Sr. Information Security Analyst

Role overview

This position is responsible for running and improving the organization’s Information Security Management System (ISMS), covering both IT and Operational Technology (OT) environments. The role focuses on shaping security governance, strengthening compliance, and helping maintain a strong security posture across corporate systems and third-party relationships.

Key responsibilities

• Oversee the day-to-day governance and implementation of the ISMS across IT and OT domains.
• Create and maintain information security policies, standards, and procedures for the relevant operational areas.
• Promote awareness of security policies and standards among stakeholders.
• Verify that appropriate IT controls are in place to satisfy current and future security compliance obligations.
• Perform compliance reviews and operational maturity assessments for IT and OT environments in line with ISMS requirements.
• Build reports, dashboards, and evidence packs to track compliance activities.
• Work with IT teams, project managers, and business owners on vendor risk reviews, due diligence, and defining security requirements.
• Keep third-party assessment records up to date and complete.
• Monitor security trends, new threats, and industry practices to keep improving the security environment.
• Partner with cross-functional teams, including AI and digital groups, to align governance with new technologies and applied intelligence initiatives.
• Handle additional security duties assigned by the team lead.

Requirements

• Bachelor’s degree in information security, computer science, or engineering.
• At least 10 years of relevant professional experience.
• Background working in large ICS and ICT environments within the energy sector, preferably oil and gas.
• Experience with customized information security management systems.
• Hands-on knowledge of Governance, Risk, and Compliance (GRC) processes and industry-standard GRC tools.
• Familiarity with information security capability and requirements analysis.
• Understanding of applicable state laws, industry regulations, and security standards.
• Professional certifications such as CISSP, CISM, CRISC, GIAC, ISO 27001, or similar are preferred.
• Strong written, verbal, and presentation communication skills.
• Working knowledge of control frameworks such as the NIST Cybersecurity Control Framework.

Additional information

This role is based in Doha, Qatar and is a full-time, onsite position.