architect

cloud engineer

network engineer

senior cybersecurity engineer Jobs in Doha

senior cybersecurity engineer

ai architect

cyber security architect

COZMALABS

<p>We are seeking a highly skilled and motivated Cyber Security Architect with strong system, on prem and Cloud Security expertise to oversee and enhance the organization&rsquo;s internal security architecture, controls, and policies while actively contributing to external security initiatives and projects.</p><p>This role combines strategic architecture leadership, hands-on implementation, security research, operations oversight, and cloud security engineering, with a strong focus on Microsoft environments such as Microsoft 365, Microsoft azure , and OS security.</p><p>The ideal candidate will possess deep expertise in enterprise security architecture, domain security, on-prem and hybrid infrastructure protection, cloud-native security controls, and DevSecOps integration.</p><p>Experience Requirements</p><ul><li>Minimum 7+ years in system and Cloud Security role.</li><li>Proven experience in enterprise security architecture (on-prem + cloud)</li><li>Experience in security research, security operations, and security assurance</li><li>Experience in setting and documenting security processes and procedures in compliance with Qatar NCSA guidelines and security best practices.</li><li>Experience in operating system and infrastructure hardening.</li></ul><p>Key Responsibilities</p><ul><li>Design, implement, and maintain enterprise-wide security architecture for the company internal security, user devices, cloud, and hybrid environments.</li><li>Develop and enforce security policies, standards, and procedures.</li><li>Lead security risk assessments and define mitigation strategies.</li><li>Align security controls with business objectives and regulatory requirements.</li><li>Oversee internal security governance and compliance frameworks (ISO 27001, NIST, CIS).</li><li>Architect and secure Azure cloud environments (IaaS, PaaS, SaaS).</li><li>Implement cloud-native and third-party security controls.</li><li>Conduct detailed security assessments of cloud services to ensure compliance with internal policies and industry frameworks.</li><li>Identify and remediate misconfigurations using automated scanning and manual inspection.</li><li>Implement secure cloud architecture patterns and service integrations.</li><li>Contribute to threat modeling and cloud risk assessments.</li><li>Ensure secure hybrid integration between on-prem and Azure environments.</li><li>Secure Active Directory and domain environments.</li><li>Implement GPO hardening and identity security controls.</li><li>Manage IAM, RBAC, MFA, and privileged access strategies.</li><li>Harden Windows/Linux servers and enterprise endpoints.</li><li>Oversee firewall configurations, IDS/IPS, VPN security, and segmentation.</li><li>Implement encryption and data protection strategies.</li><li>Perform vulnerability assessments and coordinate penetration testing.</li><li>Develop scripts and automation tools (PowerShell, Python, Bash) to enhance monitoring and compliance validation.</li><li>Integrate security controls within CI/CD pipelines (DevSecOps practices).</li><li>Monitor emerging threats, tools, and vulnerabilities.</li><li>Evaluate security technologies and recommend improvements.</li><li>Contribute to threat modeling exercises.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li><li>Conduct risk assessments and compliance audits.</li><li>Ensure adherence to CIS Benchmarks, NIST, ISO 27001.</li><li>Develop remediation guidance and contribute to policy development.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li></ul><p>Required Technical Expertise</p><ul><li>Deep technical understanding and hands on of:</li></ul><p>Cloud &amp; Security Platforms</p><ul><li>Cloud security.</li><li>Data protection strategies</li><li>Zero Trust Architecture</li></ul><p>Infrastructure &amp; Systems Security</p><ul><li>Active Directory and Microsoft 365 hardening</li><li>User devices security</li><li>Domain security best practices</li><li>Endpoint security solutions</li><li>Hybrid identity solutions</li></ul><p>DevSecOps &amp; Automation</p><ul><li>CI/CD security integration</li><li>Secure coding awareness</li><li>Security automation scripting</li></ul><p>Certifications (Required / Strongly Preferred)</p><ul><li>CISSP &ndash; Certified Information Systems Security Professional</li><li>CCSP &ndash; Certified Cloud Security Professional</li><li>CISM &ndash; Certified Information Security Manager</li><li>Microsoft Azure Security Engineer Associate (AZ-500)</li><li>CompTIA Security+ (Foundational)</li></ul><p>Education</p><p>Bachelor&rsquo;s degree in Cyber Security, Computer Science, Information Systems, or related field (Master&rsquo;s preferred).</p><p>Work Location: In person</p>

