project manager

information management lead

operations manager

senior cybersecurity engineer Jobs in Doha

senior cybersecurity engineer

chief information officer (cio) Jobs in Doha

chief information officer (cio)

information security manager

Exotica IT Solutions Qatar

<p><b>Cybersecurity Specialist / Manager</b><br/>Bin Mahmoud Area, Doha Municipality, Qatar<br/><b>Exotica IT Solutions Qatar</b></p><p>Why This Role Is Worth Your Attention</p><p>Looking to level up your cybersecurity career in a fast-growing tech environment? Join a team where your expertise directly protects critical systems, drives innovation, and shapes security strategy. This is your chance to take ownership, grow your leadership impact, and work with cutting-edge technologies&mdash;while enjoying a competitive compensation package and strong career progression.</p><p>Compensation &amp; Benefits</p><ul><li><b>Competitive salary</b> (based on experience and certifications)</li><li>Performance-based bonuses</li><li>Health insurance coverage</li><li>Paid annual leave &amp; public holidays</li><li>Professional development &amp; certification support</li><li>Career growth opportunities into senior leadership roles</li><li>Supportive, collaborative work environment</li></ul><p>Work Schedule</p><ul><li>Full-time position</li><li>Standard business hours with flexibility when needed</li><li>Occasional on-call support for critical incidents</li></ul><p>Key Responsibilities</p><ul><li>Monitor, detect, and respond to security incidents and threats</li><li>Manage and improve security infrastructure (firewalls, SIEM, IDS/IPS)</li><li>Conduct vulnerability assessments and penetration testing</li><li>Develop and enforce cybersecurity policies and procedures</li><li>Lead incident response and forensic investigations</li><li>Ensure compliance with industry standards and regulations</li><li>Collaborate with IT teams to secure networks, systems, and applications</li><li>Provide security awareness training to internal teams</li><li>Evaluate and implement new security tools and technologies</li></ul><p>Most In-Demand Skills</p><ul><li>Network security &amp; threat analysis</li><li>Security Information and Event Management (SIEM) tools</li><li>Risk assessment &amp; vulnerability management</li><li>Incident response &amp; digital forensics</li><li>Cloud security (AWS, Azure, or similar platforms)</li><li>Knowledge of compliance frameworks (ISO 27001, NIST, etc.)</li><li>Scripting or automation (Python, PowerShell, etc.)</li><li>Strong analytical and problem-solving skills</li><li>Leadership and team coordination (for managerial level)</li></ul><p>What We&rsquo;re Looking For</p><ul><li>Experience in cybersecurity, information security, or related field</li><li>Familiarity with security tools and best practices</li><li>Relevant certifications (e.g., CISSP, CEH, Security+) are a plus</li><li>Strong communication and collaboration skills</li><li>Ability to stay updated with evolving cyber threats</li></ul><p>About the Company</p><p><b>Exotica IT Solutions Qatar</b> is a dynamic technology company delivering innovative IT and cybersecurity solutions across industries. Known for its client-focused approach and technical excellence, the company empowers businesses to operate securely and efficiently in a digital-first world.</p><p>Why Work With Us?</p><ul><li>Work on impactful, real-world cybersecurity challenges</li><li>Be part of a growing, forward-thinking tech team</li><li>Gain exposure to the latest security technologies</li><li>Continuous learning and certification support</li><li>A culture that values innovation, collaboration, and growth</li></ul><p>الراتب المدفوع: QAR٩١٫٠٠&nbsp;لكل ساعة</p><p>موقع العمل: بشكل شخصي</p>

