risk assessment

Security frameworks

Audit management

Arabic & English

Education

Bachelor's degree in Information Security

CISSP/CISM/CRISC/CISA certifications

Tools

NIA

Qatar CSF

ISO/IEC 27001

NIST

Job description

METROMET CONTRACTING WLL seeks a Senior Information Security Specialist to oversee governance, risk management, and compliance across the organization, developing security strategies and safeguarding information assets.

You will implement policies aligned with Qatar CSF, ISO/IEC 27001, and local regulations, lead audits, and train staff, working with IT, legal, and business units. Requires 8+ years experience and CISSP/CISM/CRISC/CISA certifications.