Cybersecurity

Qatar National Bank

<div>Job Summary<p><br>
The incumbent will be responsible for the setup and management of the Cyber Security Strategy and Product management function in the Group Information Security (GIS) department. The incumbent will be a banking and finance technology thinker who constantly analyses the market for new technologies that would be best suited to support the Group's strategy</p>
Main Responsibilities<p><br>
A. Shareholder &amp; Financial: - Participate in the development, execution and maintenance of the IT Security strategy aligned to the overall corporate strategy, group long term goals and assist in the prioritization process. - Assist in the overall and annual IT Security business planning with the view of achieving the Group's short term goals and submit periodic reviews and resolution. - Provide inputs to the Technology Key Risk indicators (KRIs) which shall be applicable across the Group to manage Group's exposure to IT related risks effectively. Lead IT market research and provide applicable suggestions to further the Group's strategy and develop cost / benefit analysis to alternative technologies and processes. - Focal Point from GIS in the preparation of the GIS budget to support Group's long and short term goals. - Responsible for coordinating all aspects of the GIS budget process including: review of service area business plans and key performance indicators; annual capital budget and forecasts that include available and appropriate funding sources along with required project justification analysis; operating budget and forecast submissions that adhere to direction set by bank - Liaise with all Business Units Heads for preparing the yearly IT Business Plans, Prepare monthly and quarterly update on IT Business Plan. Monitor the Progress Status and raise issues / risks to GIS management. - Produce Availability Plans in line with QNB's business planning cycle; identifying Availability requirements early enough to take account of procurement lead times. - Create implement and report on Key Performance Indicators (KPIs) for performance monitoring purposes for the GIS group and monitor their achievement on a regular basis. - Produce Capacity Plans in line with QNB's business planning cycle; identifying Capacity requirements early enough to take account of procurement lead times. - Document the need for any increase or reduction in hardware resources based on service level requirements and cost constraints - Implements KPI's and best practices for Cyber Security Strategy and Product Management. - Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank. - Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same. - Demonstrate clear understanding of the important factors behind the bank's financial &amp; non-financial performance.
</p><p>B. Customer (Internal &amp; External): - Build and maintain strong relationship with all other related departments, external entities and sections within GIS. - Defining &amp; implementing Service Level Agreements (SLAs) and Operation Level Agreements (OLAs) between GIS, IT Group, other Business Units and International Branches. - Monitors capital and operating budget performance of GIS to identify unfavourable budget variances and recommend mitigating actions or additional approvals required to minimize impact to yearend surplus/deficit. - Seek to continually exceed internal and external customer expectations through introduction of breakthrough IT Security technologies and processes aimed to improve the Group's products/services. - Produce regular management reports which include current usage of resources, trends and forecasts - Build and maintain a strong relationship with the Business Relationship Manager, technical teams within IT, finance team and external vendors of products and services - To assist customers in all their queries on Bank's product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group's objectives</p><p>
C. Internal (Processes, Products, Regulatory): - Review and identify areas for improvement in the process to deliver effective &amp; efficient GIS projects and services - Act as a BCP Coordinator for GIS, coordinate implementation of DR setup as per the defined strategy - Assist in recruiting, motivating and developing personnel to ensure the function is staffed with individuals of the required caliber and that there is adequate succession planning and provision for future demands. - Analyse and recommend new products and solutions for GIS and business users to ensure that the group is upto-date with the latest trends in technology. - Support the new technology's development process, and ensure that project deliverables are met according to specifications and timeframes. - Compile and present relevant MIS to the Group CISO on a periodic basis for the existing systems and compare the existing functionalities vis-&agrave;-vis the efficiencies to be gained from proposed technologies. - Assist in the overall recruitment of the individual resources in the areas concerned - Continuous Improvement: - Set examples by leading improvement initiatives through cross-functional teams ensuring successes. - Identify and encourage people to adopt practices better than the industry standard. - Continuously encourage and recognise the importance of thinking out-of-the-box within the team. - Encourage, solicit and reward innovative ideas even in day-to-day issues.
</p><p>D. Learning &amp; Knowledge: - Possess good knowledge and experience in COBIT and ITIL framework. - Detailed understanding of IT systems and secure architecture designs. - Good understanding of suitable solutions for configuration management, service desk, software library etc. - Identify areas for professional development for self and direct reports and take necessary actions - Hold meetings with direct reports and assess their performance. - Attend specific conferences in areas of financial services technology breakthroughs and innovations to adapt suitable ones to the bank's security architecture and product portfolio. - Possess a superior knowledge of the GIS structure, its products and related risks together with a good knowledge of operations and related controls. - Identify areas for professional development of self and direct reports and act to enhance professional development of self and others - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Hold meetings with staff and assess their performance and your teams overall performance on a regular basis. - Take decisive action to ensure speedy resolution of unresolved grievances or conflicts within the team members. - Identify development opportunities and activities for staff and facilitate/coach them to improve their effectives and prepare them to assume greater responsibilities.
</p><p>E. Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank.
</p><p>F. Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time. - Lead and develop the Cyber Security Strategy of the bank in line with the business strategy, regulatory requirement, best practices and ongoing cyber security challenges. - Benchmark and evaluate the performance of the technologies engineered and operated by the GIS Cyber Security Technologies &amp; Services teams to ensure that these are kept fine-tuned and updated with the latest technological developments.- Constantly scanning the market and competitors capabilities and bringing in technology proven in other markets and suggesting them across the group. - Keeping the CISO updated with latest developments in Cyber Security and raising any new cyber security risks to his attention. - Maintain the security architecture blueprints of the bank, liaising with the Enterprise IT architect and GITD Heads to develop and track the plans to achieve compliance. - Help to form the Information Security budget in collaboration with the Group Information Security Officer ensuring that systems under management are licensed and appropriately sized for the environment - Ensure that all the licenses and contracts are maintained and kept updated.</p>
Education and Experience Requirements<ul><li><br>
Bachelor's/Master's Degree in Computer Science, Computer Engineering or any related subject.
</li><li>Experience in IT service management of systems Technical Design, Implementation, and Maintenance on wide variety of platform including the main banking platform.
</li><li>At least 15 year's experience in a major bank of which at least 5 years in bank in a managerial capacity in an IT Security engineering or architecture function.
</li></ul><p>- Training courses and certifications in application development, database administration, security, and management is a plus. Professional certifications, an ITIL foundation, TOGAF and COBIT is a must - Professional certification such as CISSP, CISM, CISA is preferred.</p></div>

