cyber security consultant

Cyber Security Consultancy

We are establishing a new cybersecurity advisory and risk consulting firm in Doha focused on supporting small and mid-sized organisations in managing cyber risk, strengthening governance, and achieving compliance with international standards.We are seeking an experienced Senior Cybersecurity Consultant to play a foundational role in shaping service delivery, leading client engagements, and supporting the firm&rsquo;s growth.This is an opportunity to join at an early stage and help build a professional advisory practice focused on governance, compliance, and executive-level risk management.Key responsibilities:<ul><li>Lead cybersecurity risk assessments for client organisations</li><li>Develop and implement information security policies and governance frameworks</li><li>Support clients in achieving compliance with standards such as ISO 27001 and related frameworks</li><li>Conduct gap analyses and provide structured remediation roadmaps</li><li>Advise senior management and executives on cyber risk posture and mitigation strategies</li><li>Develop security procedures, controls, and documentation</li><li>Support vendor risk and third-party security reviews</li><li>Deliver cybersecurity awareness and executive briefing sessions</li><li>Contribute to development of consulting methodologies and service offerings</li></ul>Interested candidates should submit:<ul><li>CV / Resume</li><li>Summary of relevant consulting or advisory experience</li><li>Certifications held</li><li>Availability (full-time, part-time, or consulting basis)</li></ul>Applications will be handled confidentially.Job Types: Full-time, Part-time, PermanentPay: QAR7,000.00 - QAR15,000.00 per month

Senior Cyber Security Consultant

Google

<div>
 Please note: Applicants to this role must have work authorization in Saudi Arabia as this role is not eligible for work visa sponsorship.
 
 
 Note: By applying to this position you will have an opportunity to share your preferred working location from the following:
 
 Dubai - United Arab Emirates; Doha, Qatar; Riyadh Saudi Arabia
 
 .
 
 Minimum qualifications:
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field or equivalent practical experience.
 </li>
 <li>
 5 years of experience in three or more of the following security areas: network, red team assessments, EDR evasion, cloud, social engineering, scripting, tool development.
 </li>
 <li>
 Experience of Operating System Security across Windows, Linux, or Mac.
 
 
 </li>
 </ul>
 
 Preferred qualifications:
 
 
 
 <ul>
 <li>
 Certifications related to offensive security including OSCE, OSEP, OSEE, OSCP, CCSAS, CCT INF or relevant SANS courses.
 </li>
 <li>
 Experience in payload development, lateral movement, privilege escalation and EDR evasion.
 </li>
 <li>
 Experience in four or more of the following: network protocols, threat intelligence analysis, system and network administration, project management, developing applications, technical incident response processes, source code review, reverse engineering.
 </li>
 <li>
 Experience in architecting security tools using programming languages (e.g., Python, C#, C/C++, Rust, Nim or similar).
 </li>
 <li>
 Knowledge of Windows internals.
 
 
 </li>
 </ul>
 
 About The Job
 
 
 
 As a Consultant, you will be responsible for providing cybersecurity consulting services and support to our clients, including assessing and advising clients on both technical and process-based controls for all manner of environments. You will perform Red and Purple team assessments, including adversarial emulation of cyber attacks against customer organizations, and other technical cyber assessments including external engagement, web application, mobile and wireless security testing. You will expand the team&rsquo;s capabilities through tool creation, research on offensive techniques, incorporation of threat actor intelligence, internal presentations and knowledge share.
 
 
 In this role, you will develop comprehensive and accurate reports and presentations for both technical and executive audiences, and act as a trusted advisor to C-level, security leaders and other customer stakeholders. You will assist with scoping prospective engagements, leading teams for engagements from kickoff through remediation phase, as well as mentoring other staff.
 
 
 Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Perform offensive technical cyber security engagements of a varied nature.
 </li>
 <li>
 Advise clients on security best practices for remediating discovered issues.
 </li>
 <li>
 Collaborate with internal teams to expand capabilities to deliver further value to clients.
 </li>
 <li>
 Interface with clients to address concerns, issues, or escalations, track and guide to closure any issues that impact the engagements and its value to clients.
 
