office manager

systems administrator

operations manager

senior cybersecurity engineer Jobs in Doha

senior cybersecurity engineer

client services manager

cyber security manager

KPMG in Qatar

<div>
 
 
 About KPMG Qatar
 
 
 
 KPMG has had a presence in Qatar for nearly 47 years. We opened for business in Qatar in 1977 and are now one of the largest and most prestigious professional services firms in the country.
 
 
 KPMG in Qatar employs over 350 professional staff and partners. We recruit the best and brightest from around the world and currently employ 28 nationalities. For our clients, this means we provide Audit, Tax and Advisory services locally, drawing on the latest thinking and best practice from around the world.
 
 
 
 
 
 
 Business Unit Overview
 
 
 
 KPMG's Advisory practice is one of the largest Advisory businesses worldwide and the major growth area for our organization. Our services are focused on Finance Function, and we work with clients in identifying and tackling their challenges in Growth, Governance and Performance. Our Advisory teams support businesses as they restructure and expand, whether organically or by acquisition. We help them to become more efficient and provide support as they adapt to the challenges posed by a rapidly changing business environment
 
 
 
 
 
 
 Role Overview
 
 
 
 In this role, you will lead and deliver cybersecurity consulting projects focused on Governance, Risk, and Compliance (GRC), cybersecurity transformation, and specialized domains such as Incident Response, Drills, and Target Operating Model (TOM) development for government and public sector entities. As a Cybersecurity Consulting Manager, you will be responsible for developing strategic relationships, winning large-scale engagements, and delivering national-level initiatives aimed at enhancing digital security, organizational cyber resilience, and secure service delivery transformation across Qatar&rsquo;s public sector.
 
 
 
 
 
 
 Primary Job Responsibilities &amp; Accountabilities:
 
 
 
 &bull; Identify and assess client cybersecurity needs and challenges within government and public sector organizations.
 
 
 &bull; Develop, win, and manage complex cybersecurity engagements, including target operating model design, IoT/OT security, risk transformation, and cyber maturity uplift projects.
 
 
 &bull; Oversee multidisciplinary project teams to ensure on-time, high-quality delivery and client satisfaction.
 
 
 &bull; Develop and maintain a strong pipeline of cybersecurity opportunities, preparing and presenting proposals to drive growth in the public sector consulting practice.
 
 
 &bull; Build and sustain strong client relationships, acting as a trusted advisor to senior stakeholders within ministries and government agencies.
 
 
 &bull; Stay informed about cybersecurity trends, evolving regulations, and government digital transformation programs in Qatar, leveraging local and international best practices.
 
 
 &bull; Utilize KPMG-specific accelerators and methodologies to enhance client outcomes and ensure consistency across engagements.
 
 
 &bull; Mentor and guide junior consultants, fostering a culture of excellence, collaboration, and continuous learning.
 
 
 &bull; Contribute to the development of thought leadership, insights, and knowledge-sharing initiatives within 2 the cybersecurity consulting practice.
 
 
 
 
 
 
 Qualification and Experience
 
 
 
 &bull; 12+ years of relevant cybersecurity experience, including at least 4 years in consulting within the GCC (Qatar experience strongly preferred).
 
 
 &bull; Holding at least two relevant certifications such as ISO 27001, ISO 31000, CISSP, CISM, ISA-62443 Specialist, GICSP, CRISC, CCSP, PMP, or other equivalent credentials.
 
 
 &bull; Demonstrated experience developing and winning cybersecurity consulting proposals for government or public sector clients.
 
 
 &bull; Strong understanding of Qatar&rsquo;s regulatory environment and established professional network within the government sector (highly advantageous).
 
 
 &bull; Proven ability to lead large-scale public sector projects in areas such as:
 
 
 - Cybersecurity policy and framework development (Risk, Incident, Crisis, etc.)
 