Cybersecurity Specialist/Manager

Sygmetiv Business Solutions

<p>Led comprehensive cybersecurity initiatives and governance efforts across the organization. Develop and implement comprehensive Information Security Strategy aligned with business goals. Conduct and coordinate risk assessments, penetration tests (PT), vulnerability assessments (VA), fraud investigations, and Risk and Control Self-Assessment (RCSA) processes. Stay informed on emerging threats, vulnerabilities, and security technologies, delivering actionable insights and recommendations. Participate in security audits, assessments, and compliance reviews, ensuring adherence to regulatory requirements and responding to security-related inquiries from Sr. Management/Board and regulatory authorities.</p><ul><li>Applied expertise in security frameworks, ITS and standards, such as NIST CSF, CIS, NCA ECC, SAMA SCF, ISO 27001, along with regulatory compliance requirements like Regional Data Protection Laws, PDPL. GDPR. AML and PCI DSS.</li><li>Applied expertise in security frameworks, ITS and standards, such as NIST CSF, CIS, NCA ECC, SAMA SCF, ISO 27001, along with regulatory compliance requirements like Regional Data Protection Laws, PDPL, GDPR, AML and PCI DSS.</li><li>Analysed security events and incidents,coordinated investigations, and provided incident response and remediation support.</li><li>Ensured compliance with regulatorystandards, including Central Banks. (CBB, SAMA, CBUAE, CBJ, CBJ, BDL etc.)</li><li>Successfully maintained PCI DSS complianceand certification of Amex while enhancing security protocols to mitigate emerging threats and vulnerabilities.</li><li>Managed cross-functional teams to ensurecompliance with regulatory standards. Perform risk assessments and gap analysis.</li><li>Define and implement security controls,monitor risks and create mitigation plans</li><li>Manage third-party/vendor risks. Track and report security incidents (from compliance side)</li></ul><p>Experience:</p><ul><li>GRC Cyber Security Manager: 10 years (Preferred)</li></ul><p>Language:</p><ul><li>Arabic, English  (Preferred)</li></ul><p>Work Location: In person</p>

GRC Cyber Security Manager

IRI Experts Doha

<p><b>Job Title:</b> Director of Information Security</p><p><b>Company:</b> IRI Experts Doha<br/><b>Location:</b> Barwa Village, Doha, Qatar<br/><b>Salary:</b> QAR 46,500 per month</p><p>Job Overview</p><p>IRI Experts Doha is seeking a highly experienced and strategic <b>Director of Information Security</b> to lead and manage the organization&rsquo;s cybersecurity strategy. This role is ideal for a senior professional with expertise in information security, risk management, and governance.</p><p>The Director of Information Security will be responsible for protecting organizational assets, ensuring compliance, and developing robust security frameworks.</p><p>Key Responsibilities</p><ul><li>Develop and implement comprehensive information security strategies and policies.</li><li>Oversee cybersecurity operations, risk management, and compliance programs.</li><li>Monitor threats, vulnerabilities, and incident response processes.</li><li>Ensure data protection, system security, and regulatory compliance.</li><li>Lead security audits, assessments, and continuous improvement initiatives.</li><li>Collaborate with IT and business units to strengthen security posture.</li><li>Manage security teams and external vendors.</li><li>Provide strategic guidance to leadership on security risks and mitigation.</li><li>Stay updated on emerging cybersecurity threats and technologies.</li></ul><p>Qualifications</p><ul><li>Bachelor&rsquo;s degree in Information Security, Computer Science, or related field.</li><li>Proven experience in cybersecurity leadership or information security roles.</li><li>Strong knowledge of security frameworks, risk management, and compliance standards.</li><li>Excellent analytical, leadership, and strategic thinking skills.</li><li>Strong communication and stakeholder management abilities.</li><li>Certifications such as CISSP, CISM, or equivalent are highly desirable.</li></ul><p>What We Offer</p><ul><li>Competitive salary of <b>QAR 46,500 per month</b></li><li>Leadership role with critical organizational impact</li><li>Professional and collaborative work environment</li><li>Opportunities for growth and specialization</li></ul><p><b>IRI Experts Doha is an equal opportunity employer.</b></p><p>نوع الوظيفة: دوام كامل</p><p>الراتب المدفوع: QAR٤٦٬٥٠٠٫٠٠&nbsp;لكل شهر</p><p>موقع العمل: بشكل شخصي</p>

