Threat and Risk Assessment Expert

Role overview

This contract role is based onsite in Doha, Qatar and runs for an initial period of 12 months. The position is centered on carrying out threat and risk assessments across a range of technology and business changes, with a focus on producing clear, decision-ready risk outputs for stakeholders.

Assignment details

The role is open to professionals already based in Qatar, with visa and medical sponsorship available. Candidates located outside Qatar may also be considered, but relocation support such as airfare and accommodation will not be provided.

Core responsibilities

• Conduct threat and risk assessments for new initiatives, design changes, cloud, hybrid and on-premises deployments, third-party setups, and legacy platforms.
• Prepare formal assessment outputs that include risk descriptions, likelihood and impact scoring, control effectiveness reviews, residual risk conclusions, and proposed treatment actions.
• Review security safeguards covering identity and access management, encryption, audit logging, monitoring, network protections, cloud security, and resilience capabilities.
• Work closely with Information Security, Architecture, Legal, ERM, and project teams to support decisions on accepting, transferring, or treating risk, and to summarize findings for governance committees.

Required experience and technical background

• Hands-on experience completing Threat and Risk Assessments within financial institutions and/or government organizations.
• Strong grasp of threat modelling, risk assessment methods, and cloud, hybrid, and on-premises architecture environments.
• Prior experience working in embedded capacities within Information Security teams.

Additional information

This assignment is a contract engagement with an initial duration of 12 months.