Senior Information Security / Cyber Security Assessor (Certification)

About the Role

We are looking for a seasoned Senior Information Security / Cyber Security Assessor to spearhead cyber security certification and compliance evaluations. The successful candidate will oversee certification application reviews, assess organizational compliance with local and international security standards, conduct risk assessments and audits, and ensure impartiality, quality, and uniformity during the certification lifecycle.

Key Responsibilities

• Lead certification assessment processes for entities seeking cybersecurity certification.
• Supervise assessment teams by delegating cases and managing daily certification activities.
• Analyze organizations’ adherence to national and international cybersecurity frameworks.
• Evaluate the design and operational effectiveness of cybersecurity and information security controls.
• Perform cybersecurity risk assessments, audits, and compliance evaluations.
• Maintain thorough and well-organized documentation for all certification and assessment procedures.
• Safeguard confidentiality, consistency, and impartiality throughout certification processes.
• Record findings and observations based on objective evidence ensuring audit traceability.
• Create and update certification policies, methods, and support tools aligned with national compliance requirements.
• Design compliance measurement tools to monitor ongoing improvements.
• Provide assessment results and recommendations to relevant stakeholders and decision-makers.
• Manage communication with external parties from audit initiation to final certification decisions.
• Stay informed about the latest cybersecurity threats, technologies, standards, and best practices.
• Conduct internal training programs to enhance team expertise in cybersecurity, compliance, and auditing.
• Collaborate closely with internal teams, clients, and stakeholders across various projects.

Qualifications and Experience

• Bachelor’s degree in IT, Computer Information Systems, Cyber Security, or a similar discipline.
• Preferred professional certifications include CISSP, CISA, CISM, CRISC, ISO 27001 Lead Auditor or Implementer.
• A minimum of 7 years’ experience in Information Security / Cyber Security.
• At least 4 years of professional experience in information security or cybersecurity auditing, risk management, or security management.
• Consulting or implementing cybersecurity initiatives in line with national or international standards is highly advantageous.

Technical Expertise

• Deep understanding of cybersecurity governance, risk assessment, and audit techniques.
• Familiarity with security frameworks such as ISO 27001, NIST, NIA Controls, and CSF Q2022.
• Knowledge of certification and audit standards including ISO/IEC 17021, ISO/IEC 17024, ISO/IEC 27006, ISO/IEC 17065, ISO 19011, ITAF, and ISA.
• Practical experience in information security auditing and management.
• Strong grasp of emerging cybersecurity trends, threats, and technologies.
• Excellent skills in technical report writing and documentation.

Personal Attributes and Language Proficiency

• Excellent analytical and problem-solving skills.
• Strong stakeholder communication and management capabilities.
• Ability to independently juggle multiple priorities and deliver under pressure.
• Meticulous attention to detail and thoroughness.
• Effective interpersonal skills and team collaboration experience.
• Experience conducting workshops, training sessions, and awareness initiatives.
• Fluency in English is mandatory; Arabic language skills are an added advantage.

Additional Information

This position is based in Doha, Qatar, and follows an onsite work arrangement. The contractual engagement lasts 12 months with a potential extension depending on department needs.