{"id":2404253,"url":"https://alion.io/job/qatalum-senior-cybersecurity-grc-engineer","title":"Senior Cybersecurity GRC Engineer","company":{"id":2545002,"name":"Qatalum","domain":"qatalum.com","url":"https://alion.io/company/qatalum","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mesaieed, Qatar"],"countries":["QA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":57000,"max_usd":134000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1891},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CAPA","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"Power BI","optional":false},{"name":"SAP BusinessObjects","optional":false}],"status":"live","first_seen_at":"2026-09-25T02:00:00Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-14T09:11:41Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"Job Details\n\nPosition Title:\nSenior Cybersecurity GRC Engineer\n\nReports To:\nIS/IT Group Manager\n\nJob Objectives\nTo lead and manage the SAP Governance, Risk, and Compliance (GRC) framework to ensure effective access controls, segregation of duties (SoD), risk monitoring, and regulatory compliance across all SAP landscapes, while strengthening internal controls, audit readiness, and IT security governance in line with business objectives and regulatory requirements.\nKey Accountabilities - 1\nPolicies, Systems, Processes & Procedures\nFollow of all relevant operational procedures and instructions so that work is carried out in a controlled and consistent manner.\nDepartmental Reports\nGenerate or assist in generation of any departmental reports are prepared as per management request, in a timely and accurate manner to meet company and department requirements governing reporting.\nHealth, Safety and Environment\nComply with all agreed occupational health, safety and environmental regulations in order to protect personnel and physical assets. Ensure that the work areas are kept in a clean and tidy state in order that work can be carried out safely and effectively.\nContinuous Improvement\nProvide input and recommend the continuous improvement of the company practices taking into account ‘international best practice’, changes in international standards and changes in the business environment which demand proactive action plans.\nQatarization\nSupport the development and training of National employees.\nKey Accountabilities - 2\nSAP GRC Governance\nConfigure and maintain SAP GRC Access Control (AC) module for segregation of duties (SoD) analysis and Process Control (PC) for internal controls automation.\nAdminister SAP GRC Risk Management (RM) module for enterprise risk assessment.\nMaintain SAP GRC Emergency Access Management (EAM) for privileged access controls.\nConfigure business roles, composite roles, and authorization objects within SAP GRC framework.\nExperience with reporting tools (SAP BusinessObjects, Power BI).Familiarity with cloud security (AWS, Azure, GCP)\nIdentify opportunities for GRC process automation. Optimize existing GRC workflows and controls\nMonitor and analyze user access patterns for suspicious activities. Implement role-based access control (RBAC) principles.\nConduct regular access reviews and user access certifications. Manage privileged access and emergency access procedures.\nCybersecurity Audit and Compliance:\nKnowledge of cybersecurity frameworks and standards. Ensure compliance with cybersecurity frameworks (NCSA, ISO 27001, NIST).\nConduct security risk assessments and vulnerability analysis. Support internal and external audit activities. Maintain security documentation and evidence collection.\nMonitor SAP systems for security incidents and anomalies. Investigate security breaches and access violations.\nIdentify opportunities for GRC process automation. Optimize existing GRC workflows and controls.\nAnalyze, Implement and Manage Information Security Governance, and Compliance, Develop Compliance Management frameworks policies, standards, and best practices.\nCoordination with Internal & External Auditors, Assessors to ensure Corrective Action and Preventive Action (CAPA) on their recommendations.\nConduct Forensic Analysis when required.\nCybersecurity Incident Management\nCoordinate with the ISIT and SOC - Security Operations Centre teams in Identification, Analysis, Prioritization, Response, Communications, Containment, Eradication, Recovery and Lessons Learned.\nConduct and coordinate periodic Drills & Exercises\nThe above statements are intended to describe the general nature and level of the work to be performed. This is not an exhaustive list of all duties and responsibilities. Qatalum’s Management reserves the right to amend and change responsibilities to meet business and organizational needs as necessary.\nMinimum Qualifications Required\nBachelor's degree (BS / BE / BTech) in an IT related discipline\nMinimum Experience Required\nMinimum 7 years of hands-on experience with SAP GRC Access Control, Process Control, and Risk Management modules.\nJob Specific Skills\nAdvanced knowledge and experience of SAP GRC to international Cybersecurity regulations, standards and frameworks e.g. GDPR, Cloud Security, ISO 27001, ISA 62443.\nCollaboration, engaging executive-level leadership and stakeholders to establish strategic plans for programs and projects.\nDemonstrate strong knowledge in SAP GRC, cybersecurity controls and testing of security measures.\nBe a thought leader in SAP GRC, Information Security Compliance and align initiatives with business objectives of the company.\nAdvanced knowledge and experience of Information Systems, Information Security and Forensic Assessments and Audits.\nConduct analysis and trending (reports, dashboards, etc.) on progress or events affecting the Qatalum environment and information security in general.\nAbility to deal effectively with a wide range of vendors, service providers, and regulatory agencies.\nStrong analytical and problem-solving abilities and excellent communication and documentation skills.\nConsiderable writing proficiency, oral presentation skills, problem solving and decision-making skills.\nCertifications in SAP GRC Access Control certification and IT Security (any one certifications e.g. CISA, CISSP, CISM, ISO 27001 ISMS Implementer)\nCompetencies\nTechnical Support & Management - Proficiency Level 3\nDrive for Excellence Proficiency Level 2\nPlanning & Organizing - Proficiency Level 4\nTeam Orientation & Development Proficiency Level 2\nCredibility & Trustworthiness Proficiency Level 2\nEffective Communication-Proficiency Level 2\nData Security Management - Proficiency Level 4\nRespect for Diversity Proficiency Level 2\nRisk Management - Proficiency Level 3\nPrinciples of Information Technology - Proficiency Level 3\nBeing Proactive & Driving Change Proficiency Level 2\nProblem Solving & Decision Making - Proficiency Level 3\nResponse to Emergencies, Crises and Disasters - Proficiency Level 3\nSkills","description_format":"text","description_chars":6045,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-10-13T00:15:23Z"}],"visa":[],"liveness":{"score":55,"band":"ok","label":"Likely open","p_open":1,"p_active":0.733,"p_room":0.75,"age_days":19,"expected_fill_days":23,"reasons":["conf:3","win:late"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/qatalum-senior-cybersecurity-grc-engineer","json_url":"https://alion.io/job/qatalum-senior-cybersecurity-grc-engineer.json","meta":{"generated_at":"2026-10-14T10:30:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12286,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2545002},"rest":"https://alion.io/mcp/rest/get_company?id=2545002"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fqatalum-senior-cybersecurity-grc-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fqatalum-senior-cybersecurity-grc-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fqatalum-senior-cybersecurity-grc-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/qatalum-senior-cybersecurity-grc-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fqatalum-senior-cybersecurity-grc-engineer"}]}