 
 
 </li>
 </ul>
 Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .
</div>

Senior Consultant, Red Team, Google Cloud, Mandiant Consulting

C2HR LLP

Requirements:<ul><li>Bachelor&rsquo;s in Computer Science / Information Security / Electrical Engineering</li><li>7+ years in OT/ICS</li><li>Certifications:</li><li>CISA</li><li>CISM</li><li>CRISC</li><li>ISO 27001 Lead Auditor</li><li>IEC 62443</li><li>Strong understanding of:</li><li>Q-CERT</li><li>ISO 27001</li><li>IEC 62443</li></ul>Duties:<ul><li>Conduct cyber risk assessments</li><li>Perform Business Impact Analysis</li><li>Ensure regulatory compliance</li><li>Lead audits &amp; close findings</li><li>Maintain vulnerability &amp; incident records</li><li>Deliver cybersecurity awareness training</li></ul>Job Type: PermanentPay: QAR22,000.00 - QAR30,000.00 per month

OT/ICS Cybersecurity Governance, Risk & Compliance (GRC)

PROZ TECHNOLOGIES

Hello, Greetings from Proztec Qatar! I hope everything is going well with you.We are thrilled to extend multiple exciting job opportunities, and currently, we are hiring for the role of Compliance officerwith one of our prestigious clients in Qatar. Below, you will find details of the role, key responsibilities, and requirements.JOB OVERVIEWJOB TITLE : Compliance officerLOCATION : Doha, QatarGENERAL JOB DESCRIPTIONSeveral advisory services in term of Security Management and Governance are being expected to support the adaptation of the policies, guidelines, for example, covering:&middot; Risk management.&middot; Threats and vulnerabilities modeling.&middot; Attacks path modeling and countermeasures.&middot; Managerial aspects concerning information security.&middot; Assessment of information security effectiveness and degrees of control.&middot; Awareness and Education around security concepts for all stakeholders.&middot; Standards for information security.&middot; Reporting (e.g. disaster recovery and business continuity).&middot; Theoretical and empirical analysis.&middot; Economic aspects of the cybersecurity ecosystem.&middot; Capability modeling.&middot; Liaise with MOTC, Ooredoo and other stakeholders in the project and be the focal point for all cyber security related tasks.Build and drive a successful cyber security practice for Tasmu based on Industry and International best practices in the constantly evolving cyber threat landscape.DUTIES &amp; RESPONSIBILITIESThe Compliance and Audit activity provides the key elements that include:&middot; Review existing governance models, structure, and process: Review documentation, capture existing practices, conduct interviews, draw the current landscape, and define the baseline for the engagement activity.&middot; Define the targeted level of maturity on the governance level.&middot; Perform Gap Analysis: Analyze current organizational governance structures with well-defined industry frameworks, standards, and models &ndash; identify opportunities to strengthen existing methods and structures and/or replace them with new and improved methods.&middot; Define Governance Operating Model: Identifies governance structure inconsistencies, overlaps, and gaps among governance mechanisms and maps current governance processes and structures.&middot; Plan of Action deliverables: Provides a set of deliverables that provide visibility and insights into the engagement activities, current landscape, achievable target state (i.e., desired state to accomplish), prioritized set of actions with milestones, to lead towards the target state to enhance and strengthen the security framework.Policy enablement : &middot; Enable security policies on key aspects such as Digital identification, Global Security, Information Classification, IoT Security, and Organization Governance to improve security based on the emergence of new threats, new technological trends, and national/international regulatory framework evolution.&middot; Ensure that policies are applied on use case and IoT services definition.&middot; Collaborate with Microsoft on the definition of Cloud-based Security Control Framework to ensure and ease the sharing, compliance, and application of policies as well as the follow-up of the adoption of those policies by all TASMU ecosystem's stakeholders.Awareness :The objective of the Awareness activity is to provide training and awareness sessions on information security to TASMU operators/key personnel. This awareness program shall be based on policies, standards, procedures, and best practices previously defined as well as performed in a risk-centric approach to enable TASMU operators to understand the stakes/challenges of cybersecurity within the TASMU program's context.The Awareness program should be conducted as an on-going program to ensure that training and knowledge are not just delivered as an annual activity, rather it is used to maintain a high level of security awareness on a daily basis.&middot; Assemble the Security Awareness Team&middot; Determine Roles for Security Awareness&middot; Identify levels of responsibility (Management, specific roles, and all other personnel)&middot; Establish Minimum Security Awareness and the depth of the security awareness training required for each stakeholder&middot; Determine the content of training and applicabilityRisk Management: The Risk Management activity is including risk identification, analysis, and control. In the frame of security operations phases, the following actions are needed:&middot; Review and refresh the Risk register&middot; Identify points of Risk Acceptance and ownership&middot; Identify paths of Risk Escalation&middot; Establish Risk Appetite&middot; Identify, Analyze &amp; DocumentThe improvements and modernization will provide benefit by: &middot; Providing guidelines for governance security and privacy&middot; Provide a mapping between client controls and industry standards&middot; Ensure that an organization's security policy continues to meet the changing and evolving needs of the underlying business.&middot; Maintain on-going situational awareness of the security state of an organization's network, information systems, and the environments in which those systems operate.Privacy : Extended knowledge with regulatory contexts such as GDPR, HIPAA, FFIEC, PCI, CJIS, etc. and mapping services with respect to protecting the information (integrity, confidentiality and availability) in accordance with these frameworks and with the policies enforced within the TASMU ecosystem (i.e. Information Classification Policy).GDPR knowledge provides a complete approach to compliance, ensuring smooth adoption, and minimizing any future breach risk. Services are broad in scope and cover everything from the initial impact assessment to guidance in the appointment of a Data Protection Officer.The Privacy related activities shall be conducted in agreement with incident management and response activities to be able to identify unauthorized presence before data leaks, apply protective measures and in the worst case, identify and retrieve the data leaked (DLP related controls).SKILLS &amp; ABILITIES&middot; Experience Excellent interpersonal skills&middot; Excellent communication and presentation skills&middot; Customer oriented&middot; Relevant technology skills.&middot; Relevant product and solution skillsIf you are interested and ready to proceed, kindly share your CV in Word format along with the following details:Name:Nationality:Total Experience:Relevant Experience:Current Location:Visa Status:Current Salary:Expected Salary:Notice Period:About Proztec: Proz Technologies (PROZTEC) is a leading ICT specialist firm based in Doha, Qatar (a tax-free country) with over 300 employees. We look forward to the possibility of welcoming you to our growing team.Thanks &amp; regards, Syeda Humera Recruitment Consultant Proz Technologies M: 974-70955929 P: 974-4442-0050 Ext: 109 www.proztec.comJob Type: PermanentPay: QAR10,000.00 - QAR15,000.00 per month