Director of Information Security

Goldman Sachs

<div>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 <strong>
  Role Overview
  <br/>
  <br/>
 </strong>
 The Lead Information Security Officer for Asset Management is a critical leadership position responsible for defining, implementing, and overseeing the comprehensive information security and cybersecurity risk posture specifically within the Asset Management Private business. This role is pivotal in balancing commercial objectives with robust security controls, ensuring the division's resilience against an evolving threat landscape, and protecting client assets and data.
 <br/>
 <br/>
 This leader will directly manage and provide strategic direction to teams responsible for Governance, Risk &amp; Compliance (GRC), Application Security &amp; Advisory, and Product Security functions within Asset Management. Crucially, this role also involves the oversight and guidance of embedded Technology Risk Officers who are assigned to various Asset Management Private business vertical. The objective is to foster a unified and proactive approach to risk management, ensuring regulatory compliance, and enabling secure technological innovation across all Asset Management initiatives.
 <br/>
 <br/>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Work with internal application development teams that are developing the next generation of critical business applications, enable them to understand Information Security and Business Resiliency control requirements, and advise on the integration of these controls into their applications
  </li>
  <li>
   Collaborate with the global Application Security Risk, Business Continuity, Risk Measurement, and other global Technology Risk teams to develop and integrate best-in-class security and resiliency controls and practices.
  </li>
  <li>
   Communicate the impact of technology risks and the approach to mitigation/acceptance and provide risk assessment and advisory services to technology engineers, and technology and business management.
  </li>
  <li>
   Assess existing applications for design-related security risks and assist teams in determining appropriate remediation steps
  </li>
  <li>
   Provide guidance to engineering leadership and application developers on existing and emerging threats in the web and mobile application space.
  </li>
  <li>
   Drive adoption of embedded application security controls as part of the Software Development Life Cycle (SDLC).
  </li>
  <li>
   Provide deep subject matter expertise to application teams in secure application design and development approaches and techniques.
  </li>
  <li>
   Contribute to the technical understanding, adoption and convergence of information security standards, solutions and tools.
  </li>
  <li>
   Work with engineers to develop customized security testing strategy to complement the existing security testing program managed by Technology Risk.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Skills And Experience Required
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience: 5+ years of progressive experience in Multi domain Information Security experience such as vendor security, application security, vulnerability management, data loss prevention, data encryption, and infrastructure security.
  </li>
  <li>
   Regulatory &amp; Risk Expertise: Expert knowledge of global financial regulations (e.g., SEC , FINRA , GDPR , CCPA ) and proven experience applying risk management methodologies such as FAIR (Factor Analysis of Information Risk) or similar frameworks.
  </li>
  <li>
   Leadership &amp; Management: Proven ability to build, mentor, and lead high-performing global teams of security professionals.
  </li>
  <li>
   Program Management: Proven track record involving collaboration with engineering, technology, second line risk functions and audit partners to deliver projects and facilitate resolution of audit issues within committed timelines.
  </li>
  <li>
   Communication: Exceptional written and oral communication skills, with the ability to articulate complex technical risks and solutions clearly to both technical and executive audiences.
  </li>
  <li>
   Risk Management: Expertise in performing risk assessments, identifying gaps in compliance with information security policies, and recommending effective mitigation strategies.
  </li>
  <li>
   Security Standards: Familiarity with leading security standards and frameworks such as NIST, OWASP, SANS Top 20, PCI DSS, and CIS Controls.
  </li>
  <li>
   Technical Depth: Expertise in Technology Risk data analytics (metrics reporting and dashboarding) and Reviewing Software Development Lifecycle best practices e.g., code reviews, vulnerability scan report analysis to advise application development teams on for secure practices and frameworks, and other application security best practices
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   BS or MS degree in Computer Science, Cyber Security, Information Security, or a related technical field.
  </li>
  <li>
   Relevant industry certifications such as CISSP , CISM , CRISC , CISA, or cloud-specific security certifications (e.g., AWS Certified Security &ndash; Specialty).
  </li>
  <li>
   Experience with leveraging AI/ML to solve security problems and scale operations.
  </li>
  <li>
   Knowledge of secure coding languages (e.g., Python, Java, Go).
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About Goldman Sachs
  <br/>
  <br/>
 </strong>
 At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.
 <br/>
 <br/>
 We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.
 <br/>
 <br/>
 We&rsquo;re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html
 <br/>
 <br/>
 &copy; The Goldman Sachs Group, Inc., 2023. All rights reserved.
 <br/>
 <br/>
 Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.
</div>


