Senior Cybersecurity & Risk Governance Lead

We are seeking an experienced Cyber Security Officer to manage and strengthen the organization’s information and cybersecurity framework. The role will be responsible for identifying and managing cybersecurity risks, implementing appropriate security controls, and overseeing incident response and data protection.

Mandatory Requirements & Qualification:

• Experience: Minimum 5–6 years of relevant experience in cybersecurity, information security, IT security, or a similar role .
• Education: Bachelor’s Degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• Technical Skills:
• Cybersecurity risk assessment and risk management.
• Information security governance, policies and procedures.
• Vulnerability assessment and security controls.
• Incident response, investigation and recovery.
• Data protection and information classification.
• Cloud and third-party/vendor security assessment.
• Security monitoring and cybersecurity awareness.
• Knowledge of cybersecurity frameworks such as ISO 27001, NIST, CIS or equivalent.
• Mandatory Criteria:
• Strong knowledge of Qatar Central Bank (QCB) cybersecurity requirements and regulatory obligations .
• Experience in developing and maintaining cybersecurity policies, frameworks and risk registers.
• Experience working with IT teams to implement and monitor security controls.
• Strong knowledge of information security risk management and incident response.
• Excellent communication and reporting skills, including the ability to present cybersecurity risks and recommendations to senior management.

Key Responsibilities:

• Develop and maintain the company’s information and cybersecurity framework, strategy, policies and procedures.
• Identify, assess and monitor cybersecurity risks, vulnerabilities and control gaps.
• Maintain the cybersecurity risk register and track remediation plans.
• Collaborate with IT teams to ensure effective implementation of technical and security controls.
• Oversee cybersecurity monitoring, incident response, investigation, recovery and escalation.
• Review security requirements for new systems, technology changes, cloud services and digital initiatives.
• Assess cybersecurity risks associated with vendors, outsourced services and third parties.
• Oversee information classification, data protection and secure handling of sensitive company and customer information.
• Develop and deliver cybersecurity awareness and training programs for employees.
• Prepare and present cybersecurity risk, incident, compliance and program-status reports to the CEO and relevant committees.
• Ensure compliance with Qatar Central Bank requirements and other applicable regulatory and cybersecurity standards.
• Conduct periodic reviews and recommend improvements to strengthen the organization’s overall cybersecurity posture.

#J-18808-Ljbffr