finance manager

information management lead

qa/qc manager

accounting manager

construction manager

information security manager

malomatia

<div>
 
 Job Description
 
 
 
 We are seeking an IT Security Auditor responsible for developing audit plans based on IT and information security risk assessments, conducting internal audits, tracking the implementation of audit recommendations, and contributing to periodic reports on departmental performance and key issues.
 
 
 
 Responsibilities
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 Implement administrative policies and procedures and adhere to agency policies to ensure desired administrative outcomes.
 </li>
 <li>
 Review the policy manual and internal audit process procedures, compare them with best practices, and ensure they meet the agency&rsquo;s objectives.
 </li>
 <li>
 Develop the internal audit plan for information security based on risk assessment results.
 </li>
 <li>
 Conduct internal audits according to the approved audit plan, submit reports and recommendations to senior management, and follow up on their implementation.
 </li>
 <li>
 Evaluate and monitor the effectiveness of operations and compliance with the agency&rsquo;s internal policies, procedures, and controls in the area of IT and information security.
 </li>
 <li>
 Follow up on the implementation of recommendations and directives resulting from internal audits.
 </li>
 <li>
 Prepare periodic reports on the department's achievements and issues, provide suggestions for development, and submit them to the direct manager.
 </li>
 <li>
 Perform any other tasks assigned by the direct manager within the scope of job responsibilities.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 Educational Qualifications:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Information Technology, Information Security, Business Administration, or equivalent.
 </li>
 <li>
 Preferably certified as a Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM).
 
 
 </li>
 </ul>
 Professional Experience
 
 
 <ul>
 <li>
 Minimum of 5-7 years of professional experience in information security management in line with ISO 27001, ISO 9001, ISO 17065, and ISO 19011.
 
 
 </li>
 </ul>
 Behavioral Competencies
 
 
 <ul>
 <li>
 Intermediate level in: Leadership skills, Change management, Personnel management, Negotiation skills, Problem-solving ability, Result-oriented focus, Communication skills, Time management, Customer relationship management, Planning and organizational skills, Initiative, Team spirit.
 </li>
 <li>
 Language Skills Proficiency in English.
 
 
 </li>
 </ul>
 
 About Malomatia
 
 
 
 
 ABOUT US
 
 
 
 malomatia is a leading Qatar-based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end-to-end technology solutions that empower clients to achieve their strategic goals.
 
 
 
 Our mission
 
 
 
 Empowering Qatar&rsquo;s businesses and governments to leap into the digital future with agile, knowledge-driven solutions.
 
 
 
 Our vision
 
 
 
 To become Qatar&rsquo;s trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world-class tech ecosystem.
 
 
 
 Driving change that makes a real impact
 
 
 
 Since 2008, malomatia has been driving Qatar&rsquo;s digital transformation through innovative, ISO-certified IT solutions. With expertise across key public and private sectors, we empower the nation&rsquo;s vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar&rsquo;s sustainable future.
 
 
 
 About The Team
 
 
 
 Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high-value digital solutions tailored to the unique needs of our clients.
 
 
 Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation.
 
