Duaa S

Information Security & GRC

Qatar • Full-time

Dec 2020 - Present • 5 yrs 5 mos

• Malware Analysis • Digital Forensics • Ensure compliance with national and international frameworks such as NIA (National Information Assurance), QCSF (Qatar Cyber Security Framework), ISO27001/2, and ISO27701 including control implementation, assessments, and reporting. • Develop, review, and maintain information security policies, and procedures aligned with regulatory and organizational requirements. • Conduct risk assessments, identify gaps, and recommend mitigation strategies across business and IT environments. • Coordinate with cross-functional teams (IT, Security, Compliance, Audit) to collect required evidence and ensure timely upload into the GRC Archer system. • Ensure all supporting documentation and audit evidence are uploaded and maintained in GRC Archer. • Prepare and present maturity reports, scorecards, and insights to senior management using GRC Archer. • Track remediation actions and ensure timely closure of audit findings through Archer dashboards and reporting. • Coordinate internal and external audits, ensuring timely remediation of findings and proper documentation • Monitor regulatory changes in Qatar and ensure continuous alignment with applicable laws and standards • Leverage ZeroFox and SOC Radar for brand protection, detecting phishing, impersonation, and social media threats. • Monitor and analyze Indicators of Compromise (IOCs) and threat intelligence using Microsoft XDR. • Support incident response by providing threat intelligence insights and correlating security alerts. • Contribute to continuous improvement of threat intelligence processes and reporting. • Conduct security awareness initiatives related to governance, policies, and emerging threats. • Maintain documentation and evidence for compliance and audit readiness.