Security Engineer

• Control frameServices mapping (ISO 27001, QCSF, NIA ) to business processes.
• Control design & effectiveness testing (walkthroughs, sampling, test scripts).
• Audit lifecycle execution (readiness, field Services coordination, closure with auditors).
• Evidence management & traceability (artifact collection, versioning, chain of custody).
• Risk assessment & treatment (registers, scoring models, risk acceptance/mitigation plans).
• Policy/standard/procedure development and periodic review for auditability.
• Third-party/vendor risk management
• Cloud security compliance (AWS/Azure/GCP: IAM, logging, baseline configurations).
• Regulatory alignment (NIA, Qatar Privacy Law, Qatar Cyber Crime Law, GDPR/CCPA, PCI DSS, ) and applicability analysis.
• Metrics & reporting (KPIs/KRIs, dashboards, executive summaries).
• Issue management & remediation tracking.
• GRC platform proficiency.

GRC Analyst, Information Security

Cloud Security, InfoSec Specialist