 
 Join us in shaping the future of technology in Qatar
</div>

Consultant - Information Security Auditor

ACK3 Solutions

Risk &amp; Security ManagerLocation: Doha, Qatar Company: ACK3 SolutionsAbout ACK3 SolutionsACK3 Solutions is a trusted provider of risk management, security consulting, and strategic advisory services. Our Doha operations are dedicated to safeguarding clients, assets, and operations through innovative solutions and world-class expertise.Role OverviewWe are seeking a highly skilled Risk &amp; Security Manager to lead security operations, manage risk assessments, and ensure compliance with international and local standards. This role requires strong leadership, analytical thinking, and the ability to design and implement effective risk mitigation strategies.Key Responsibilities<ul><li>Risk Assessment: Identify, evaluate, and mitigate risks across operations.</li><li>Security Strategy: Develop and implement comprehensive security policies and procedures.</li><li>Incident Management: Lead response efforts during emergencies and security breaches.</li><li>Compliance Oversight: Ensure adherence to local regulations, industry standards, and company policies.</li><li>Team Leadership: Manage and mentor security staff to achieve operational excellence.</li><li>Stakeholder Coordination: Collaborate with government agencies, clients, and internal teams.</li><li>Reporting: Prepare detailed reports on risk and security performance.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Security Management, Risk Management, or related field (Master&rsquo;s preferred).</li><li>8+ years of experience in risk and security management, with at least 3 years in a leadership role.</li><li>Strong knowledge of risk mitigation, crisis management, and compliance frameworks.</li><li>Excellent leadership, communication, and problem-solving skills.</li><li>Experience working in multinational organizations, ideally within the GCC region.</li></ul>Why Join Us?<ul><li>Be part of a global leader in risk and security consulting.</li><li>Lead operations in Doha&rsquo;s strategic business hub.</li><li>Competitive salary and benefits package.</li><li>Opportunity to shape security strategies and safeguard organizational success.</li></ul>Pay: Up to QAR35,000.00 per monthWork Location: In person

Risk & Security Manager

IRI Experts Doha

Job Title: Director of Information SecurityCompany: IRI Experts Doha Location: Barwa Village, Doha, Qatar Salary: QAR 46,500 per monthJob OverviewIRI Experts Doha is seeking a highly experienced and strategic Director of Information Security to lead and manage the organization&rsquo;s cybersecurity strategy. This role is ideal for a senior professional with expertise in information security, risk management, and governance.The Director of Information Security will be responsible for protecting organizational assets, ensuring compliance, and developing robust security frameworks.Key Responsibilities<ul><li>Develop and implement comprehensive information security strategies and policies.</li><li>Oversee cybersecurity operations, risk management, and compliance programs.</li><li>Monitor threats, vulnerabilities, and incident response processes.</li><li>Ensure data protection, system security, and regulatory compliance.</li><li>Lead security audits, assessments, and continuous improvement initiatives.</li><li>Collaborate with IT and business units to strengthen security posture.</li><li>Manage security teams and external vendors.</li><li>Provide strategic guidance to leadership on security risks and mitigation.</li><li>Stay updated on emerging cybersecurity threats and technologies.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Information Security, Computer Science, or related field.</li><li>Proven experience in cybersecurity leadership or information security roles.</li><li>Strong knowledge of security frameworks, risk management, and compliance standards.</li><li>Excellent analytical, leadership, and strategic thinking skills.</li><li>Strong communication and stakeholder management abilities.</li><li>Certifications such as CISSP, CISM, or equivalent are highly desirable.</li></ul>What We Offer<ul><li>Competitive salary of QAR 46,500 per month</li><li>Leadership role with critical organizational impact</li><li>Professional and collaborative work environment</li><li>Opportunities for growth and specialization</li></ul>IRI Experts Doha is an equal opportunity employer.نوع الوظيفة: دوام كاملالراتب المدفوع: QAR٤٦٬٥٠٠٫٠٠&nbsp;لكل شهرموقع العمل: بشكل شخصي