Asset & Wealth Management - Doha - Vice President - Lead Security Engineering

QNB Group

<div>
 <strong>
  About QNB
  <br/>
  <br/>
 </strong>
 Established in 1964 as the country&rsquo;s first Qatari-owned commercial bank, QNB Group has steadily grown to become the largest bank in the Middle East and Africa (MEA) region.
 <br/>
 <br/>
 QNB Group&rsquo;s presence through its subsidiaries and associate companies extends to more than 31 countries across three continents providing a comprehensive range of advanced products and services. The total number of employees is more than 28,000 serving up to 20 million customers operating through 1,000 locations, with an ATM network of 4,300 machines.
 <br/>
 <br/>
 QNB has maintained its position as one of the highest rated regional banks from leading credit rating agencies including Standard &amp; Poor&rsquo;s (A), Moody&rsquo;s (Aa3) and Fitch (A+). The Bank has also been the recipient of many awards from leading international specialised financial publications.
 <br/>
 <br/>
 Based on the Group&rsquo;s consistent strong financial performance and its expanding international presence, QNB currently ranks as the most valuable bank brand in the Middle East and Africa, according to Brand Finance Magazine.
 <br/>
 <br/>
 QNB Group has an active community support program and sponsors various social, educational and sporting events.
 <br/>
 <br/>
 <strong>
  Job Summary
  <br/>
  <br/>
 </strong>
 The incumbent will be responsible for the setup and management of the Cyber Security Strategy and Product management function in the Group Information Security (GIS) department. The incumbent will be a banking and finance technology thinker who constantly analyses the market for new technologies that would be best suited to support the Group&rsquo;s strategy
 <br/>
 <br/>
 Main Responsibilities
 <br/>
 <br/>
 <ul>
  <li>
   Shareholder &amp; Financial: - Participate in the development, execution and maintenance of the IT Security strategy aligned to the overall corporate strategy, group long term goals and assist in the prioritization process. - Assist in the overall and annual IT Security business planning with the view of achieving the Group&rsquo;s short term goals and submit periodic reviews and resolution. - Provide inputs to the Technology Key Risk indicators (KRIs) which shall be applicable across the Group to manage Group&rsquo;s exposure to IT related risks effectively. Lead IT market research and provide applicable suggestions to further the Group&rsquo;s strategy and develop cost / benefit analysis to alternative technologies and processes. - Focal Point from GIS in the preparation of the GIS budget to support Group&rsquo;s long and short term goals. - Responsible for coordinating all aspects of the GIS budget process including: review of service area business plans and key performance indicators; annual capital budget and forecasts that include available and appropriate funding sources along with required project justification analysis; operating budget and forecast submissions that adhere to direction set by bank - Liaise with all Business Units Heads for preparing the yearly IT Business Plans, Prepare monthly and quarterly update on IT Business Plan. Monitor the Progress Status and raise issues / risks to GIS management. - Produce Availability Plans in line with QNB&rsquo;s business planning cycle; identifying Availability requirements early enough to take account of procurement lead times. - Create implement and report on Key Performance Indicators (KPIs) for performance monitoring purposes for the GIS group and monitor their achievement on a regular basis. - Produce Capacity Plans in line with QNB&rsquo;s business planning cycle; identifying Capacity requirements early enough to take account of procurement lead times. - Document the need for any increase or reduction in hardware resources based on service level requirements and cost constraints - Implements KPI&rsquo;s and best practices for Cyber Security Strategy and Product Management. - Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank. - Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same. - Demonstrate clear understanding of the important factors behind the bank's financial &amp; non-financial performance.
  </li>
  <li>