Compliance officer

SmartChoice International GCC

<div>
 
 
 Country Manager &ndash; Qatar &amp; Kuwait (Global Cybersecurity Client)
 
 
 
 Qatar
 
 
 
 
 
 I am currently partnered with a global cybersecurity client who is looking for a driven and strategic Country Manager to grow their presence across Qatar &amp; Kuwait. In this position you will focus on building and nurturing enterprise accounts, pursuing new business opportunities, and representing a leading cybersecurity portfolio to prospective clients.
 
 
 
 
 
 
 This role offers the chance to make a real impact in the fast-evolving cybersecurity industry.
 
 
 
 
 
 
 
 Responsibilities:
 
 
 <ul>
 <li>
 Identify and acquire new enterprise customers across Saudi &amp; Bahrain.
 </li>
 <li>
 Understand the cybersecurity product portfolio in depth to create compelling, differentiated solutions.
 </li>
 <li>
 Stay up-to-date with trends and developments in the cybersecurity sector.
 </li>
 <li>
 Forecast sales and report on progress monthly using CRM systems.
 </li>
 <li>
 Monitor customer invoices and ensure timely payments.
 </li>
 <li>
 Support marketing campaigns and industry events to drive revenue growth.
 </li>
 <li>
 Develop and implement sales plans using approved methodologies.
 </li>
 <li>
 Follow established sales processes and procedures consistently.
 </li>
 <li>
 Lead tender processes for prospective client procurement opportunities.
 </li>
 <li>
 Build and maintain strong relationships with peers, executives, and cross-functional teams.
 </li>
 </ul>
 
 
 
 
 
 Requirements:
 
 
 <ul>
 <li>
 
 You must have experience selling cybersecurity services or solutions for this position as well as strong connections across Qatar &amp; Kuwait B2C &amp; B2G.
 
 </li>
 <li>
 
 Arabic speaker.
 