 
 - Formulation and implementation of Cybersecurity Target Operating Models (TOM)
 
 
 - Cybersecurity Governance, Risk, and Compliance (GRC)
 
 
 - Cybersecurity transformation for e-Government services
 
 
 - Critical National Infrastructure (CNI), OT, and IoT security
 
 
 - Table-top exercises and simulation drills
 
 
 - Familiarity with Qatar&rsquo;s cybersecurity regulatory frameworks (QCSF, NIA, NIMF, PDPPL, etc.).
 
 
 - Excellent written and verbal communication skills in English and Arabic.
 
 
 - Bachelor&rsquo;s degree in a relevant field (master&rsquo;s degree preferred).
 
 
 
 
 
 
 Preferred Skills
 
 
 
 &bull; Experience working directly with Qatar&rsquo;s government ministries, agencies, or other public sector organizations.
 
 
 &bull; Ability to lead and coordinate multidisciplinary teams across cybersecurity and digital transformation domains.
 
 
 &bull; Strong analytical, problem-solving, and project management skills.
 
 
 &bull; Experience in authoring or contributing to cybersecurity thought leadership papers or sector insights.
 
</div>

Cyber Security Manager

Sygmetiv Business Solutions

Led comprehensive cybersecurity initiatives and governance efforts across the organization. Develop and implement comprehensive Information Security Strategy aligned with business goals. Conduct and coordinate risk assessments, penetration tests (PT), vulnerability assessments (VA), fraud investigations, and Risk and Control Self-Assessment (RCSA) processes. Stay informed on emerging threats, vulnerabilities, and security technologies, delivering actionable insights and recommendations. Participate in security audits, assessments, and compliance reviews, ensuring adherence to regulatory requirements and responding to security-related inquiries from Sr. Management/Board and regulatory authorities.<ul><li>Applied expertise in security frameworks, ITS and standards, such as NIST CSF, CIS, NCA ECC, SAMA SCF, ISO 27001, along with regulatory compliance requirements like Regional Data Protection Laws, PDPL. GDPR. AML and PCI DSS.</li><li>Applied expertise in security frameworks, ITS and standards, such as NIST CSF, CIS, NCA ECC, SAMA SCF, ISO 27001, along with regulatory compliance requirements like Regional Data Protection Laws, PDPL, GDPR, AML and PCI DSS.</li><li>Analysed security events and incidents,coordinated investigations, and provided incident response and remediation support.</li><li>Ensured compliance with regulatorystandards, including Central Banks. (CBB, SAMA, CBUAE, CBJ, CBJ, BDL etc.)</li><li>Successfully maintained PCI DSS complianceand certification of Amex while enhancing security protocols to mitigate emerging threats and vulnerabilities.</li><li>Managed cross-functional teams to ensurecompliance with regulatory standards. Perform risk assessments and gap analysis.</li><li>Define and implement security controls,monitor risks and create mitigation plans</li><li>Manage third-party/vendor risks. Track and report security incidents (from compliance side)</li></ul>Experience:<ul><li>GRC Cyber Security Manager: 10 years (Preferred)</li></ul>Language:<ul><li>Arabic, English (Preferred)</li></ul>Work Location: In person

GRC Cyber Security Manager

QAFCO (Qatar Fertiliser Company)

<div>
 
 Job Summary
 
 
 
 The Senior Program Management Expert plays a crucial role in executing the company&rsquo;s risk and cyber security initiatives and maintaining the overall program. This role ensures the effective management of risk and cyber security strategy implementation, and portfolio oversight, providing comprehensive reporting to support the company&rsquo;s risk and cyber security objectives and regulatory compliance.
 