Director of Information Security

Qatar National Bank

<div></div><div><div><ul><li><div>Business Unit
</div><div>QNB - Qatar
</div></li><li><div>Division
</div><div>Not Applicable
</div></li><li><div>Department
</div><div>Not Applicable
</div></li><li><div>Location
</div><div>Doha, Qatar
</div></li><li><div>Closing Date
</div><div>31-Dec-2026
</div></li></ul></div><div><div><h5 class="jobSectionHeader">About QNB</h5>
Established in 1964 as the country&rsquo;s first Qatari-owned commercial bank, QNB Group has steadily grown to become the largest bank in the Middle East and Africa (MEA) region.
QNB Group&rsquo;s presence through its subsidiaries and associate companies extends to more than 31 countries across three continents providing a comprehensive range of advanced products and services. The total number of employees is more than 28,000 serving up to 20 million customers operating through 1,000 locations, with an ATM network of 4,300 machines.
QNB has maintained its position as one of the highest rated regional banks from leading credit rating agencies including Standard &amp; Poor&rsquo;s (A), Moody&rsquo;s (Aa3) and Fitch (A+). The Bank has also been the recipient of many awards from leading international specialised financial publications.
Based on the Group&rsquo;s consistent strong financial performance and its expanding international presence, QNB currently ranks as the most valuable bank brand in the Middle East and Africa, according to Brand Finance Magazine.
QNB Group has an active community support program and sponsors various social, educational and sporting events.
</div></div><div><div><div><h5 class="jobSectionHeader">Job Summary</h5>
</div><div>The incumbent will be responsible for the setup and management of the Cyber Security Strategy and Product management function in the Group Information Security (GIS) department. The incumbent will be a banking and finance technology thinker who constantly analyses the market for new technologies that would be best suited to support the Group&rsquo;s strategy
</div></div><div><div><h5 class="jobSectionHeader">Main Responsibilities</h5>
</div><div>A. Shareholder &amp; Financial: - Participate in the development, execution and maintenance of the IT Security strategy aligned to the overall corporate strategy, group long term goals and assist in the prioritization process. - Assist in the overall and annual IT Security business planning with the view of achieving the Group&rsquo;s short term goals and submit periodic reviews and resolution. - Provide inputs to the Technology Key Risk indicators (KRIs) which shall be applicable across the Group to manage Group&rsquo;s exposure to IT related risks effectively. Lead IT market research and provide applicable suggestions to further the Group&rsquo;s strategy and develop cost / benefit analysis to alternative technologies and processes. - Focal Point from GIS in the preparation of the GIS budget to support Group&rsquo;s long and short term goals. - Responsible for coordinating all aspects of the GIS budget process including: review of service area business plans and key performance indicators; annual capital budget and forecasts that include available and appropriate funding sources along with required project justification analysis; operating budget and forecast submissions that adhere to direction set by bank - Liaise with all Business Units Heads for preparing the yearly IT Business Plans, Prepare monthly and quarterly update on IT Business Plan. Monitor the Progress Status and raise issues / risks to GIS management. - Produce Availability Plans in line with QNB&rsquo;s business planning cycle; identifying Availability requirements early enough to take account of procurement lead times. - Create implement and report on Key Performance Indicators (KPIs) for performance monitoring purposes for the GIS group and monitor their achievement on a regular basis. - Produce Capacity Plans in line with QNB&rsquo;s business planning cycle; identifying Capacity requirements early enough to take account of procurement lead times. - Document the need for any increase or reduction in hardware resources based on service level requirements and cost constraints - Implements KPI&rsquo;s and best practices for Cyber Security Strategy and Product Management. - Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank. - Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same. - Demonstrate clear understanding of the important factors behind the bank's financial &amp; non-financial performance.
B. Customer (Internal &amp; External): - Build and maintain strong relationship with all other related departments, external entities and sections within GIS. - Defining &amp; implementing Service Level Agreements (SLAs) and Operation Level Agreements (OLAs) between GIS, IT Group, other Business Units and International Branches. - Monitors capital and operating budget performance of GIS to identify unfavourable budget variances and recommend mitigating actions or additional approvals required to minimize impact to yearend surplus/deficit. - Seek to continually exceed internal and external customer expectations through introduction of breakthrough IT Security technologies and processes aimed to improve the Group&rsquo;s products/services. - Produce regular management reports which include current usage of resources, trends and forecasts - Build and maintain a strong relationship with the Business Relationship Manager, technical teams within IT, finance team and external vendors of products and services - To assist customers in all their queries on Bank&rsquo;s product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group&rsquo;s objectives