Senior Vice President Cyber Security Strategy and Product Management (Qatarization)

QNB Group

<div>
 <strong>
  About QNB
  <br/>
  <br/>
 </strong>
 Established in 1964 as the country&rsquo;s first Qatari-owned commercial bank, QNB Group has steadily grown to become the largest bank in the Middle East and Africa (MEA) region.
 <br/>
 <br/>
 QNB Group&rsquo;s presence through its subsidiaries and associate companies extends to more than 31 countries across three continents providing a comprehensive range of advanced products and services. The total number of employees is more than 28,000 serving up to 20 million customers operating through 1,000 locations, with an ATM network of 4,300 machines.
 <br/>
 <br/>
 QNB has maintained its position as one of the highest rated regional banks from leading credit rating agencies including Standard &amp; Poor&rsquo;s (A), Moody&rsquo;s (Aa3) and Fitch (A+). The Bank has also been the recipient of many awards from leading international specialised financial publications.
 <br/>
 <br/>
 Based on the Group&rsquo;s consistent strong financial performance and its expanding international presence, QNB currently ranks as the most valuable bank brand in the Middle East and Africa, according to Brand Finance Magazine.
 <br/>
 <br/>
 QNB Group has an active community support program and sponsors various social, educational and sporting events.
 <br/>
 <br/>
 <strong>
  Job Summary
  <br/>
  <br/>
 </strong>
 The incumbent will be responsible for the setup and management of the Cyber Security Strategy and Product management function in the Group Information Security (GIS) department. The incumbent will be a banking and finance technology thinker who constantly analyses the market for new technologies that would be best suited to support the Group&rsquo;s strategy
 <br/>
 <br/>
 Main Responsibilities
 <br/>
 <br/>
 <ul>
  <li>
   Shareholder &amp; Financial: - Participate in the development, execution and maintenance of the IT Security strategy aligned to the overall corporate strategy, group long term goals and assist in the prioritization process. - Assist in the overall and annual IT Security business planning with the view of achieving the Group&rsquo;s short term goals and submit periodic reviews and resolution. - Provide inputs to the Technology Key Risk indicators (KRIs) which shall be applicable across the Group to manage Group&rsquo;s exposure to IT related risks effectively. Lead IT market research and provide applicable suggestions to further the Group&rsquo;s strategy and develop cost / benefit analysis to alternative technologies and processes. - Focal Point from GIS in the preparation of the GIS budget to support Group&rsquo;s long and short term goals. - Responsible for coordinating all aspects of the GIS budget process including: review of service area business plans and key performance indicators; annual capital budget and forecasts that include available and appropriate funding sources along with required project justification analysis; operating budget and forecast submissions that adhere to direction set by bank - Liaise with all Business Units Heads for preparing the yearly IT Business Plans, Prepare monthly and quarterly update on IT Business Plan. Monitor the Progress Status and raise issues / risks to GIS management. - Produce Availability Plans in line with QNB&rsquo;s business planning cycle; identifying Availability requirements early enough to take account of procurement lead times. - Create implement and report on Key Performance Indicators (KPIs) for performance monitoring purposes for the GIS group and monitor their achievement on a regular basis. - Produce Capacity Plans in line with QNB&rsquo;s business planning cycle; identifying Capacity requirements early enough to take account of procurement lead times. - Document the need for any increase or reduction in hardware resources based on service level requirements and cost constraints - Implements KPI&rsquo;s and best practices for Cyber Security Strategy and Product Management. - Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank. - Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same. - Demonstrate clear understanding of the important factors behind the bank's financial &amp; non-financial performance.
  </li>
  <li>
   Customer (Internal &amp; External): - Build and maintain strong relationship with all other related departments, external entities and sections within GIS. - Defining &amp; implementing Service Level Agreements (SLAs) and Operation Level Agreements (OLAs) between GIS, IT Group, other Business Units and International Branches. - Monitors capital and operating budget performance of GIS to identify unfavourable budget variances and recommend mitigating actions or additional approvals required to minimize impact to yearend surplus/deficit. - Seek to continually exceed internal and external customer expectations through introduction of breakthrough IT Security technologies and processes aimed to improve the Group&rsquo;s products/services. - Produce regular management reports which include current usage of resources, trends and forecasts - Build and maintain a strong relationship with the Business Relationship Manager, technical teams within IT, finance team and external vendors of products and services - To assist customers in all their queries on Bank&rsquo;s product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group&rsquo;s objectives
