IT Security Audit and Compliance Specialist

IT Security Audit and Compliance Specialist Location: Doha, Qatar (On-site) | Seniority: Expert / Senior Specialist Role Purpose Develop and execute security-audit and compliance programmes across healthcare applications, infrastructure, cloud and security services, ensuring findings are evidenced, reported and remediated. Core Responsibilities Work within a national eHealth ecosystem, collaborating with government, healthcare providers, technology vendors and multidisciplinary clinical and technical teams. Produce clear, auditable documentation: plans, requirements, designs, test evidence, operating procedures, reports, dashboards, risks, issues and decisions. Apply structured governance, escalate delivery or compliance risks early and maintain traceability from requirement to implementation and acceptance. Support knowledge transfer, training, stakeholder adoption and transition to sustainable business-as-usual operations. Protect health information and follow applicable privacy, security, confidentiality and regulatory requirements. Lead risk-based audit planning, scope, objectives and test programmes. Lead controls matrices and multi-framework mapping. Lead application, infrastructure, network and cloud-security audits. Lead Azure, O365, DLP, IAM/PAM and configuration/hardening reviews. Lead vulnerability management, attack-vector analysis and remediation tracking. Lead evidence collection, working papers, findings and executive reporting. Mandatory Eligibility Bachelor’s degree in Computer Science or a similar field. 15+ years of progressive security and compliance experience covering applications, infrastructure and cloud. Demonstrable security-compliance, security-management or audit leadership. Strong knowledge of ISO 27001-family standards, NIST, CIS benchmarks and common vulnerabilities. Mandatory practical knowledge of Azure, O365, DLP, IAM and PAM processes and technologies. Required Competencies Risk-based audit planning, scope, objectives and test programmes Controls matrices and multi-framework mapping Application, infrastructure, network and cloud-security audits Azure, O365, DLP, IAM/PAM and configuration/hardening reviews Vulnerability management, attack vectors and remediation tracking Evidence collection, working papers, findings and executive reports SOC, SIEM/SOAR/EDR, incident response and security monitoring awareness Coordination with internal/external audit and business/IT owners Preferred CISA, CISSP, CISM, CRISC, CCSP, AZ-500 or equivalent ISO 27001 Lead Auditor/Implementer and national assurance certification Healthcare/HIPAA or health-sector security experience SOC design/operation and cloud-security architecture Interested candidates may also send their CV to [redacted email] Show more Show less