C. Internal (Processes, Products, Regulatory): - Review and identify areas for improvement in the process to deliver effective &amp; efficient GIS projects and services - Act as a BCP Coordinator for GIS, coordinate implementation of DR setup as per the defined strategy - Assist in recruiting, motivating and developing personnel to ensure the function is staffed with individuals of the required caliber and that there is adequate succession planning and provision for future demands. - Analyse and recommend new products and solutions for GIS and business users to ensure that the group is up to-date with the latest trends in technology. - Support the new technology&rsquo;s development process, and ensure that project deliverables are met according to specifications and timeframes. - Compile and present relevant MIS to the Group CISO on a periodic basis for the existing systems and compare the existing functionalities vis-&agrave;-vis the efficiencies to be gained from proposed technologies. - Assist in the overall recruitment of the individual resources in the areas concerned - Continuous Improvement: - Set examples by leading improvement initiatives through cross-functional teams ensuring successes. - Identify and encourage people to adopt practices better than the industry standard. - Continuously encourage and recognise the importance of thinking out-of-the-box within the team. - Encourage, solicit and reward innovative ideas even in day-to-day issues.
D. Learning &amp; Knowledge: - Possess good knowledge and experience in COBIT and ITIL framework. - Detailed understanding of IT systems and secure architecture designs. - Good understanding of suitable solutions for configuration management, service desk, software library etc. - Identify areas for professional development for self and direct reports and take necessary actions - Hold meetings with direct reports and assess their performance. - Attend specific conferences in areas of financial services technology breakthroughs and innovations to adapt suitable ones to the bank&rsquo;s security architecture and product portfolio. - Possess a superior knowledge of the GIS structure, its products and related risks together with a good knowledge of operations and related controls. - Identify areas for professional development of self and direct reports and act to enhance professional development of self and others - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Hold meetings with staff and assess their performance and your teams overall performance on a regular basis. - Take decisive action to ensure speedy resolution of unresolved grievances or conflicts within the team members. - Identify development opportunities and activities for staff and facilitate/coach them to improve their effectives and prepare them to assume greater responsibilities.
E. Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank.
F. Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time. - Lead and develop the Cyber Security Strategy of the bank in line with the business strategy, regulatory requirement, best practices and ongoing cyber security challenges. - Benchmark and evaluate the performance of the technologies engineered and operated by the GIS Cyber Security Technologies &amp; Services teams to ensure that these are kept fine-tuned and updated with the latest technological developments.- Constantly scanning the market and competitors capabilities and bringing in technology proven in other markets and suggesting them across the group. - Keeping the CISO updated with latest developments in Cyber Security and raising any new cyber security risks to his attention. - Maintain the security architecture blueprints of the bank, liaising with the Enterprise IT architect and GITD Heads to develop and track the plans to achieve compliance. - Help to form the Information Security budget in collaboration with the Group Information Security Officer ensuring that systems under management are licensed and appropriately sized for the environment - Ensure that all the licenses and contracts are maintained and kept updated.
</div></div><div><div><h5 class="jobSectionHeader">Education and Experience Requirements</h5>
</div><div><ul><li>Bachelor&rsquo;s/Master&rsquo;s Degree in Computer Science, Computer Engineering or any related subject.
</li><li>Experience in IT service management of systems Technical Design, Implementation, and Maintenance on wide variety of platform including the main banking platform.
</li><li>At least 15 year&rsquo;s experience in a major bank of which at least 5 years in bank in a managerial capacity in an IT Security engineering or architecture function.
</li></ul>- Training courses and certifications in application development, database administration, security, and management is a plus. Professional certifications, an ITIL foundation, TOGAF and COBIT is a must - Professional certification such as CISSP, CISM, CISA is preferred.
</div></div><div><div><h5 class="jobSectionHeader">Note: you will be required to attach the following:</h5>
</div><div><div><ul><li>Resume/CV</li></ul>
<ul><li>Copy of Passport or QID
</li></ul><ul><li>Copy of Education Certificate
</li></ul><ul><li>Copy of Birth Certificate</li></ul></div></div></div></div></div><div></div>