  </li>
  <li>
   Internal (Processes, Products, Regulatory): - Review and identify areas for improvement in the process to deliver effective &amp; efficient GIS projects and services - Act as a BCP Coordinator for GIS, coordinate implementation of DR setup as per the defined strategy - Assist in recruiting, motivating and developing personnel to ensure the function is staffed with individuals of the required caliber and that there is adequate succession planning and provision for future demands. - Analyse and recommend new products and solutions for GIS and business users to ensure that the group is upto-date with the latest trends in technology. - Support the new technology&rsquo;s development process, and ensure that project deliverables are met according to specifications and timeframes. - Compile and present relevant MIS to the Group CISO on a periodic basis for the existing systems and compare the existing functionalities vis-&agrave;-vis the efficiencies to be gained from proposed technologies. - Assist in the overall recruitment of the individual resources in the areas concerned - Continuous Improvement: - Set examples by leading improvement initiatives through cross-functional teams ensuring successes. - Identify and encourage people to adopt practices better than the industry standard. - Continuously encourage and recognise the importance of thinking out-of-the-box within the team. - Encourage, solicit and reward innovative ideas even in day-to-day issues.
  </li>
  <li>
   Learning &amp; Knowledge: - Possess good knowledge and experience in COBIT and ITIL framework. - Detailed understanding of IT systems and secure architecture designs. - Good understanding of suitable solutions for configuration management, service desk, software library etc. - Identify areas for professional development for self and direct reports and take necessary actions - Hold meetings with direct reports and assess their performance. - Attend specific conferences in areas of financial services technology breakthroughs and innovations to adapt suitable ones to the bank&rsquo;s security architecture and product portfolio. - Possess a superior knowledge of the GIS structure, its products and related risks together with a good knowledge of operations and related controls. - Identify areas for professional development of self and direct reports and act to enhance professional development of self and others - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Hold meetings with staff and assess their performance and your teams overall performance on a regular basis. - Take decisive action to ensure speedy resolution of unresolved grievances or conflicts within the team members. - Identify development opportunities and activities for staff and facilitate/coach them to improve their effectives and prepare them to assume greater responsibilities.
  </li>
  <li>
   Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank.
  </li>
  <li>
   Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time. - Lead and develop the Cyber Security Strategy of the bank in line with the business strategy, regulatory requirement, best practices and ongoing cyber security challenges. - Benchmark and evaluate the performance of the technologies engineered and operated by the GIS Cyber Security Technologies &amp; Services teams to ensure that these are kept fine-tuned and updated with the latest technological developments.- Constantly scanning the market and competitors capabilities and bringing in technology proven in other markets and suggesting them across the group. - Keeping the CISO updated with latest developments in Cyber Security and raising any new cyber security risks to his attention. - Maintain the security architecture blueprints of the bank, liaising with the Enterprise IT architect and GITD Heads to develop and track the plans to achieve compliance. - Help to form the Information Security budget in collaboration with the Group Information Security Officer ensuring that systems under management are licensed and appropriately sized for the environment - Ensure that all the licenses and contracts are maintained and kept updated.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Education And Experience Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s/Master&rsquo;s Degree in Computer Science, Computer Engineering or any related subject.
  </li>
  <li>
   Experience in IT service management of systems Technical Design, Implementation, and Maintenance on wide variety of platform including the main banking platform.
  </li>
  <li>
   At least 15 year&rsquo;s experience in a major bank of which at least 5 years in bank in a managerial capacity in an IT Security engineering or architecture function.
  </li>
  <li>
   Training courses and certifications in application development, database administration, security, and management is a plus. Professional certifications, an ITIL foundation, TOGAF and COBIT is a must - Professional certification such as CISSP, CISM, CISA is preferred.
   <br/>
   <br/>
  </li>
 </ul>
 Note: you will be required to attach the following:
 <br/>
 <br/>
 <ul>
  <li>
   Resume/CV
  </li>
  <li>
   Copy of Passport or QID
  </li>
  <li>
   Copy of Education Certificate
  </li>
  <li>
   Copy of Birth Certificate
  </li>
 </ul>
</div>


