Information Security Officer - Data Security Specialist

Information Security Officer - Data Security Specialist

Black & Grey HR is recruiting for an established technology solutions and services provider i n Doha, Qatar. Our client is seekingan experienced Information Security Officer to lead and manage the Data Security program . You will be responsible for designing, implementing, and managing robust data protection controls, ensuring the confidentiality, integrity, and privacy of critical information assets.

Key Responsibilities Data Security Engineering:

• Design and implement data protection controls across enterprise, cloud, and AI/ML solutions.
• Deploy and manage Data Loss Prevention (DLP), data masking, tokenization, and data discovery/classification tools.
• Collaborate with application and infrastructure teams to integrate security into the data lifecycle.
• Monitor the organization's data security posture and generate compliance and risk reports.
• Support incident response investigations related to data breaches or insider threats.
• Implement and manage data protection controls in Google Cloud Platform (GCP) and Microsoft Azure.
• Secure cloud databases, data lakes, and AI data pipelines.
• Configure encryption (at rest, in transit, in use) and Bring-Your-Own-Key (BYOK) strategies.
• Manage secrets and ensure secure access to cloud data storage systems.

Cryptography & Key Management:

• Define and enforce enterprise cryptographic standards and key management policies.
• Manage encryption practices and ensure compliance with industry cryptographic standards.

Data Privacy & Compliance:

• Ensure adherence to privacy regulations (GDPR, HIPAA, PDPPL).
• Integrate privacy-by-design principles into technical controls and data governance programs.

Database Security:

• Secure structured and unstructured data repositories (SQL, NoSQL).
• Implement Database Activity Monitoring (DAM) and stringent access controls.
• Conduct regular security reviews, hardening, and vulnerability assessments of database systems.
• Partner with stakeholders on enterprise data protection strategies.
• Ensure compliance with the Qatar NCSA framework and international standards (ISO 27001, NIST).
• Conduct third-party/vendor data security assessments and review data sharing agreements.
• Define KPIs, maintain security dashboards, and stay abreast of emerging threats and technologies.

Requirements Qualifications & Required Experience:

• Bachelor's degree in Engineering, IT, Computer Science, or a related field. Equivalent extensive experience will be considered.
• 8+ years in information security with a dedicated focus on data protection, cryptography, and database security.
• Arabic language proficiency is preferred.
• Professional certifications such as CISSP, CCSP, CDPSE, or CCSK are required. Cloud security certifications (GCP, Azure, AWS) are a strong advantage.

Technical Skillset:

• Hands-on experience with cloud platforms, specifically GCP and Azure.
• Proven expertise implementing data protection in multi-cloud environments.
• Strong knowledge of encryption standards, cryptographic protocols, and key management (KMS, GCP Cloud KMS, Azure Key Vault).
• Practical experience with secrets management (HashiCorp Vault, Azure Key Vault, GCP Secret Manager).
• Experience with DLP solutions (e.g., Forcepoint, Microsoft Purview, Google Cloud DLP).
• Skills in data discovery, classification, masking, tokenization, and anonymization.
• Experience configuring Database Activity Monitoring (DAM) tools (e.g., Imperva, IBM Guardium).
• In-depth understanding of privacy regulations (GDPR, HIPAA) and compliance frameworks.

Preferred Experience:

• Background in regulated industries (financial services, healthcare, government).
• Understanding of AI/ML data security governance.
• Knowledge of the Qatar NIA and NCSA frameworks.
• Excellent analytical and problem-solving skills.
• Strong communication skills with the ability to convey complex technical concepts to both technical and non-technical audiences.
• Strategic thinker with a track record of practical implementation and governance.