SR. INFORMATION SECURITY ANALYST
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
QatarEnergy seeks a Senior Information Security Analyst to govern and execute the Information Security Management System (ISMS) across IT and OT environments. The role involves developing policies, conducting compliance assessments, coordinating vendor risk assessments, and collaborating with AI and digital functions.
Key Skills for This Role
Responsibilities
- Govern and execute the Information Security Management System (ISMS) including developing policies, standards, and procedures for IT and OT security
- Define required information security policies, standards, and procedures and raise awareness
- Ensure adequate and effective IT controls to meet current and future security compliance requirements
- Conduct compliance and operational maturity assessments under ISMS guidelines
- Develop reporting metrics, dashboards, and evidence of compliance activities
- Coordinate with IT stakeholders, project managers, and business owners for vendor risk assessments, due diligence, and security requirements
- Maintain third party assessment documentation
- Stay updated on latest security trends, emerging threats, and best practices
- Collaborate with cross functional teams including AI and digital functions to align security governance with emerging technologies
- Carry out other security related activities as assigned by team lead
Requirements
- Bachelor degree in information security, computer science, or engineering
- Professional certifications in information security management and standards compliance (e.g., CISSP, CISM, CRISC, GIAC, ISO27001)
- 10+ years of relevant professional experience
- Experience with large ICS & ICT environments in the Energy sector, preferably in Oil & Gas
- Experience with customized information security management systems
- Experience in defining GRC processes and leveraging industry standard GRC tools
- Knowledge of information security capabilities and requirements analysis
- Knowledge of relevant state laws, industry regulations, and security standards
- Excellent written, verbal and presentation communication skills
Full Job Posting
Primary Purpose of the Job
- Governance and execution of the Information Security Management System (ISMS) including developing policies, standards and procedures for corporate information security in both IT and OT capacity.
- Define required information security policies, standards and procedures related to their areas of operation and raise awareness of those policies, standards and procedures.
Key Responsibilities
- Ensure adequate and effective IT controls exist to meet applicable current and future security compliance requirements.
- Conduct compliance and operational maturity assessments to ensure optimal operation of the information and operational technology environments under ISMS guidelines.
- Develop reporting metrics, dashboards and evidences of compliance activities.
- Coordinate with IT stakeholders, project managers, and business owners to facilitate vendor risk assessments, due diligence review and security requirements definition.
- Maintain third party assessment documentation.
- Stay updated on the latest security trends, emerging threats and best practices to continuously improve the overall security posture.
- Collaborate with cross functional teams, including AI and digital functions, to ensure alignment of security governance with emerging technologies and applied intelligence initiatives.
- Carry out other Security related activities as assigned by team Lead.
Required Experience and Skills
- Bachelor degree in information security, computer science, or engineering.
- Professional certifications in information security management and standards compliance (e.g., CISSP, CISM, CRISC, GIAC, ISO27001, etc.) and experience with control frameworks (e.g., NIST Cybersecurity Control Framework).
- 10+ years of relevant professional experience.
- Experience with large ICS & ICT environments in the Energy sector, preferably in Oil & Gas.
- Experience with and understanding of customized information security management systems.
- Experience in defining Governance, Risk, and Compliance (GRC) processes and leveraging industry standard GRC tools and products.
- Knowledge of information security capabilities and requirements analysis.
- Knowledge of relevant state laws, industry regulations, and security standards.
- Excellent written, verbal and presentation communication skills.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at QatarEnergy
Legal Counsel
Doha, QAT
QatarEnergy LNG seeks a Legal Counsel to provide legal advice on company activities, draft and negotiate contracts, and ensure compliance with laws. Requires an LLB or JD degree and 6 years of experience in oil and gas i
QAQC Inspector
Doha, QAT
QatarEnergy is seeking a QAQC Inspector for a full-time, on-site role at the Port Dickson refinery. The inspector will ensure compliance with company standards and industry codes through inspections of equipment, materia
Station Commander
Qatar, QAT
Manage the operations of the assigned Fire Station. Act as QatarEnergy Lead Fire Officer for major incidents until relieved by the QatarEnergy Fire Chief.
Principal Petrophysicist
Doha, QAT
Department OPERATED ONSHORE OIL FIELD DEVELOPMENT Primary Purpose of the Job Plan, supervise, coordinate and control the collection, analysis and evaluation of petrophysical dat...
PRINCIPAL PETROPHYSICIST
Doha, QAT
QatarEnergy seeks a Principal Petrophysicist with 15+ years of experience to plan, supervise, and coordinate petrophysical data collection and analysis for well and reservoir studies. The role involves generating field d
SR. DIGITAL ARCHITECT
Doha, QAT
QatarEnergy is looking for a Senior Digital Architect to design, implement, and maintain cloud digital platforms, focusing on AI/ML integration, large-scale data processing, and digital transformation. The role requires
Operations Supervisor
Qatar, QAT
Supervises the operations of gas production and gas wellhead treatment plants. Reviews and summarises plant data for past 24-hour period/day, plans gas production activities, we...
Operator
Qatar, QAT
Operate and adjust production facilities as directed by General Operator/ Senior Operator within designated limits to ensure maximum recovery/injection on assigned shift.
Legal Counsel
Doha, QAT
QAQC Inspector
Doha, QAT
Station Commander
Qatar, QAT
Principal Petrophysicist
Doha, QAT
PRINCIPAL PETROPHYSICIST
Doha, QAT
SR. DIGITAL ARCHITECT
Doha, QAT
Operations Supervisor
Qatar, QAT
Operator
Qatar, QAT