QNB3667 - Senior Vice President Cyber Security Strategy and Product Management (Qatarization)

<div></div><div><div><ul><li><div><b>Business Unit</b>
</div><div>QNB - Qatar
</div></li><li><div><b>Division</b>
</div><div>Not Applicable
</div></li><li><div><b>Department</b>
</div><div>Not Applicable
</div></li><li><div><b>Location</b>
</div><div>Doha, Qatar
</div></li><li><div><b>Closing Date</b>
</div><div>31-Dec-2026
</div></li></ul></div><div><div><h5 class="jobSectionHeader"><b>About QNB</b></h5>
<p>Established in 1964 as the country&rsquo;s first Qatari-owned commercial bank, QNB Group has steadily grown to become the largest bank in the Middle East and Africa (MEA) region.</p>
<p>QNB Group&rsquo;s presence through its subsidiaries and associate companies extends to more than 31 countries across three continents providing a comprehensive range of advanced products and services. The total number of employees is more than 28,000 serving up to 20 million customers operating through 1,000 locations, with an ATM network of 4,300 machines.</p>
<p>QNB has maintained its position as one of the highest rated regional banks from leading credit rating agencies including Standard &amp; Poor&rsquo;s (A), Moody&rsquo;s (Aa3) and Fitch (A+). The Bank has also been the recipient of many awards from leading international specialised financial publications.</p>
<p>Based on the Group&rsquo;s consistent strong financial performance and its expanding international presence, QNB currently ranks as the most valuable bank brand in the Middle East and Africa, according to Brand Finance Magazine.</p>
<p>QNB Group has an active community support program and sponsors various social, educational and sporting events.</p>
</div></div><div><div><div><h5 class="jobSectionHeader"><b>Job Summary</b></h5>
</div><div><p>The incumbent will be responsible for the setup and management of the Cyber Security Strategy and Product management function in the Group Information Security (GIS) department. The incumbent will be a banking and finance technology thinker who constantly analyses the market for new technologies that would be best suited to support the Group&rsquo;s strategy</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Main Responsibilities</b></h5>
</div><div><p>A. Shareholder &amp; Financial: - Participate in the development, execution and maintenance of the IT Security strategy aligned to the overall corporate strategy, group long term goals and assist in the prioritization process. - Assist in the overall and annual IT Security business planning with the view of achieving the Group&rsquo;s short term goals and submit periodic reviews and resolution. - Provide inputs to the Technology Key Risk indicators (KRIs) which shall be applicable across the Group to manage Group&rsquo;s exposure to IT related risks effectively. Lead IT market research and provide applicable suggestions to further the Group&rsquo;s strategy and develop cost / benefit analysis to alternative technologies and processes. - Focal Point from GIS in the preparation of the GIS budget to support Group&rsquo;s long and short term goals. - Responsible for coordinating all aspects of the GIS budget process including: review of service area business plans and key performance indicators; annual capital budget and forecasts that include available and appropriate funding sources along with required project justification analysis; operating budget and forecast submissions that adhere to direction set by bank - Liaise with all Business Units Heads for preparing the yearly IT Business Plans, Prepare monthly and quarterly update on IT Business Plan. Monitor the Progress Status and raise issues / risks to GIS management. - Produce Availability Plans in line with QNB&rsquo;s business planning cycle; identifying Availability requirements early enough to take account of procurement lead times. - Create implement and report on Key Performance Indicators (KPIs) for performance monitoring purposes for the GIS group and monitor their achievement on a regular basis. - Produce Capacity Plans in line with QNB&rsquo;s business planning cycle; identifying Capacity requirements early enough to take account of procurement lead times. - Document the need for any increase or reduction in hardware resources based on service level requirements and cost constraints - Implements KPI&rsquo;s and best practices for Cyber Security Strategy and Product Management. - Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank. - Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same. - Demonstrate clear understanding of the important factors behind the bank's financial &amp; non-financial performance.
</p><p>B. Customer (Internal &amp; External): - Build and maintain strong relationship with all other related departments, external entities and sections within GIS. - Defining &amp; implementing Service Level Agreements (SLAs) and Operation Level Agreements (OLAs) between GIS, IT Group, other Business Units and International Branches. - Monitors capital and operating budget performance of GIS to identify unfavourable budget variances and recommend mitigating actions or additional approvals required to minimize impact to yearend surplus/deficit. - Seek to continually exceed internal and external customer expectations through introduction of breakthrough IT Security technologies and processes aimed to improve the Group&rsquo;s products/services. - Produce regular management reports which include current usage of resources, trends and forecasts - Build and maintain a strong relationship with the Business Relationship Manager, technical teams within IT, finance team and external vendors of products and services - To assist customers in all their queries on Bank&rsquo;s product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group&rsquo;s objectives</p><p>