Senior Vice President Cyber Security Strategy and Product Management

<div>
 
 Job Description
 
 
 
 
 Key Outcomes (What success looks like)
 
 
 
 <ul>
 <li>
 Corporate GRC requests are triaged, tracked, delivered, and reported with clear SLAs and priorities.
 </li>
 <li>
 Policies/standards/procedures are usable, enforced, and updated&mdash;not shelfware.
 </li>
 <li>
 Risk and compliance reporting is accurate, timely, and defensible for leadership and auditors.
 </li>
 <li>
 Client deliverables are clean, structured, and aligned to agreed frameworks (e.g., QCSF/NIA, ISO 27001, NIST).
 </li>
 <li>
 Stakeholders respect the function because you add clarity and control, not bureaucracy.
 
 
 </li>
 </ul>
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Corporate GRC Operations (High-Volume Request Handling)
 </li>
 <li>
 Act as the single point of accountability for BU GRC operations: intake, triage, prioritization, execution, and closure.
 </li>
 <li>
 Build and run a GRC request pipeline (ticketing/backlog/kanban), including SLAs, dependencies, and status reporting.
 </li>
 <li>
 Challenge vague requests: convert noise into clear scope, deliverables, owners, and deadlines.
 </li>
 <li>
 Enforce governance through decisions and escalation.
 </li>
 <li>
 Governance (Policies, Standards, Internal Controls)
 </li>
 <li>
 Develop and maintain BU security governance artifacts: policies, standards, procedures, baselines, templates.
 </li>
 <li>
 Ensure governance aligns with corporate requirements and applicable regulations, with traceability to controls/frameworks.
 </li>
 <li>
 Drive policy adoption via implementation guidance, control owners, and periodic attestations.
 </li>
 <li>
 Produce executive-friendly outputs: dashboards, governance reports, action trackers.
 </li>
 <li>
 Risk Management (Practical, Not Theoretical)
 </li>
 <li>
 Own the BU risk register: identification, assessment, scoring, treatment plans, and acceptance workflows.
 </li>
 <li>
 Run risk workshops with IT/Operations/Projects to capture real risks and convert them into actions.
 </li>
 <li>
 Manage risk exceptions/waivers (justification, compensating controls, approval, expiry, re-validation).
 </li>
 <li>
 Track remediation progress, validate evidence, and report risk movement over time.
 </li>
 <li>
 Compliance &amp; Audit Execution (Evidence-Driven)
 </li>
 <li>
 Lead BU readiness for internal/external audits: evidence collection, control testing coordination, gap closure plans.
 </li>
 <li>
 Maintain compliance mapping for relevant frameworks (e.g., ISO 27001/27002, NIST CSF/800-53, CIS Controls, local frameworks such as QCSF/NIA when applicable).
 </li>
 <li>
 Coordinate with Legal/HR/IT/Procurement on compliance topics (privacy, records, access controls, vendor risk).
 </li>
 <li>
 Produce audit artifacts: SoA, control matrices, evidence packs, CAPA plans.
 </li>
 <li>
 Third-Party &amp; Supplier Risk
 </li>
 <li>
 Execute/coordinate third-party security assessments: questionnaires, evidence review, risk ratings, remediation follow-up.
 </li>
 <li>
 Support contract/security clauses review with Procurement/Legal.
 </li>
 <li>
 Maintain supplier risk records and ensure closure of high/critical findings.
 </li>
 <li>
 Client-Facing GRC Delivery (Part-Time Allocation)
 </li>
 <li>
 Contribute to client assessments and advisory engagements: maturity assessments, gap analysis, compliance roadmaps, risk registers, policies, and reporting.
 </li>
 <li>
 Support delivery managers/project leads with structured, reusable deliverables and strong documentation quality.
 </li>
 <li>
 Participate in client meetings/workshops and translate discussions into actionable outputs.
 </li>
 <li>
 Metrics, Reporting, and Leadership Communication
 </li>
 <li>
 Run recurring reporting: GRC KPIs/KRIs, compliance status, audit readiness, top risks, overdue actions.
 </li>
 <li>
 Brief BU leadership with clear recommendations, decisions needed, and escalation items.
 </li>
 <li>
 Maintain transparency: stakeholders should always know what&rsquo;s in progress, blocked, overdue, and why.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 Required Experience &amp; Qualifications
 
