Senior Information Security Specialist

METROMET CONTRACTING WLL; Doha; On-site; QAR 300,000 - 540,000; Full time

Job summary

METROMET CONTRACTING WLL seeks a Senior Information Security Specialist to oversee governance, risk management, and compliance across the organization, developing security strategies and safeguarding information assets.

You will implement policies aligned with Qatar CSF, ISO/IEC 27001, and local regulations, lead audits, and train staff, working with IT, legal, and business units. Requires 8+ years experience and CISSP/CISM/CRISC/CISA certifications.

Qualifications

• Bachelor’s degree in Information Security or related field
• CISSP/CISM/CRISC/CISA certifications preferred
• 8+ years in information security governance, risk, and compliance

Responsibilities

• Develop and maintain information security governance frameworks and policies aligned with organizational goals and regulatory requirements.
• Integrate security governance practices into risk management and compliance strategies.
• Develop, implement, and review information security policies and procedures to meet regulatory requirements and industry best practices.
• Ensure effective communication and adherence to these policies across the organization.
• Conduct regular risk assessments to identify, assess, and mitigate information security risks.
• Ensure compliance with local and international information security regulations and standards (e.g., Qatar NIA, Qatar CSF, ISO/IEC 27001, NIST).
• Manage internal and external audits related to information security and compliance.
• Prepare and present reports on security status, risk assessments, and audit findings to senior management and regulators.
• Support information security incident management from a compliance and risk perspective including documentation and reporting.
• Develop and deliver training and awareness programs on governance and risk management.
• Liaise with IT, legal, compliance, and business units to ensure alignment on security initiatives.

Skills

InfoSec governance

Regulatory compliance

Risk assessment

Security frameworks

Audit management

Arabic & English

Education

Bachelor's degree in Information Security

CISSP/CISM/CRISC/CISA certifications

Tools

NIA

Qatar CSF

ISO/IEC 27001

NIST

Job description

ob Overview

The Senior Information Security Specialist is responsible for overseeing the governance risk management and compliance aspects of information security within the organization. This role involves developing and implementing security strategies ensuring adherence to regulatory requirements and managing risks to safeguard the organization s informationassets.

Key Responsibilities

• Develop and maintain information security governance frameworks and policies aligned with organizational goals and regulatory requirements.


• Integrate security governance practices into the organization s risk management and compliance strategies.


• Develop, implement, and review information security policies and procedures to ensure they meet regulatory requirements and industry best practices.


• Ensure effective communication and adherence to these policies across the organization.


• Conduct regular risk assessments to identify, assess, and mitigate information security risks.


• Ensure compliance with local and international information security regulations and standards e.g., Qatar National Information Assurance Policy, ISO IEC 27001 and Qatar Cybersecurity Framework CSF.


• Monitor changes in regulations and update policies and procedures as needed.


• Manage internal and external audits related to information security and compliance.


• Prepare and present detailed reports on security status, risk assessments, and audit findings to senior management and regulatory bodies.


• Support information security incident management from a compliance and risk perspective including documentation, reporting, and adherence to incident response procedures.


• Develop and deliver training and awareness programs focused on information security governance and risk management.


• Act as a liaison between IT, legal, compliance, and business units to ensure alignment on security and risk management initiatives.


• Address information security concerns raised by internal and external stakeholders.

Qualifications

Education

• Bachelor’s degree in Information Security, Cybersecurity, or a related field.


• Advanced degrees or certifications (e.g., CISSP, CISM, CRISC, CISA) are highly desirable.

Experience

• Minimum of 8 years of experience in information security with a focus on governance, risk management, and compliance.


• Proven experience in developing and implementing security frameworks and managing compliance programs.

Skills

• In-depth knowledge of information security principles, practices, and regulations.


• Experience with security frameworks and standards (e.g., NIA, Qatar CSF, ISO/IEC 27001, NIST).


• Strong analytical, organizational, and problem-solving skills.


• Excellent communication skills, with the ability to effectively convey security concepts to various stakeholders.


• Proficiency with compliance and risk management tools is advantageous.


• Advanced level of Arabic and English language.


• Bi-lingual is preferred.