C. Internal (Processes, Products, Regulatory): - Review and identify areas for improvement in the process to deliver effective &amp; efficient GIS projects and services - Act as a BCP Coordinator for GIS, coordinate implementation of DR setup as per the defined strategy - Assist in recruiting, motivating and developing personnel to ensure the function is staffed with individuals of the required caliber and that there is adequate succession planning and provision for future demands. - Analyse and recommend new products and solutions for GIS and business users to ensure that the group is up to-date with the latest trends in technology. - Support the new technology&rsquo;s development process, and ensure that project deliverables are met according to specifications and timeframes. - Compile and present relevant MIS to the Group CISO on a periodic basis for the existing systems and compare the existing functionalities vis-&agrave;-vis the efficiencies to be gained from proposed technologies. - Assist in the overall recruitment of the individual resources in the areas concerned - Continuous Improvement: - Set examples by leading improvement initiatives through cross-functional teams ensuring successes. - Identify and encourage people to adopt practices better than the industry standard. - Continuously encourage and recognise the importance of thinking out-of-the-box within the team. - Encourage, solicit and reward innovative ideas even in day-to-day issues.
</p><p>D. Learning &amp; Knowledge: - Possess good knowledge and experience in COBIT and ITIL framework. - Detailed understanding of IT systems and secure architecture designs. - Good understanding of suitable solutions for configuration management, service desk, software library etc. - Identify areas for professional development for self and direct reports and take necessary actions - Hold meetings with direct reports and assess their performance. - Attend specific conferences in areas of financial services technology breakthroughs and innovations to adapt suitable ones to the bank&rsquo;s security architecture and product portfolio. - Possess a superior knowledge of the GIS structure, its products and related risks together with a good knowledge of operations and related controls. - Identify areas for professional development of self and direct reports and act to enhance professional development of self and others - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Hold meetings with staff and assess their performance and your teams overall performance on a regular basis. - Take decisive action to ensure speedy resolution of unresolved grievances or conflicts within the team members. - Identify development opportunities and activities for staff and facilitate/coach them to improve their effectives and prepare them to assume greater responsibilities.
</p><p>E. Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank.
</p><p>F. Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time. - Lead and develop the Cyber Security Strategy of the bank in line with the business strategy, regulatory requirement, best practices and ongoing cyber security challenges. - Benchmark and evaluate the performance of the technologies engineered and operated by the GIS Cyber Security Technologies &amp; Services teams to ensure that these are kept fine-tuned and updated with the latest technological developments.- Constantly scanning the market and competitors capabilities and bringing in technology proven in other markets and suggesting them across the group. - Keeping the CISO updated with latest developments in Cyber Security and raising any new cyber security risks to his attention. - Maintain the security architecture blueprints of the bank, liaising with the Enterprise IT architect and GITD Heads to develop and track the plans to achieve compliance. - Help to form the Information Security budget in collaboration with the Group Information Security Officer ensuring that systems under management are licensed and appropriately sized for the environment - Ensure that all the licenses and contracts are maintained and kept updated.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Education and Experience Requirements</b></h5>
</div><div><ul><li>Bachelor&rsquo;s/Master&rsquo;s Degree in Computer Science, Computer Engineering or any related subject.
</li><li>Experience in IT service management of systems Technical Design, Implementation, and Maintenance on wide variety of platform including the main banking platform.
</li><li>At least 15 year&rsquo;s experience in a major bank of which at least 5 years in bank in a managerial capacity in an IT Security engineering or architecture function.
</li></ul><p>- Training courses and certifications in application development, database administration, security, and management is a plus. Professional certifications, an ITIL foundation, TOGAF and COBIT is a must - Professional certification such as CISSP, CISM, CISA is preferred.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Note: you will be required to attach the following:</b></h5>
</div><div><div><ul><li>Resume/CV</li></ul>
<ul><li>Copy of Passport or QID
</li></ul><ul><li>Copy of Education Certificate
</li></ul><ul><li>Copy of Birth Certificate</li></ul></div></div></div></div></div><div></div>