 
 
 Key Accountabilities
 
 
 
 <ul>
 <li>
 Manage and coordinate sourcing activities for risk and cyber security tools, solutions, and services to ensure alignment with the company&rsquo;s requirements.
 </li>
 <li>
 Oversee budget planning and tracking for risk and cyber security initiatives, for the goal of optimizing resource allocation and cost control.
 </li>
 <li>
 Track and manage the risk and cybersecurity maturity program, continuously identifying areas for improvement and proposing strategic initiatives.
 </li>
 <li>
 Coordinate the implementation of risk and cyber security initiatives across all organizational units with the goal of achieving seamless system integration and architecture alignment.
 </li>
 <li>
 Develop, maintain, and deliver comprehensive reports and dashboards to leadership to support decision-making and demonstrate value realization.
 </li>
 <li>
 Lead cross-functional teams to execute risk and cyber security projects from initiation to closure, ensuring alignment with strategic business objectives.
 </li>
 <li>
 Create and maintain project documentation, including project plans, schedules, risk registers, and status reports.
 </li>
 <li>
 Facilitate regular meetings with key internal and external stakeholders to provide updates, address challenges, and escalate risks as necessary.
 </li>
 <li>
 Build and maintain strong relationships with vendors, service providers, and key internal stakeholders to ensure collaborative risk and cyber security initiatives.
 </li>
 <li>
 Support vendor selection and management processes for risk and cybersecurity-related procurements.
 </li>
 <li>
 Support the process of vendor performance management.
 
 
 </li>
 </ul>
 
 Desired Candidate Profile
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s Degree in relevant discipline.
 </li>
 <li>
 Minimum of 8 years direct and relevant experience.
 </li>
 <li>
 In depth knowledge of risk and cyber security frameworks, standards and best practices (e.g., ITIL, COBIT, ISO/IEC 2700x, IEC/62443, ISO 31000, COSO).
 </li>
 <li>
 Credentials: Professional certifications PMP required, CISSP, CISM, or equivalent are preferred.
 </li>
 </ul>
</div>

Sr. Specialist, Cybersecurity & Risk Program

COZMALABS

We are seeking a highly skilled and motivated Cyber Security Architect with strong system, on prem and Cloud Security expertise to oversee and enhance the organization&rsquo;s internal security architecture, controls, and policies while actively contributing to external security initiatives and projects.This role combines strategic architecture leadership, hands-on implementation, security research, operations oversight, and cloud security engineering, with a strong focus on Microsoft environments such as Microsoft 365, Microsoft azure , and OS security.The ideal candidate will possess deep expertise in enterprise security architecture, domain security, on-prem and hybrid infrastructure protection, cloud-native security controls, and DevSecOps integration.Experience Requirements<ul><li>Minimum 7+ years in system and Cloud Security role.</li><li>Proven experience in enterprise security architecture (on-prem + cloud)</li><li>Experience in security research, security operations, and security assurance</li><li>Experience in setting and documenting security processes and procedures in compliance with Qatar NCSA guidelines and security best practices.</li><li>Experience in operating system and infrastructure hardening.</li></ul>Key Responsibilities<ul><li>Design, implement, and maintain enterprise-wide security architecture for the company internal security, user devices, cloud, and hybrid environments.</li><li>Develop and enforce security policies, standards, and procedures.</li><li>Lead security risk assessments and define mitigation strategies.</li><li>Align security controls with business objectives and regulatory requirements.</li><li>Oversee internal security governance and compliance frameworks (ISO 27001, NIST, CIS).</li><li>Architect and secure Azure cloud environments (IaaS, PaaS, SaaS).</li><li>Implement cloud-native and third-party security controls.</li><li>Conduct detailed security assessments of cloud services to ensure compliance with internal policies and industry frameworks.</li><li>Identify and remediate misconfigurations using automated scanning and manual inspection.</li><li>Implement secure cloud architecture patterns and service integrations.</li><li>Contribute to threat modeling and cloud risk assessments.</li><li>Ensure secure hybrid integration between on-prem and Azure environments.</li><li>Secure Active Directory and domain environments.</li><li>Implement GPO hardening and identity security controls.</li><li>Manage IAM, RBAC, MFA, and privileged access strategies.</li><li>Harden Windows/Linux servers and enterprise endpoints.</li><li>Oversee firewall configurations, IDS/IPS, VPN security, and segmentation.</li><li>Implement encryption and data protection strategies.</li><li>Perform vulnerability assessments and coordinate penetration testing.</li><li>Develop scripts and automation tools (PowerShell, Python, Bash) to enhance monitoring and compliance validation.</li><li>Integrate security controls within CI/CD pipelines (DevSecOps practices).</li><li>Monitor emerging threats, tools, and vulnerabilities.</li><li>Evaluate security technologies and recommend improvements.</li><li>Contribute to threat modeling exercises.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li><li>Conduct risk assessments and compliance audits.</li><li>Ensure adherence to CIS Benchmarks, NIST, ISO 27001.</li><li>Develop remediation guidance and contribute to policy development.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li></ul>Required Technical Expertise<ul><li>Deep technical understanding and hands on of:</li></ul>Cloud &amp; Security Platforms<ul><li>Cloud security.</li><li>Data protection strategies</li><li>Zero Trust Architecture</li></ul>Infrastructure &amp; Systems Security<ul><li>Active Directory and Microsoft 365 hardening</li><li>User devices security</li><li>Domain security best practices</li><li>Endpoint security solutions</li><li>Hybrid identity solutions</li></ul>DevSecOps &amp; Automation<ul><li>CI/CD security integration</li><li>Secure coding awareness</li><li>Security automation scripting</li></ul>Certifications (Required / Strongly Preferred)<ul><li>CISSP &ndash; Certified Information Systems Security Professional</li><li>CCSP &ndash; Certified Cloud Security Professional</li><li>CISM &ndash; Certified Information Security Manager</li><li>Microsoft Azure Security Engineer Associate (AZ-500)</li><li>CompTIA Security+ (Foundational)</li></ul>EducationBachelor&rsquo;s degree in Cyber Security, Computer Science, Information Systems, or related field (Master&rsquo;s preferred).Work Location: In person

