Sr. Security Assurance Engineer

<p><b>Department</b><br />
INFORMATION &amp; COMMUNICATION TECHNOLOGY<br />
<br />
<b>Title</b><br />
SR. SECURITY ASSURANCE ENGINEER<br />
<br />
<b>Primary Purpose of Job</b><br />
Accountable to enhance information security posture of QatarEnergy (IT and OT) by assuring and designing security solutions in alignment with corporate security governance and security architecture. Responsibilities include: &bull; Assure effectiveness of security solutions and controls. Provide expert advice (Technical and administrative) to secure business solutions and review (IT and OT) solution prior to implementations &bull; Ensure assurance to Corporate Information Security governance and security architecture and provide security advisory services &bull; Assure Information security review of IT / OT projects and implementations during the project lifecycle &bull; Conduct Information security assessments of security solutions, business solutions and cloud solutions to mitigate cyber risks &bull; Design and review of compensating controls to meet the information security control objectives in the absence of primary security controls &bull; Defining information security assurance and technical requirements to design the security controls to meet security objectives &bull; Perform Information security reviews and development of HLDs for IT and OT projects based on Security architecture and best practices &bull; Contribute to design and develop security architecture and security reference models / patterns / Blueprints to standardize security requirement &bull; Assess the need for enhancing security controls and controls effectiveness based on the business risks and utilizing the emerging technologies &bull; Drive, implement and manage security projects under the security division Information security assurance engineer Analyst reports to Head of Information security assurance. He/she role is to design and recommend information security solution and design architecture to business stakeholders and information security management. Validate information security controls and assure mitigation plans implementation.<br />
<br />
<b>Education</b><br />
&bull; Bachelor&
39;s degree in information security, computer science, or systems engineering &bull; Professional certifications related to Information security like, ISO27001, CISSP, CISA, GIAC, CEH or others<br />
<br />
<b>Experience &amp; Skills</b><br />
&bull; 10+ years of relevant professional experience &bull; Experience with large ICS &amp; ICT environments in the Energy sector, preferably in Oil &amp; Gas &bull; Ability to communicate the urgency and severity of complex risk scenarios in simple language &bull; Knowledge of fundamental security principles and challenges in their practical application &bull; Knowledge of information security capabilities and requirements analysis &bull; Excellent written and verbal business communication skills<br />
&nbsp;</p>