SR. INFORMATION SECURITY ANALYST

QatarEnergy; Doha; On-site; QAR 600,000 - 900,000; Full time

Job summary

QatarEnergy is seeking an senior information security professional to govern and execute the ISMS, developing policies, standards, and procedures for IT and OT environments. The role ensures effective IT controls, compliance, and reporting.

You will coordinate vendor risk assessments, stay abreast of security trends, and collaborate with AI/digital teams to integrate security governance with new technologies. Strong communication skills are essential.

Qualifications

• Bachelor degree in information security, computer science, or engineering.
• Professional certifications in information security management and standards compliance (e.g., CISSP, CISM, CRISC, GIAC, ISO27001).

Responsibilities

• Governance and execution of the ISMS including developing policies, standards and procedures.
• Define required information security policies, standards and procedures and raise awareness.
• Ensure adequate IT controls to meet security compliance requirements and conduct maturity assessments.
• Develop reporting metrics, dashboards and evidences of compliance activities.
• Coordinate with IT stakeholders, project managers, and business owners for vendor risk assessments and third-party documentation.
• Stay updated on security trends and collaborate with cross-functional teams to align security governance with emerging technologies.
• Carry out other security related activities as assigned by team lead.

Education

Bachelor degree in information security, computer science, or engineering

Job description

Primary Purpose Of The Job

• Governance and execution of the Information Security Management System (ISMS) including developing policies, standards and procedures required for the corporate information security in both an Information technology (IT) and Operational Technology (OT) capacity.
• Define required information security policies, standards and procedures related to their areas of operation as well as raising awareness of those polices, standards and procedures.
• Ensure adequate an effective IT controls exist to meet applicable current and future security compliance requirements. Conduct compliance and operational maturity assessments to ensure optimal operation of the information and operational technology environments under the guidelines of the ISMS.
• Develop reporting Metrics, dashboards and evidences of compliance activities.
• Coordinate with IT stakeholders, project managers, and business owners to facilitate vendor risk assessments, due diligence review and security requirements definition. Maintain third-party assessment documentation.

Stay updated on the latest security trends, emerging threats and best practices to continuously improve the overall security posture.

• Collaborate with cross-functional teams, including AI and digital functions, to ensure alignment of security governance with emerging technologies and applied intelligence initiatives.
• Carry out other Security related activities as assigned by team Lead.

Required Experience And Skills

• Bachelor degree in information security, computer science, or engineering.
• Professional certifications in information security management and standards compliance (e.g., CISSP, CISM, CRISC, GIAC, ISO27001, etc.) and experience with control frameworks (e.g., NIST Cybersecurity Control Framework).

Educational Qualifications

• 10+ years of relevant professional experience.
• Experience with large I CS & ICT environments in the Energy sector, preferably in Oil & Gas.
• Experience with and understanding of customized information security management systems.
• Experience in defining Governance, Risk, and Compliance (GRC) processes and leveraging industry-standard GRC tools and products.
• Knowledge of information security capabilities and requirements analysis.
• Knowledge of relevant state laws, industry regulations, and security standards.
• Excellent written, verbal and presentation communication skills.