Cybersecurity

Exotica IT Solutions Qatar

Cybersecurity Specialist / Manager Bin Mahmoud Area, Doha Municipality, Qatar Exotica IT Solutions QatarWhy This Role Is Worth Your AttentionLooking to level up your cybersecurity career in a fast-growing tech environment? Join a team where your expertise directly protects critical systems, drives innovation, and shapes security strategy. This is your chance to take ownership, grow your leadership impact, and work with cutting-edge technologies&mdash;while enjoying a competitive compensation package and strong career progression.Compensation &amp; Benefits<ul><li>Competitive salary (based on experience and certifications)</li><li>Performance-based bonuses</li><li>Health insurance coverage</li><li>Paid annual leave &amp; public holidays</li><li>Professional development &amp; certification support</li><li>Career growth opportunities into senior leadership roles</li><li>Supportive, collaborative work environment</li></ul>Work Schedule<ul><li>Full-time position</li><li>Standard business hours with flexibility when needed</li><li>Occasional on-call support for critical incidents</li></ul>Key Responsibilities<ul><li>Monitor, detect, and respond to security incidents and threats</li><li>Manage and improve security infrastructure (firewalls, SIEM, IDS/IPS)</li><li>Conduct vulnerability assessments and penetration testing</li><li>Develop and enforce cybersecurity policies and procedures</li><li>Lead incident response and forensic investigations</li><li>Ensure compliance with industry standards and regulations</li><li>Collaborate with IT teams to secure networks, systems, and applications</li><li>Provide security awareness training to internal teams</li><li>Evaluate and implement new security tools and technologies</li></ul>Most In-Demand Skills<ul><li>Network security &amp; threat analysis</li><li>Security Information and Event Management (SIEM) tools</li><li>Risk assessment &amp; vulnerability management</li><li>Incident response &amp; digital forensics</li><li>Cloud security (AWS, Azure, or similar platforms)</li><li>Knowledge of compliance frameworks (ISO 27001, NIST, etc.)</li><li>Scripting or automation (Python, PowerShell, etc.)</li><li>Strong analytical and problem-solving skills</li><li>Leadership and team coordination (for managerial level)</li></ul>What We&rsquo;re Looking For<ul><li>Experience in cybersecurity, information security, or related field</li><li>Familiarity with security tools and best practices</li><li>Relevant certifications (e.g., CISSP, CEH, Security+) are a plus</li><li>Strong communication and collaboration skills</li><li>Ability to stay updated with evolving cyber threats</li></ul>About the CompanyExotica IT Solutions Qatar is a dynamic technology company delivering innovative IT and cybersecurity solutions across industries. Known for its client-focused approach and technical excellence, the company empowers businesses to operate securely and efficiently in a digital-first world.Why Work With Us?<ul><li>Work on impactful, real-world cybersecurity challenges</li><li>Be part of a growing, forward-thinking tech team</li><li>Gain exposure to the latest security technologies</li><li>Continuous learning and certification support</li><li>A culture that values innovation, collaboration, and growth</li></ul>الراتب المدفوع: QAR٩١٫٠٠&nbsp;لكل ساعةموقع العمل: بشكل شخصي