 
 
 <ul>
 <li>
 8 years in cybersecurity GRC, risk management, compliance, or audit-heavy security roles.
 </li>
 <li>
 Proven experience running governance documentation end-to-end (policy &rarr; adoption &rarr; evidence).
 </li>
 <li>
 Solid understanding of security frameworks and control-based approaches: ISO 27001/27002, NIST CSF/800-53, CIS Controls (and QCSF/NIA if in Qatar context).
 </li>
 <li>
 Experience with audits (internal/external), evidence management, and remediation tracking.
 </li>
 <li>
 Strong stakeholder management across technical and non-technical teams.
 
 
 </li>
 </ul>
 
 Tools &amp; Delivery Skills
 
 
 
 <ul>
 <li>
 Advanced documentation and structuring: MS Word/PowerPoint, clean formatting, executive summaries.
 </li>
 <li>
 Strong Excel skills for trackers and reporting (risk registers, matrices, dashboards).
 </li>
 <li>
 Familiarity with GRC tooling
 </li>
 <li>
 Ability to manage workflows in Jira/ServiceNow/Planner/Trello or similar.
 
 
 </li>
 </ul>
 
 About Malomatia
 
 
 
 
 ABOUT US
 
 
 
 malomatia is a leading Qatar-based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end-to-end technology solutions that empower clients to achieve their strategic goals.
 
 
 
 Our mission
 
 
 
 Empowering Qatar&rsquo;s businesses and governments to leap into the digital future with agile, knowledge-driven solutions.
 
 
 
 Our vision
 
 
 
 To become Qatar&rsquo;s trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world-class tech ecosystem.
 
 
 
 Driving change that makes a real impact
 
 
 
 Since 2008, malomatia has been driving Qatar&rsquo;s digital transformation through innovative, ISO-certified IT solutions. With expertise across key public and private sectors, we empower the nation&rsquo;s vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar&rsquo;s sustainable future.
 
 
 
 About The Team
 
 
 
 Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high-value digital solutions tailored to the unique needs of our clients.
 
 
 Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation.
 
 
 Join us in shaping the future of technology in Qatar
</div>

Consultant - GRC

Starlink Qatar

<div>
 
 
 We&rsquo;re Hiring | Security Operations Officer &ndash; Data Security (Arabic Speaking)
 
 
 
 
 
 
 We are looking for an experienced
 
 Security Operations Officer / Data Security Specialist
 
 with strong expertise in
 
 data protection, cloud data security, and cryptography
 
 .
 
 
 
 Arabic speaking is mandatory.
 
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 
 
 
 Data Security Engineering
 
 
 <ul>
 <li>
 Design and implement data protection controls across enterprise, cloud, and AI environments
 </li>
 <li>
 Deploy and manage DLP, data masking, and tokenization solutions
 </li>
 <li>
 Embed security into the data lifecycle in collaboration with application and infrastructure teams
 </li>
 <li>
 Implement data discovery and classification to identify and label sensitive data
 </li>
 <li>
 Monitor data security posture and produce compliance and risk reports
 </li>
 <li>
 Support incident response for data breaches and insider threats
 </li>
 </ul>
 
 
 Cloud Data Security (GCP &amp; Azure)
 
