GRC Senior Analyst/ Specialist
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
BAE Systems seeks a GRC Senior Analyst/Specialist to support governance, risk, and compliance frameworks aligned with national cyber regulations. Requires 10+ years in cybersecurity, expertise in GRC, enterprise architecture, and QCSF, plus CIIP and CISM certifications.
Key Skills for This Role
Responsibilities
- Provide expert consultation on Governance, Risk, and Compliance (GRC) matters
- Review, assess, and enhance enterprise cybersecurity architecture
- Conduct reviews of QCSF evidence and provide compliance recommendations
- Deliver cybersecurity consultancy and practical security solutions to internal stakeholders
- Identify cybersecurity risks and recommend mitigation strategies
- Support the implementation of cybersecurity policies, standards, and best practices
- Collaborate with business and technical teams to improve cybersecurity posture
- Prepare reports, assessments, and recommendations for management
- Stay updated with emerging cybersecurity threats, technologies, and regulatory requirements
Requirements
- Bachelor’s or Master’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline
- Minimum of 10 years’ experience in cybersecurity, with strong expertise in Governance, Risk & Compliance (GRC), enterprise cybersecurity architecture and regulatory compliance
- CIIP (Certified Information Infrastructure Professional) certification
- CISM (Certified Information Security Manager) certification
- Proficiency in English & Arabic
Full Job Posting
Role Overview
- The GRC Senior Analyst / Specialist supports the governance, risk, and compliance framework to ensure alignment with national cyber regulations, security policies and government assurance standards.
- The role focuses on identifying, assessing and managing cyber and information security risks across systems and operations, while ensuring compliance with applicable regulatory frameworks, security controls and audit requirements.
- The position also works closely with security, IT, and government stakeholders to strengthen cybersecurity governance, support accreditation processes and ensure continuous compliance with national cybersecurity mandates.
Core Activities
- Provide expert consultation on Governance, Risk, and Compliance (GRC) matters.
- Review, assess, and enhance enterprise cybersecurity architecture.
- Conduct reviews of QCSF evidence and provide compliance recommendations.
- Deliver cybersecurity consultancy and practical security solutions to internal stakeholders.
- Identify cybersecurity risks and recommend mitigation strategies.
- Support the implementation of cybersecurity policies, standards, and best practices.
- Collaborate with business and technical teams to improve cybersecurity posture.
- Prepare reports, assessments, and recommendations for management.
- Stay updated with emerging cybersecurity threats, technologies, and regulatory requirements.
Key Responsibilities
- Act as a subject matter expert for cybersecurity governance, risk, and compliance.
- Review and improve enterprise cybersecurity architecture to ensure alignment with business and security objectives.
- Evaluate compliance against the Qatar Cyber Security Framework (QCSF) and recommend corrective actions.
- Provide strategic cybersecurity guidance to stakeholders across the organisation.
- Develop and recommend cybersecurity controls and solutions based on risk assessments.
- Support cybersecurity audits, assessments, and compliance activities.
- Ensure cybersecurity initiatives align with organisational policies and industry standards.
- Produce high quality documentation, reports, and technical recommendations.
- Mentor stakeholders on cybersecurity best practices where required.
Requirements
- Bachelor’s or Master’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline.
- Minimum of 10 years’ experience in cybersecurity, with strong expertise in Governance, Risk & Compliance (GRC), enterprise cybersecurity architecture and regulatory compliance.
- CIIP (Certified Information Infrastructure Professional) certification.
- CISM (Certified Information Security Manager) certification.
- Proficiency in English & Arabic is required.
Preferred Certifications
- GICSP (Global Industrial Cyber Security Professional)
- CCISO (Certified Chief Information Security Officer)
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at BAE Systems
Operations Manager Central
Saudi Arabia, KSA
BAE Systems seeks an Operations Manager Central to manage business and residential facilities in Riyadh and Al-Majma'ah, Saudi Arabia. The role involves overseeing O&M suppliers, delivering projects, and ensuring contrac
Operations Manager East
Saudi Arabia, KSA
BAE Systems seeks an Operations Manager East to oversee facilities management scope in Dhahran, Saudi Arabia. The role involves managing O&M suppliers, delivering projects to cost/time/quality, and ensuring contractual o
GIS Specialist
Riyadh, KSA
Responsible to the Airforce Systems Directorate for providing and support RSAF systems in collecting and maintaining the military GIS database that would be used in RSAF units s...
Senior Information Security Engineer
Doha, QAT
BAE Systems seeks a Senior Information Security Engineer in Doha to ensure application and data security. The role involves penetration testing, vulnerability assessments, secure SDLC implementation, and threat detection
Senior Information Security / Senior Cyber Security Assessor (Certification)
Doha, QAT
BAE Systems seeks a Senior Information Security/Cyber Security Assessor to lead certification and compliance assessments in Doha. The role involves evaluating organizations against security standards, conducting risk ass
Senior Data Governance & Classification Specialist
Doha, QAT
BAE Systems seeks a Senior Data Governance & Classification Specialist to provide technical and strategic advisory to government entities in Qatar. The role involves designing data classification toolkits, measuring comp
Cybersecurity Assurance Consultant
Doha, QAT
BAE Systems seeks a Senior Cybersecurity Assurance Consultant to lead assurance services, manage teams, and ensure effective delivery of cybersecurity and compliance assessments. The role requires a Master's degree or 18
Senior Cybersecurity Certification Consultant
Doha, QAT
BAE Systems seeks a Senior Cybersecurity Certification Consultant to lead certification assessments, manage teams, and ensure compliance with cybersecurity standards. Requires a Bachelor's degree, 20+ years experience, a
Operations Manager Central
Saudi Arabia, KSA
Operations Manager East
Saudi Arabia, KSA
GIS Specialist
Riyadh, KSA
Senior Information Security Engineer
Doha, QAT
Senior Information Security / Senior Cyber Security Assessor (Certification)
Doha, QAT
Senior Data Governance & Classification Specialist
Doha, QAT
Cybersecurity Assurance Consultant
Doha, QAT
Senior Cybersecurity Certification Consultant
Doha, QAT