Cybersecurity Specialist/Manager

QNB Group

<div>
 
 About QNB
 
 
 
 Established in 1964 as the country&rsquo;s first Qatari-owned commercial bank, QNB Group has steadily grown to become the largest bank in the Middle East and Africa (MEA) region.
 
 
 QNB Group&rsquo;s presence through its subsidiaries and associate companies extends to more than 31 countries across three continents providing a comprehensive range of advanced products and services. The total number of employees is more than 28,000 serving up to 20 million customers operating through 1,000 locations, with an ATM network of 4,300 machines.
 
 
 QNB has maintained its position as one of the highest rated regional banks from leading credit rating agencies including Standard &amp; Poor&rsquo;s (A), Moody&rsquo;s (Aa3) and Fitch (A+). The Bank has also been the recipient of many awards from leading international specialised financial publications.
 
 
 Based on the Group&rsquo;s consistent strong financial performance and its expanding international presence, QNB currently ranks as the most valuable bank brand in the Middle East and Africa, according to Brand Finance Magazine.
 
 
 QNB Group has an active community support program and sponsors various social, educational and sporting events.
 
 
 
 Job Summary
 
 
 
 The incumbent will be responsible for the setup and management of the Cyber Security Strategy and Product management function in the Group Information Security (GIS) department. The incumbent will be a banking and finance technology thinker who constantly analyses the market for new technologies that would be best suited to support the Group&rsquo;s strategy
 