 
 <ul>
 <li>
 Secure databases and data lakes
 </li>
 <li>
 Implement encryption at rest, in transit, and in use (BYOK)
 </li>
 <li>
 Deploy cloud-native data discovery and classification tools
 </li>
 <li>
 Manage secrets and secure access to data storage systems
 </li>
 <li>
 Implement AI data governance controls
 </li>
 </ul>
 
 
 Cryptography &amp; Key Management
 
 
 <ul>
 <li>
 Define and enforce cryptographic standards and practices
 </li>
 <li>
 Manage enterprise encryption and key management solutions
 </li>
 <li>
 Ensure compliance with organizational and industry standards
 </li>
 </ul>
 
 
 Data Privacy &amp; Governance
 
 
 <ul>
 <li>
 Ensure compliance with GDPR, HIPAA, and PDPPL
 </li>
 <li>
 Embed privacy-by-design principles into technical controls
 </li>
 <li>
 Drive data classification and governance initiatives
 </li>
 <li>
 Ensure alignment with Qatar NCSA framework and international standards
 </li>
 </ul>
 
 
 Database Security
 
 
 <ul>
 <li>
 Secure relational, NoSQL, and unstructured data stores
 </li>
 <li>
 Implement DAM solutions and access controls
 </li>
 <li>
 Perform regular database security reviews and hardening
 </li>
 </ul>
 
 
 Collaboration &amp; Compliance
 
 
 <ul>
 <li>
 Conduct vendor and third-party data security assessments
 </li>
 <li>
 Review and approve data-sharing agreements
 </li>
 <li>
 Define and track data security KPIs and dashboards
 </li>
 <li>
 Stay updated on emerging threats and best practices
 </li>
 </ul>
 
 
 
 
 
 Required Experience &amp; Skills
 
 
 <ul>
 <li>
 
 8+ years
 
 in information security with focus on data protection, cryptography, and database security
 </li>
 <li>
 
 Arabic speaking &ndash; mandatory
 
 </li>
 <li>
 Strong hands-on experience with
 
 GCP and Azure
 
 </li>
 <li>
 Expertise in encryption standards, cryptographic protocols, and key management
 </li>
 <li>
 Experience with secrets management (HashiCorp Vault, Azure Key Vault, GCP Secret Manager, AWS Secrets Manager)
 </li>
 <li>
 Hands-on experience with DLP tools (Forcepoint, Microsoft Purview, Google Cloud DLP)
 </li>
 <li>
 Experience in data masking, tokenization, anonymization, and pseudonymization
 </li>
 <li>
 DAM tools experience (Imperva, IBM Guardium)
 </li>
 <li>
 Strong knowledge of securing relational, NoSQL, and data lake environments
 </li>
 <li>
 Experience integrating secrets management with CI/CD pipelines
 </li>
 </ul>
 
 
 
 
 
 Education &amp; Certifications
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Information Security, or related field
 </li>
 <li>
 Certifications such as
 
 CISSP, CCSP, CDPSE, CCSK
 
 preferred
 </li>
 <li>
 Cloud security certifications (Azure, GCP, or AWS Security Specialty) are a plus
 </li>
 </ul>
 
 
</div>

Security Operations Officer (Data Security Specialist)