Senior Vice President Cyber Security Strategy and Product Management

Starlink Qatar

<div>
 <p>
  We are seeking a
  <strong>
   Cybersecurity Architect
  </strong>
  to define and govern the end-to-end security architecture for platform capabilities and vendor-delivered solutions. The role ensures
  <strong>
   secure-by-design implementation
  </strong>
  across cloud-agnostic deployments.
 </p>
 <p>
  You will establish security standards, reference architectures, and assurance processes covering
  <strong>
   identity, network segmentation, application security, data protection, and operational security monitoring
  </strong>
  . Working with stakeholders, vendors, and operations teams, the architect drives
  <strong>
   threat modeling, security controls validation, and compliance evidence readiness
  </strong>
  , including SIEM/SOAR integration, vulnerability management, and incident response procedures. The role ensures consistent security posture across multi-tenant environments and multiple cloud platforms.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Define
   <strong>
    security reference architecture and baseline controls
   </strong>
   for cloud, Kubernetes, applications, and data services.
  </li>
  <li>
   Lead
   <strong>
    security governance
   </strong>
   : design reviews, threat modeling, security exceptions, and risk acceptance processes.
  </li>
  <li>
   Define
   <strong>
    identity and access controls
   </strong>
   (Entra ID, RBAC, PIM/JIT, conditional access, service principals, secrets management).
  </li>
  <li>
   Design
   <strong>
    network security architecture
   </strong>
   (segmentation/trust zones, private endpoints, WAF, egress controls, firewall policies).
  </li>
  <li>
   Establish
   <strong>
    application security standards
   </strong>
   (OWASP, secure SDLC, SAST/DAST, dependency/SBOM, container image signing).
  </li>
  <li>
   Define
   <strong>
    data security controls
   </strong>
   (classification, encryption/CMK/HSM, DLP, key management, retention, secure deletion).
  </li>
  <li>
   Own
   <strong>
    security monitoring requirements and integrations
   </strong>
   : Defender for Cloud (CSPM/CWPP), Sentinel (SIEM), SOAR playbooks, alert tuning.
  </li>
  <li>
   Define
   <strong>
    vulnerability management and patching processes
   </strong>
   for OS/Kubernetes/runtime components, including SLA targets and reporting.
  </li>
  <li>
   Support
   <strong>
    incident response readiness
   </strong>
   : runbooks, tabletop exercises, forensic logging, evidence handling, and post-incident improvements.
  </li>
  <li>
   Provide
   <strong>
    assurance of vendor deliverables and go-live readiness
   </strong>
   (pen test coordination, remediation validation, compliance evidence packs).
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Skills &amp; Abilities
  </strong>
 </p>
 <ul>
  <li>
   Deep understanding of
   <strong>
    cloud security architecture, zero-trust networking, and Kubernetes/container security
   </strong>
   .
  </li>
  <li>
   Strong capability in
   <strong>
    IAM design and privileged access governance
   </strong>
   in regulated environments.
  </li>
  <li>
   Ability to translate
   <strong>
    risk and compliance requirements into practical technical controls and acceptance criteria
   </strong>
   .
  </li>
  <li>
   Experience implementing
   <strong>
    security monitoring, detection engineering, and incident response processes
   </strong>
   .
  </li>
  <li>
   Strong
   <strong>
    stakeholder influence
   </strong>
   and ability to enforce standards across multiple vendors and teams.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Education &amp; Experience
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in
   <strong>
    Computer Science, Information Technology, Cybersecurity
   </strong>
   ; Master&rsquo;s degree highly preferred.
  </li>
  <li>
   <strong>
    8+ years
   </strong>
   in cybersecurity architecture or security engineering roles in government, telco, finance, or critical infrastructure.
  </li>
  <li>
   Hands-on experience securing
   <strong>
    Azure and at least one other cloud
   </strong>
   (GCP/AWS), including hybrid connectivity and shared responsibility.
  </li>
  <li>
   Proven experience with
   <strong>
    SIEM
   </strong>
   (Microsoft Sentinel preferred) and
   <strong>
    CSPM/CWPP
   </strong>
   (Defender for Cloud preferred).
  </li>
  <li>
   Experience with
   <strong>
    secure SDLC, vulnerability management, penetration testing coordination, and remediation programs
   </strong>
   .
  </li>
  <li>
   Relevant certifications preferred:
   <strong>
    CISSP/CCSP, CISM, Azure Security Engineer, CKA/CKS, ISO 27001 awareness
   </strong>
   .
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Preferred Tools
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    Security posture &amp; SIEM:
   </strong>
   Microsoft Defender for Cloud, Microsoft Sentinel, SOAR playbooks
  </li>
  <li>
   <strong>
    Container/Kubernetes security:
   </strong>
   image scanning (Trivy/Anchore), policy-as-code (OPA/Gatekeeper), cosign/Sigstore, Kubernetes audit tools
  </li>
  <li>
   <strong>
    Identity &amp; secrets:
   </strong>
   Azure Entra ID, PIM, Key Vault/KMS/HSM, PAM tooling
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Soft Skills
  </strong>
 </p>
 <ul>
  <li>
   Risk-based
   <strong>
    decision-making
   </strong>
   and ability to articulate trade-offs clearly
  </li>
  <li>
   Strong facilitation of
   <strong>
    threat modeling and security design reviews
   </strong>
  </li>
  <li>
   Clear, structured
   <strong>
    documentation and compliance evidence mindset
   </strong>
  </li>
  <li>
   Calm, decisive leadership during
   <strong>
    incidents and high-pressure situations
   </strong>
  </li>
  <li>
   <strong>
    Collaborative approach
   </strong>
   that enables delivery while maintaining security standards
  </li>
 </ul>
</div>