 
 Main Responsibilities
 
 
 <ul>
 <li>
 Shareholder &amp; Financial: - Participate in the development, execution and maintenance of the IT Security strategy aligned to the overall corporate strategy, group long term goals and assist in the prioritization process. - Assist in the overall and annual IT Security business planning with the view of achieving the Group&rsquo;s short term goals and submit periodic reviews and resolution. - Provide inputs to the Technology Key Risk indicators (KRIs) which shall be applicable across the Group to manage Group&rsquo;s exposure to IT related risks effectively. Lead IT market research and provide applicable suggestions to further the Group&rsquo;s strategy and develop cost / benefit analysis to alternative technologies and processes. - Focal Point from GIS in the preparation of the GIS budget to support Group&rsquo;s long and short term goals. - Responsible for coordinating all aspects of the GIS budget process including: review of service area business plans and key performance indicators; annual capital budget and forecasts that include available and appropriate funding sources along with required project justification analysis; operating budget and forecast submissions that adhere to direction set by bank - Liaise with all Business Units Heads for preparing the yearly IT Business Plans, Prepare monthly and quarterly update on IT Business Plan. Monitor the Progress Status and raise issues / risks to GIS management. - Produce Availability Plans in line with QNB&rsquo;s business planning cycle; identifying Availability requirements early enough to take account of procurement lead times. - Create implement and report on Key Performance Indicators (KPIs) for performance monitoring purposes for the GIS group and monitor their achievement on a regular basis. - Produce Capacity Plans in line with QNB&rsquo;s business planning cycle; identifying Capacity requirements early enough to take account of procurement lead times. - Document the need for any increase or reduction in hardware resources based on service level requirements and cost constraints - Implements KPI&rsquo;s and best practices for Cyber Security Strategy and Product Management. - Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank. - Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same. - Demonstrate clear understanding of the important factors behind the bank's financial &amp; non-financial performance.
 </li>
 <li>
 Customer (Internal &amp; External): - Build and maintain strong relationship with all other related departments, external entities and sections within GIS. - Defining &amp; implementing Service Level Agreements (SLAs) and Operation Level Agreements (OLAs) between GIS, IT Group, other Business Units and International Branches. - Monitors capital and operating budget performance of GIS to identify unfavourable budget variances and recommend mitigating actions or additional approvals required to minimize impact to yearend surplus/deficit. - Seek to continually exceed internal and external customer expectations through introduction of breakthrough IT Security technologies and processes aimed to improve the Group&rsquo;s products/services. - Produce regular management reports which include current usage of resources, trends and forecasts - Build and maintain a strong relationship with the Business Relationship Manager, technical teams within IT, finance team and external vendors of products and services - To assist customers in all their queries on Bank&rsquo;s product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group&rsquo;s objectives
 </li>
 <li>
 Internal (Processes, Products, Regulatory): - Review and identify areas for improvement in the process to deliver effective &amp; efficient GIS projects and services - Act as a BCP Coordinator for GIS, coordinate implementation of DR setup as per the defined strategy - Assist in recruiting, motivating and developing personnel to ensure the function is staffed with individuals of the required caliber and that there is adequate succession planning and provision for future demands. - Analyse and recommend new products and solutions for GIS and business users to ensure that the group is upto-date with the latest trends in technology. - Support the new technology&rsquo;s development process, and ensure that project deliverables are met according to specifications and timeframes. - Compile and present relevant MIS to the Group CISO on a periodic basis for the existing systems and compare the existing functionalities vis-&agrave;-vis the efficiencies to be gained from proposed technologies. - Assist in the overall recruitment of the individual resources in the areas concerned - Continuous Improvement: - Set examples by leading improvement initiatives through cross-functional teams ensuring successes. - Identify and encourage people to adopt practices better than the industry standard. - Continuously encourage and recognise the importance of thinking out-of-the-box within the team. - Encourage, solicit and reward innovative ideas even in day-to-day issues.
 </li>
 <li>
 Learning &amp; Knowledge: - Possess good knowledge and experience in COBIT and ITIL framework. - Detailed understanding of IT systems and secure architecture designs. - Good understanding of suitable solutions for configuration management, service desk, software library etc. - Identify areas for professional development for self and direct reports and take necessary actions - Hold meetings with direct reports and assess their performance. - Attend specific conferences in areas of financial services technology breakthroughs and innovations to adapt suitable ones to the bank&rsquo;s security architecture and product portfolio. - Possess a superior knowledge of the GIS structure, its products and related risks together with a good knowledge of operations and related controls. - Identify areas for professional development of self and direct reports and act to enhance professional development of self and others - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Hold meetings with staff and assess their performance and your teams overall performance on a regular basis. - Take decisive action to ensure speedy resolution of unresolved grievances or conflicts within the team members. - Identify development opportunities and activities for staff and facilitate/coach them to improve their effectives and prepare them to assume greater responsibilities.
 </li>
 <li>
 Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank.
 </li>
 <li>
 Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time. - Lead and develop the Cyber Security Strategy of the bank in line with the business strategy, regulatory requirement, best practices and ongoing cyber security challenges. - Benchmark and evaluate the performance of the technologies engineered and operated by the GIS Cyber Security Technologies &amp; Services teams to ensure that these are kept fine-tuned and updated with the latest technological developments.- Constantly scanning the market and competitors capabilities and bringing in technology proven in other markets and suggesting them across the group. - Keeping the CISO updated with latest developments in Cyber Security and raising any new cyber security risks to his attention. - Maintain the security architecture blueprints of the bank, liaising with the Enterprise IT architect and GITD Heads to develop and track the plans to achieve compliance. - Help to form the Information Security budget in collaboration with the Group Information Security Officer ensuring that systems under management are licensed and appropriately sized for the environment - Ensure that all the licenses and contracts are maintained and kept updated.
 