 </li>
 <li>
 Strong understanding of enterprise sales cycles and account management.
 </li>
 <li>
 Ability to build strong client relationships and work collaboratively across teams.
 </li>
 </ul>
 
 
</div>

Country Manager - Cybersecurity

SPIE

<div><h2 class="jobSectionHeader">Job Description</h2><h3 class="jobSectionHeader">
Job title/position</h3>
AUTOMATION ENGINEER M/F 
<h3 class="jobSectionHeader">
Type of Contract</h3>
Fixed-term-contract 
<h3 class="jobSectionHeader">
Nature of contract</h3>
Full time 
<h3 class="jobSectionHeader">
Contract length</h3>
5 years 
<h3 class="jobSectionHeader">
Your mission</h3>
We currently have an opportunity within SPIE Global Services Energy Middle East LLC Doha, Qatar for a :<div>
AUTOMATION ENGINEER 
 
<ul><li>Carry out routine, corrective, and shutdown maintenance tasks in various Automation systems.</li><li>Carry out Automation Project Engineering and commissioning activities in Automation Systems.</li><li>Jobs in this level have prime responsibility to ensure that QAFCO&rsquo;s Safety and Automation Systems (SAS) are maintained in an efficient and economical way, to improve the safety, quality, quantity, and environmental aspects of production.</li><li>They must also ensure that all activities are carried out in compliance with QAFCO&rsquo;s Management Systems and aligned with QAFCO&rsquo;S Strategy.</li></ul> 

Responsabilities 
 
<ul><li>Initiate and gain approval for work permits to facilitate the execution of assigned tasks in compliance with QAFCO safety requirements.</li><li>Conduct toolbox meeting to discuss scheduled work activities and ensure correct tools and safety equipment are available prior to commencement of work.</li><li>Carry out the assigned day-to-day routine and non-routine maintenance jobs in the Automation systems installed in QAFCO.</li><li>Ensure that the work is completed on time, meeting QAFCO quality standards.</li><li>Carry out ICS computer maintenance including Antivirus and Microsoft Security Patch update, operating system configurations, basic troubleshooting of hardware/software issues.</li><li>Ensure Automation assets are maintained in compliance with the QAFCO cyber security requirements.</li><li>Support the installation, testing and Commissioning activities of ICS projects / upgrades.</li><li>Ensure good housekeeping to secure the cleanliness of the workplace.</li><li>Comply with QAFCO Life Saving Rules as per &ldquo;PSa-001 Life Saving Rule&rdquo; Document.</li><li>Participate in the call duty to provide maintenance support outside working hours.</li><li>Support the team to achieve the section/department KPIs.</li><li>Comply with all relevant procedures of QAFCO Integrated Management System comprising of Occupational Health and Safety, Quality, Environment, Responsible Care, IFA Product Stewardship &amp; energy Management System</li></ul> 

Key accountabilities 
<ul><li>Maintenance of Distributed control system, Safety Instrumented System, Compressor control system:</li><li>Maintain the Automation Systems to ensure the highest uptime and MTBF.</li><li>Establish and implement various maintenance schedules for the automation systems as recommended by OEM.</li><li>Supervise the work of staff for conformity, good engineering practices, international standards, functional safety, and Cyber Security compliance.</li></ul> 

Project execution 
- Execute and support various Automation Projects, prepare cost proposal and coordinate - engineering 
tasks, planning, procurement, manpower hiring, erection &amp; commissioning. 
<ul><li>Work closely with all stake holders and vendor representatives, conduct necessary project meetings</li></ul>
and acceptance tests. 
<ul><li>Follow company procedures for change management.</li></ul></div><h3 class="jobSectionHeader"> 
Your profile</h3>
Bachelor&rsquo;s Engineering degree in in Instrumentation / Electronics discipline (12+4 years) Minimum 10 years of maintenance experience in Industrial Control Systems in Petrochemical or Fertilizer industries. 
 
Hands-on Maintenance and Troubleshooting experience of industrial automation 
system such as DCS/ESD Control systems, Turbo Machinery Control and Protection Systems, Cyber Security guidelines and networking etc.
You are fluent in English with both written and verbal communication
You will have good interpersonal and organizational skills, as well as, a good level of computer literacy and be proficient in Microsoft Office.<h2 class="jobSectionHeader">
Candidate criteria</h2><h3 class="jobSectionHeader">
Desired level of study</h3>
E-Bachelor or equivalent 
<h3 class="jobSectionHeader">
Minimum experience</h3>
6 years or more 
<h3 class="jobSectionHeader">
Working language(s)</h3>
Engels (C - Vloeiend) 
<h2 class="jobSectionHeader">
General informations</h2><h3 class="jobSectionHeader">
Entity</h3><h3 class="jobSectionHeader">
Reference</h3>
2026-42134</div>