Cybersecurity Architect

<div>
 <p>
  <strong>
   Role Overview
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  We are seeking an experienced Network Security Architect to design, implement, and maintain secure network architectures that protect organizational information assets from both internal and external threats. This role will lead the development of security frameworks, drive secure infrastructure design, and ensure compliance with industry standards and best practices.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Architecture &amp; Design
  </strong>
 </p>
 <ul>
  <li>
   Design, document, and maintain secure network and system architectures aligned with business and security requirements.
  </li>
  <li>
   Develop and review network security blueprints, segmentation strategies, and data flow diagrams.
  </li>
  <li>
   Integrate security controls across enterprise infrastructure, including firewalls, VPNs, WAFs, and proxy solutions.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Implementation &amp; Configuration
  </strong>
 </p>
 <ul>
  <li>
   Lead deployment and configuration of network security technologies (firewalls, routers, switches, WAFs, load balancers).
  </li>
  <li>
   Drive implementation of zero-trust architectures, network access control (NAC), and micro-segmentation.
  </li>
  <li>
   Collaborate with infrastructure and application teams to embed security throughout design and deployment phases.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Technology Evaluation &amp; Innovation
  </strong>
 </p>
 <ul>
  <li>
   Evaluate emerging security technologies and recommend solutions to enhance network protection.
  </li>
  <li>
   Develop and maintain security architecture roadmaps aligned with organizational goals.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Security Compliance &amp; Governance
  </strong>
 </p>
 <ul>
  <li>
   Ensure alignment with security frameworks and standards such as ISO 27001, NIST, and CIS.
  </li>
  <li>
   Support compliance with regulatory requirements (e.g., GDPR, PCI-DSS).
  </li>
  <li>
   Conduct network security assessments, audits, and gap analyses.
  </li>
  <li>
   Define and enforce network security standards and configuration baselines.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Leadership &amp; Collaboration
  </strong>
 </p>
 <ul>
  <li>
   Provide technical leadership and mentorship to network and security engineers.
  </li>
  <li>
   Collaborate with enterprise architects, cloud teams, and DevOps to deliver integrated security solutions.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Skills &amp; Competencies
  </strong>
 </p>
 <ul>
  <li>
   Strong analytical and problem-solving abilities.
  </li>
  <li>
   Deep understanding of modern cyber threats and attack vectors.
  </li>
  <li>
   Excellent communication skills, with the ability to explain technical concepts to diverse stakeholders.
  </li>
  <li>
   Strong documentation and leadership capabilities.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications &amp; Experience
  </strong>
 </p>
 <ul>
  <li>
   8&ndash;12 years of experience in network and security engineering, including at least 4 years in a senior role.
  </li>
  <li>
   Bachelor&rsquo;s degree in Computer Science, Information Technology, or a related field.
  </li>
  <li>
   Strong knowledge of networking protocols (TCP/IP, routing, VLANs, VPNs).
  </li>
  <li>
   Hands-on expertise with next-generation firewalls (e.g., Palo Alto, Fortinet, Check Point, Cisco ASA/Firepower).
  </li>
  <li>
   Experience with network policy management, QoS, packet shaping, and intrusion prevention systems.
  </li>
  <li>
   Exposure to cloud network security (Azure, GCP).
  </li>
  <li>
   Familiarity with Zero Trust, SD-WAN, and SASE architectures.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Preferred Certifications
  </strong>
 </p>
 <ul>
  <li>
   CCNP Security / CCIE Security
  </li>
  <li>
   Palo Alto PCNSE
  </li>
  <li>
   Cloud Security Certifications
  </li>
  <li>
   Fortinet Certifications
  </li>
  <li>
   F5 Certification
  </li>
 </ul>
 <p>
 </p>
</div>


Network Security Architect

NATIONAL ELECTRICITY & WATER CONSTRUCTIONS WLL

<p>OT/ICS Cybersecurity Architecture &amp; Design Engineer</p><ul><li>Design secure OT/ICS network and system architectures</li><li>Implement security controls for SCADA and automation systems</li><li>Support secure integration of IT and OT environments</li><li>Review designs for cybersecurity risks and mitigation</li><li>Support system hardening and security-by-design initiatives</li></ul><p>Work Location: In person</p>

OT/ICS Cybersecurity Architecture & Design Engineer

Explore 478+ Cyber security architect in Doha this May. Find roles across top companies and apply now to boost your career.