 
 </li>
 </ul>
 
 Education And Experience Requirements
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s/Master&rsquo;s Degree in Computer Science, Computer Engineering or any related subject.
 </li>
 <li>
 Experience in IT service management of systems Technical Design, Implementation, and Maintenance on wide variety of platform including the main banking platform.
 </li>
 <li>
 At least 15 year&rsquo;s experience in a major bank of which at least 5 years in bank in a managerial capacity in an IT Security engineering or architecture function.
 </li>
 <li>
 Training courses and certifications in application development, database administration, security, and management is a plus. Professional certifications, an ITIL foundation, TOGAF and COBIT is a must - Professional certification such as CISSP, CISM, CISA is preferred.
 
 
 </li>
 </ul>
 Note: you will be required to attach the following:
 
 
 <ul>
 <li>
 Resume/CV
 </li>
 <li>
 Copy of Passport or QID
 </li>
 <li>
 Copy of Education Certificate
 </li>
 <li>
 Copy of Birth Certificate
 </li>
 </ul>
</div>

QNB3667 - Senior Vice President Cyber Security Strategy and Product Management (Qatarization)

Qatar National Bank

<div>Job Summary 
The incumbent will be responsible for the setup and management of the Cyber Security Strategy and Product management function in the Group Information Security (GIS) department. The incumbent will be a banking and finance technology thinker who constantly analyses the market for new technologies that would be best suited to support the Group's strategy
Main Responsibilities 
A. Shareholder &amp; Financial: - Participate in the development, execution and maintenance of the IT Security strategy aligned to the overall corporate strategy, group long term goals and assist in the prioritization process. - Assist in the overall and annual IT Security business planning with the view of achieving the Group's short term goals and submit periodic reviews and resolution. - Provide inputs to the Technology Key Risk indicators (KRIs) which shall be applicable across the Group to manage Group's exposure to IT related risks effectively. Lead IT market research and provide applicable suggestions to further the Group's strategy and develop cost / benefit analysis to alternative technologies and processes. - Focal Point from GIS in the preparation of the GIS budget to support Group's long and short term goals. - Responsible for coordinating all aspects of the GIS budget process including: review of service area business plans and key performance indicators; annual capital budget and forecasts that include available and appropriate funding sources along with required project justification analysis; operating budget and forecast submissions that adhere to direction set by bank - Liaise with all Business Units Heads for preparing the yearly IT Business Plans, Prepare monthly and quarterly update on IT Business Plan. Monitor the Progress Status and raise issues / risks to GIS management. - Produce Availability Plans in line with QNB's business planning cycle; identifying Availability requirements early enough to take account of procurement lead times. - Create implement and report on Key Performance Indicators (KPIs) for performance monitoring purposes for the GIS group and monitor their achievement on a regular basis. - Produce Capacity Plans in line with QNB's business planning cycle; identifying Capacity requirements early enough to take account of procurement lead times. - Document the need for any increase or reduction in hardware resources based on service level requirements and cost constraints - Implements KPI's and best practices for Cyber Security Strategy and Product Management. - Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank. - Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same. - Demonstrate clear understanding of the important factors behind the bank's financial &amp; non-financial performance.
B. Customer (Internal &amp; External): - Build and maintain strong relationship with all other related departments, external entities and sections within GIS. - Defining &amp; implementing Service Level Agreements (SLAs) and Operation Level Agreements (OLAs) between GIS, IT Group, other Business Units and International Branches. - Monitors capital and operating budget performance of GIS to identify unfavourable budget variances and recommend mitigating actions or additional approvals required to minimize impact to yearend surplus/deficit. - Seek to continually exceed internal and external customer expectations through introduction of breakthrough IT Security technologies and processes aimed to improve the Group's products/services. - Produce regular management reports which include current usage of resources, trends and forecasts - Build and maintain a strong relationship with the Business Relationship Manager, technical teams within IT, finance team and external vendors of products and services - To assist customers in all their queries on Bank's product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group's objectives