AUTOMATION ENGINEER M/F

COZMALABS

We are seeking a highly skilled and motivated Cyber Security Architect with strong system, on prem and Cloud Security expertise to oversee and enhance the organization&rsquo;s internal security architecture, controls, and policies while actively contributing to external security initiatives and projects.This role combines strategic architecture leadership, hands-on implementation, security research, operations oversight, and cloud security engineering, with a strong focus on Microsoft environments such as Microsoft 365, Microsoft azure , and OS security.The ideal candidate will possess deep expertise in enterprise security architecture, domain security, on-prem and hybrid infrastructure protection, cloud-native security controls, and DevSecOps integration.Experience Requirements<ul><li>Minimum 7+ years in system and Cloud Security role.</li><li>Proven experience in enterprise security architecture (on-prem + cloud)</li><li>Experience in security research, security operations, and security assurance</li><li>Experience in setting and documenting security processes and procedures in compliance with Qatar NCSA guidelines and security best practices.</li><li>Experience in operating system and infrastructure hardening.</li></ul>Key Responsibilities<ul><li>Design, implement, and maintain enterprise-wide security architecture for the company internal security, user devices, cloud, and hybrid environments.</li><li>Develop and enforce security policies, standards, and procedures.</li><li>Lead security risk assessments and define mitigation strategies.</li><li>Align security controls with business objectives and regulatory requirements.</li><li>Oversee internal security governance and compliance frameworks (ISO 27001, NIST, CIS).</li><li>Architect and secure Azure cloud environments (IaaS, PaaS, SaaS).</li><li>Implement cloud-native and third-party security controls.</li><li>Conduct detailed security assessments of cloud services to ensure compliance with internal policies and industry frameworks.</li><li>Identify and remediate misconfigurations using automated scanning and manual inspection.</li><li>Implement secure cloud architecture patterns and service integrations.</li><li>Contribute to threat modeling and cloud risk assessments.</li><li>Ensure secure hybrid integration between on-prem and Azure environments.</li><li>Secure Active Directory and domain environments.</li><li>Implement GPO hardening and identity security controls.</li><li>Manage IAM, RBAC, MFA, and privileged access strategies.</li><li>Harden Windows/Linux servers and enterprise endpoints.</li><li>Oversee firewall configurations, IDS/IPS, VPN security, and segmentation.</li><li>Implement encryption and data protection strategies.</li><li>Perform vulnerability assessments and coordinate penetration testing.</li><li>Develop scripts and automation tools (PowerShell, Python, Bash) to enhance monitoring and compliance validation.</li><li>Integrate security controls within CI/CD pipelines (DevSecOps practices).</li><li>Monitor emerging threats, tools, and vulnerabilities.</li><li>Evaluate security technologies and recommend improvements.</li><li>Contribute to threat modeling exercises.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li><li>Conduct risk assessments and compliance audits.</li><li>Ensure adherence to CIS Benchmarks, NIST, ISO 27001.</li><li>Develop remediation guidance and contribute to policy development.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li></ul>Required Technical Expertise<ul><li>Deep technical understanding and hands on of:</li></ul>Cloud &amp; Security Platforms<ul><li>Cloud security.</li><li>Data protection strategies</li><li>Zero Trust Architecture</li></ul>Infrastructure &amp; Systems Security<ul><li>Active Directory and Microsoft 365 hardening</li><li>User devices security</li><li>Domain security best practices</li><li>Endpoint security solutions</li><li>Hybrid identity solutions</li></ul>DevSecOps &amp; Automation<ul><li>CI/CD security integration</li><li>Secure coding awareness</li><li>Security automation scripting</li></ul>Certifications (Required / Strongly Preferred)<ul><li>CISSP &ndash; Certified Information Systems Security Professional</li><li>CCSP &ndash; Certified Cloud Security Professional</li><li>CISM &ndash; Certified Information Security Manager</li><li>Microsoft Azure Security Engineer Associate (AZ-500)</li><li>CompTIA Security+ (Foundational)</li></ul>EducationBachelor&rsquo;s degree in Cyber Security, Computer Science, Information Systems, or related field (Master&rsquo;s preferred).Job Type: Full-time

Cyber Security Architect

Explore 339+ Cyber security consultant in Doha this March. Find roles across top companies and apply now to boost your career.