Senior Information Security / Senior Cyber Security Assessor (Certification)
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
BAE Systems seeks a Senior Information Security/Cyber Security Assessor to lead certification and compliance assessments in Doha. The role involves evaluating organizations against security standards, conducting risk assessments, and managing audit teams.
Key Skills for This Role
Responsibilities
- Lead and deliver certification assessment and review activities for organizations seeking Information Security / Cyber Security certification
- Manage assessment teams, assign cases, and oversee daily certification operations
- Review and evaluate organizations’ compliance with national and international cyber security standards and frameworks
- Assess the design and operating effectiveness of cyber security and information security controls
- Conduct cyber security risk assessments, audits, and compliance reviews
- Maintain accurate, complete, and organized records of certification and assessment activities
- Ensure impartiality, confidentiality, consistency, and compliance throughout certification processes
- Document assessment observations and findings based on objective evidence and ensure traceability
- Develop and maintain certification procedures, methodologies, and supporting tools aligned with national compliance frameworks
- Develop compliance measurement mechanisms and monitoring tools to track improvements
- Provide recommendations and assessment outcomes to stakeholders and decision makers
- Manage external communication throughout the audit and certification lifecycle
Requirements
- Bachelor's degree in IT, Computer Information Systems, Cyber Security, or related field
- Minimum 7 years professional experience in Information Security / Cyber Security
- Minimum 4 years experience in Information Security Auditing, Cyber Security Auditing, Risk Management, or Information Security Management
- Relevant professional certifications (CISSP, CISA, CISM, CRISC, ISO 27001 Lead Auditor/Implementer) preferred
- Strong knowledge of cyber security governance, risk assessment, and audit methodologies
- Experience with security frameworks such as ISO 27001, NIST, NIA Controls, CSF Q2022
- Familiarity with certification and audit standards including ISO/IEC 17021, ISO/IEC 17024, ISO/IEC 27006, ISO/IEC 17065, ISO 19011, ITAF, ISA
- Hands on experience in Information Security Auditing and Information Security Management
- Excellent technical report writing and documentation skills
- Fluency in English required; Arabic is a plus
Full Job Posting
Role Overview
- We are seeking a highly experienced Senior Information Security / Senior Cyber Security Assessor (Certification) to lead and support cyber security certification and compliance assessment activities.
- The role is responsible for reviewing certification applications, evaluating organizations’ compliance with national and international security standards, conducting cyber security risk assessments and audits, and ensuring consistency, impartiality, and quality throughout the certification lifecycle
- The ideal candidate will possess strong technical expertise in information security governance, risk management, compliance, auditing, and certification frameworks, along with proven leadership and stakeholder management capabilities.
Key Responsibilities
- Lead and deliver certification assessment and review activities for organizations seeking Information Security / Cyber Security certification.
- Manage assessment teams, assign cases, and oversee daily certification operations.
- Review and evaluate organizations’ compliance with national and international cyber security standards and frameworks.
- Assess the design and operating effectiveness of cyber security and information security controls.
- Conduct cyber security risk assessments, audits, and compliance reviews.
- Maintain accurate, complete, and organized records of certification and assessment activities.
- Ensure impartiality, confidentiality, consistency, and compliance throughout certification processes.
- Document assessment observations and findings based on objective evidence and ensure traceability.
- Develop and maintain certification procedures, methodologies, and supporting tools aligned with national compliance frameworks.
- Develop compliance measurement mechanisms and monitoring tools to track improvements.
- Provide recommendations and assessment outcomes to stakeholders and decision makers.
- Manage external communication throughout the audit and certification lifecycle, from application to final decision issuance.
Requirements
- Bachelor’s degree in Information Technology, Computer Information Systems, Cyber Security, or a related field.
- Minimum 7 years of professional experience in Information Security / Cyber Security.
- Minimum 4 years of experience in one or more of the following areas: Information Security Auditing, Cyber Security Auditing, Risk Management, Information Security Management.
- Experience in consulting or implementing cyber security programs aligned with national or international standards is highly desirable.
- One or more relevant professional certifications are preferred, such as CISSP, CISA, CISM, CRISC, ISO 27001 Lead Auditor / Implementer.
Technical Skills & Knowledge
- Strong knowledge of cyber security governance, risk assessment, and audit methodologies.
- Experience with security frameworks and standards such as ISO 27001, NIST, NIA Controls, CSF Q2022.
- Familiarity with certification and audit standards including ISO/IEC 17021, ISO/IEC 17024, ISO/IEC 27006, ISO/IEC 17065, ISO 19011, ITAF, ISA.
- Hands on experience in Information Security Auditing and Information Security Management.
- Strong understanding of cyber security trends, threats, and emerging technologies.
- Excellent technical report writing and documentation skills.
Soft Skills
- Strong analytical and problem solving abilities.
- Excellent communication and stakeholder management skills.
- Ability to work independently and manage multiple priorities effectively.
- High attention to detail and ability to work under pressure and meet deadlines.
- Strong interpersonal and team collaboration skills.
- Experience in delivering workshops, training sessions, and awareness programs.
Language Requirement
- Fluency in English is required.
- Arabic is a plus.
Contract Duration
- The contract duration is 12 months, with the possibility of extension based on departmental requirements.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at BAE Systems
Operations Manager Central
Saudi Arabia, KSA
BAE Systems seeks an Operations Manager Central to manage business and residential facilities in Riyadh and Al-Majma'ah, Saudi Arabia. The role involves overseeing O&M suppliers, delivering projects, and ensuring contrac
Operations Manager East
Saudi Arabia, KSA
BAE Systems seeks an Operations Manager East to oversee facilities management scope in Dhahran, Saudi Arabia. The role involves managing O&M suppliers, delivering projects to cost/time/quality, and ensuring contractual o
GIS Specialist
Riyadh, KSA
Responsible to the Airforce Systems Directorate for providing and support RSAF systems in collecting and maintaining the military GIS database that would be used in RSAF units s...
Senior Information Security Engineer
Doha, QAT
BAE Systems seeks a Senior Information Security Engineer in Doha to ensure application and data security. The role involves penetration testing, vulnerability assessments, secure SDLC implementation, and threat detection
Senior Data Governance & Classification Specialist
Doha, QAT
BAE Systems seeks a Senior Data Governance & Classification Specialist to provide technical and strategic advisory to government entities in Qatar. The role involves designing data classification toolkits, measuring comp
Cybersecurity Assurance Consultant
Doha, QAT
BAE Systems seeks a Senior Cybersecurity Assurance Consultant to lead assurance services, manage teams, and ensure effective delivery of cybersecurity and compliance assessments. The role requires a Master's degree or 18
Senior Cybersecurity Certification Consultant
Doha, QAT
BAE Systems seeks a Senior Cybersecurity Certification Consultant to lead certification assessments, manage teams, and ensure compliance with cybersecurity standards. Requires a Bachelor's degree, 20+ years experience, a
Senior Cybersecurity Accreditation Auditor
Doha, QAT
BAE Systems seeks a Senior Cybersecurity Accreditation Auditor to deliver accreditation services, assess third-party compliance, and maintain accreditation integrity. Requires a Bachelor's degree, 12+ years experience in
Operations Manager Central
Saudi Arabia, KSA
Operations Manager East
Saudi Arabia, KSA
GIS Specialist
Riyadh, KSA
Senior Information Security Engineer
Doha, QAT
Senior Data Governance & Classification Specialist
Doha, QAT
Cybersecurity Assurance Consultant
Doha, QAT
Senior Cybersecurity Certification Consultant
Doha, QAT
Senior Cybersecurity Accreditation Auditor
Doha, QAT