C. Internal (Processes, Products, Regulatory): - Review and identify areas for improvement in the process to deliver effective &amp; efficient GIS projects and services - Act as a BCP Coordinator for GIS, coordinate implementation of DR setup as per the defined strategy - Assist in recruiting, motivating and developing personnel to ensure the function is staffed with individuals of the required caliber and that there is adequate succession planning and provision for future demands. - Analyse and recommend new products and solutions for GIS and business users to ensure that the group is upto-date with the latest trends in technology. - Support the new technology's development process, and ensure that project deliverables are met according to specifications and timeframes. - Compile and present relevant MIS to the Group CISO on a periodic basis for the existing systems and compare the existing functionalities vis-&agrave;-vis the efficiencies to be gained from proposed technologies. - Assist in the overall recruitment of the individual resources in the areas concerned - Continuous Improvement: - Set examples by leading improvement initiatives through cross-functional teams ensuring successes. - Identify and encourage people to adopt practices better than the industry standard. - Continuously encourage and recognise the importance of thinking out-of-the-box within the team. - Encourage, solicit and reward innovative ideas even in day-to-day issues.
D. Learning &amp; Knowledge: - Possess good knowledge and experience in COBIT and ITIL framework. - Detailed understanding of IT systems and secure architecture designs. - Good understanding of suitable solutions for configuration management, service desk, software library etc. - Identify areas for professional development for self and direct reports and take necessary actions - Hold meetings with direct reports and assess their performance. - Attend specific conferences in areas of financial services technology breakthroughs and innovations to adapt suitable ones to the bank's security architecture and product portfolio. - Possess a superior knowledge of the GIS structure, its products and related risks together with a good knowledge of operations and related controls. - Identify areas for professional development of self and direct reports and act to enhance professional development of self and others - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Hold meetings with staff and assess their performance and your teams overall performance on a regular basis. - Take decisive action to ensure speedy resolution of unresolved grievances or conflicts within the team members. - Identify development opportunities and activities for staff and facilitate/coach them to improve their effectives and prepare them to assume greater responsibilities.
E. Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank.
F. Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time. - Lead and develop the Cyber Security Strategy of the bank in line with the business strategy, regulatory requirement, best practices and ongoing cyber security challenges. - Benchmark and evaluate the performance of the technologies engineered and operated by the GIS Cyber Security Technologies &amp; Services teams to ensure that these are kept fine-tuned and updated with the latest technological developments.- Constantly scanning the market and competitors capabilities and bringing in technology proven in other markets and suggesting them across the group. - Keeping the CISO updated with latest developments in Cyber Security and raising any new cyber security risks to his attention. - Maintain the security architecture blueprints of the bank, liaising with the Enterprise IT architect and GITD Heads to develop and track the plans to achieve compliance. - Help to form the Information Security budget in collaboration with the Group Information Security Officer ensuring that systems under management are licensed and appropriately sized for the environment - Ensure that all the licenses and contracts are maintained and kept updated.
Education and Experience Requirements<ul><li> 
Bachelor's/Master's Degree in Computer Science, Computer Engineering or any related subject.
</li><li>Experience in IT service management of systems Technical Design, Implementation, and Maintenance on wide variety of platform including the main banking platform.
</li><li>At least 15 year's experience in a major bank of which at least 5 years in bank in a managerial capacity in an IT Security engineering or architecture function.
</li></ul>- Training courses and certifications in application development, database administration, security, and management is a plus. Professional certifications, an ITIL foundation, TOGAF and COBIT is a must - Professional certification such as CISSP, CISM, CISA is preferred.</div>

Senior Vice President Cyber Security Strategy and Product Management (Qatarization)

Explore 1023+ Cyber security manager in Doha this May. Find roles across top companies and apply now to boost your career.