SFAI Qatar

Key Responsibilities1. Identity &amp; Authentication<ul><li>Administer and support:</li><li>Active Directory (AD)</li><li>DNS &amp; Microsoft DHCP</li><li>AD Certificate Services</li><li>ADFS</li><li>Entra ID &amp; Entra Connect</li><li>Forefront Identity Manager (FIM)</li><li>Windows Hello for Business</li><li>Deploy and troubleshoot Active Directory GPOs.</li><li>Manage DNS records, DHCP reservations, and certificates.</li><li>Troubleshoot identity synchronization issues (Entra ID / FIM).</li></ul>2. Endpoint Security &amp; Device Management<ul><li>Manage and support:</li><li>Trellix Endpoint Security (ENS)</li><li>Microsoft Intune</li><li>Configuration Manager (SCCM)</li><li>Microsoft Purview</li><li>Troubleshoot failed deployments in SCCM.</li><li>Deploy DAT/engine updates via ePO.</li><li>Analyze and resolve performance or policy-related incidents.</li><li>Maintain and update Data Loss Prevention (DLP) policies.</li></ul>3. Messaging &amp; Collaboration<ul><li>Administer:</li><li>Exchange Online</li><li>Microsoft Teams</li><li>OneDrive for Business</li><li>Monitor and troubleshoot:</li><li>Mail flow issues using Message Trace</li><li>Teams/Webex meeting and media quality issues (CQD &amp; Call Analytics)</li><li>Validate and manage duplicate OneDrive data (Preservation Hold Library).</li></ul>4. Remote Access<ul><li>Support and troubleshoot:</li><li>Citrix Virtual Apps &amp; Desktops</li><li>Windows Terminal Services</li><li>Investigate session launch failures using Citrix tools (Director &amp; Studio).</li><li>Resolve RDP-related incidents.</li></ul>5. Cross-Functional Operational Duties<ul><li>Coordinate and track patch management for all Windows systems.</li><li>Manage incident, request, and task queues effectively.</li><li>Identify and implement process improvements.</li><li>Maintain technical documentation (architecture &amp; configurations).</li></ul>Secondary Responsibilities<ul><li>Handle Tier 1 escalations, resolve issues end-to-end, and identify improvements.</li></ul>Reporting &amp; Relationships<ul><li>Reports to Lead &ndash; IT Operations (Systems).</li><li>Works with internal IT teams and external vendors for support and issue resolution.</li></ul>Compliance &amp; Additional Duties<ul><li>Follow Safety, Health &amp; Environment (SHE) and quality standards.</li><li>Support Qatarization through mentoring and knowledge transfer.</li><li>Conduct knowledge sharing and create FAQs to improve First Call Resolution (FCR).</li><li>Participate in change management, DR planning, and audits.</li><li>Support process improvements and implement remediation actions.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in any Computer Science, Information Technology, Engineering, or Information Systems discipline</li><li>Experience: 5+ years in enterprise Windows systems administration with at least 2 years handling Tier 2/3 escalations.</li></ul>Technical Skills:<ul><li>Proven expertise administering Active Directory, Hybrid Entra ID, and DNS/DHCP core services.</li><li>Hands-on experience with Intunes / System Centre Configuration Manager (SCCM)</li><li>Solid understanding of the architecture and dependencies of Exchange Online,</li><li>Teams/Webex, and OneDrive.</li><li>Citrix Virtual Apps &amp; Desktops operations (Studio, Director, Workspace) and Windows RDS.</li><li>Working knowledge of Trellix ENS/DLP/Application Whitelisting</li><li>Scripting: PowerShell proficiency (functions, modules, REST/Graph calls).</li><li>Virtualization technologies</li><li>Certifications (Recommended): Microsoft Identity &amp; Access Administrator (SC-300),</li><li>MCSA/MCSE, Citrix CC-VAD, ITIL v4 Foundation.</li></ul>Business Skills<ul><li>Excellent written and spoken English.</li><li>Strong analytical problem-solving skills</li><li>Specialized technical expertise and broader IT knowledge</li><li>Compliance with risk, security, and continuity management principles</li></ul>Pay: QAR13,900.00 - QAR14,900.00 per hourApplication Question(s):<ul><li>Do you have bachelors in y Computer Science, Information Technology, Engineering, or Information Systems ?</li></ul>Experience:<ul><li>System Administration: 5 years (Preferred)</li><li>Handling Tier 2/3 Escalations: 2 years (Preferred)</li></ul>Language:<ul><li>English (Preferred)</li></ul>License/Certification:<ul><li>QID (Preferred)</li></ul>Work Location: In person

Systems Administration Consultant

Explore 884+ Information security manager in Doha this May. Find roles across top companies and apply now to boost your career.