Job Details of IT ANALYST (GOVERNANCE, RISK & COMPLIANCE)

Company
QatarEnergy is an integrated national oil corporation that stands at theforefront of efforts for the long term sustainable

development,utilization and monetization of oil and gas resources in the State ofQatar.In its efforts to become one of the

best national energy companies inthe world, QatarEnergy's activities and those of its subsidiaries andjoint ventures,

encompass the entire spectrum of the oil and gas valuechain locally, regionally, and internationally.They include the

exploration, refining and production, marketing, andsale of oil and gas, liquefied natural gas (LNG), natural gas

liquids(NGL), gas to liquids (GTL) products, refined products, petrochemicals,fertilizers, steel and aluminum. As an

integrated corporation,QatarEnergy's activities also include marketing and sale of oil and gasand other various

products.QatarEnergy's operations and activities are conducted at various onshorelocations, including Doha, Dukhan and

the Mesaieed and Ras LaffanIndustrial Cities; and at various offshore areas, such as offshore oilfields production stations,

drilling platforms, Halul oil export island,and the North Field, which is the largest single non-associated gasreservoir in the

world covering an area of 6,000 square kilometers. Theutilization of this field’s massive reserves has become a
primarynational goal to continue the development and prosperity of the country.QatarEnergy pays the utmost attention to

the health and safety of itsemployees, contractors, visitors and the local communities where itoperates. From drilling to

construction, operations to decommissioning,QatarEnergy's health, safety and environment policy forms an integralpart of

the corporation’s daily business and long term planning.QatarEnergy is committed to contribute to a better future by
meetingtoday’s economic needs, while safeguarding our environment and resourcesfor generations to come. Thriving on
innovation and excellence,QatarEnergy is bound to the highest levels of sustainable human, socio-economic, and

environmental development in Qatar and beyond.

Department
INFORMATION & COMMUNICATION TECHNOLOGY

Primary purpose of job
Participate in establishing and implementing ICT Governance, Risk, Compliance, and performance management

frameworks and metrics to continuously improve ICT Department performance and ensure ICT deliver and demonstrate

value to the business. Develop, maintain, and implement IT Service Management policies, procedures, methodologies, and

related artifacts in collaboration with other stakeholders in ICT. Engage with internal audit and ICT stakeholders to conduct

audit risk assessments and agree on annual audit plans. Responsible for tracking and reporting on open audit actions and

working with different stakeholders to ensure timely completion of actions. Participate in ICT risk assessment activities and

ensure risk practices and controls are well designed and implemented in line with Corporate ERM framework. Monitor

compliance activities and ensure all ICT areas are adhering to and in compliance with ICT Governance and management

procedures.

Experience & Skills

• A minimum of 8 years of progressive experience in an enterprise IT environment, preferably in Oil & Gas industry, with at

least 5 years of demonstrated experience in IT Governance and IT Service Management.

• Demonstrated experience in designing, developing, executing, and improving IT Governance and IT Service Management

policies, processes, practices, and supporting documentation.

• In-depth knowledge and experience in formulating IT Governance objectives and goals and developing effective

techniques for deriving these objectives from IT initiatives.

• Practical experience in the implementation of IT Governance, Audit, Risk and Compliance frameworks such as ITIL,

COBIT, COSO and CMMI.

• Deep understanding of internal and external auditing techniques (i.e., audit planning, fieldwork, reporting and tracking of

controls, including remediation activities).

• Deep understanding of Enterprise Risk Management methodologies, frameworks, and principles to identify, assess,

mitigate, monitor, test and report on risks and controls.

• Good understanding and working experience in the implementation of ICT process improvements utilizing the COBIT

framework and leveraging six sigma or other similar methodologies to ensure measurement and success in these areas.

• Broad knowledge of current and emerging IT industry trends and directions, particularly those associated with IT in Oil and

Gas Sector.

• Operates under direction using mature judgment in planning and performing assignments and achieving defined

objectives.

• Demonstrates a commitment to quality and continuous improvement.

• Demonstrated ability to effectively participate in a multi-cultural and multi-national workforce.

• Excellent written and verbal communications skills along with refined presentation skills and the ability to work with

contractors and other departments at varying levels of management.

• Demonstrated analytical, problem-solving, and critical thinking skills.

• Ability to work with minimal supervision and consistently deliver results required.

Education
Bachelor’s degree in Computer Science, Computer Engineering, or equivalent education.
Preferred Certifications:

• ITIL V3 Expert Certified
• ISO 2000 Lead Implementer / Auditor
• COBIT Design and Implementation
• ITIL 4 Managing Professional
• Certified Information Systems Auditor (CISA)