   Customer (Internal &amp; External): - Build and maintain strong relationship with all other related departments, external entities and sections within GIS. - Defining &amp; implementing Service Level Agreements (SLAs) and Operation Level Agreements (OLAs) between GIS, IT Group, other Business Units and International Branches. - Monitors capital and operating budget performance of GIS to identify unfavourable budget variances and recommend mitigating actions or additional approvals required to minimize impact to yearend surplus/deficit. - Seek to continually exceed internal and external customer expectations through introduction of breakthrough IT Security technologies and processes aimed to improve the Group&rsquo;s products/services. - Produce regular management reports which include current usage of resources, trends and forecasts - Build and maintain a strong relationship with the Business Relationship Manager, technical teams within IT, finance team and external vendors of products and services - To assist customers in all their queries on Bank&rsquo;s product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group&rsquo;s objectives
  </li>
  <li>
   Internal (Processes, Products, Regulatory): - Review and identify areas for improvement in the process to deliver effective &amp; efficient GIS projects and services - Act as a BCP Coordinator for GIS, coordinate implementation of DR setup as per the defined strategy - Assist in recruiting, motivating and developing personnel to ensure the function is staffed with individuals of the required caliber and that there is adequate succession planning and provision for future demands. - Analyse and recommend new products and solutions for GIS and business users to ensure that the group is upto-date with the latest trends in technology. - Support the new technology&rsquo;s development process, and ensure that project deliverables are met according to specifications and timeframes. - Compile and present relevant MIS to the Group CISO on a periodic basis for the existing systems and compare the existing functionalities vis-&agrave;-vis the efficiencies to be gained from proposed technologies. - Assist in the overall recruitment of the individual resources in the areas concerned - Continuous Improvement: - Set examples by leading improvement initiatives through cross-functional teams ensuring successes. - Identify and encourage people to adopt practices better than the industry standard. - Continuously encourage and recognise the importance of thinking out-of-the-box within the team. - Encourage, solicit and reward innovative ideas even in day-to-day issues.
  </li>
  <li>
   Learning &amp; Knowledge: - Possess good knowledge and experience in COBIT and ITIL framework. - Detailed understanding of IT systems and secure architecture designs. - Good understanding of suitable solutions for configuration management, service desk, software library etc. - Identify areas for professional development for self and direct reports and take necessary actions - Hold meetings with direct reports and assess their performance. - Attend specific conferences in areas of financial services technology breakthroughs and innovations to adapt suitable ones to the bank&rsquo;s security architecture and product portfolio. - Possess a superior knowledge of the GIS structure, its products and related risks together with a good knowledge of operations and related controls. - Identify areas for professional development of self and direct reports and act to enhance professional development of self and others - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Hold meetings with staff and assess their performance and your teams overall performance on a regular basis. - Take decisive action to ensure speedy resolution of unresolved grievances or conflicts within the team members. - Identify development opportunities and activities for staff and facilitate/coach them to improve their effectives and prepare them to assume greater responsibilities.
  </li>
  <li>
   Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank.
  </li>
  <li>
   Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time. - Lead and develop the Cyber Security Strategy of the bank in line with the business strategy, regulatory requirement, best practices and ongoing cyber security challenges. - Benchmark and evaluate the performance of the technologies engineered and operated by the GIS Cyber Security Technologies &amp; Services teams to ensure that these are kept fine-tuned and updated with the latest technological developments.- Constantly scanning the market and competitors capabilities and bringing in technology proven in other markets and suggesting them across the group. - Keeping the CISO updated with latest developments in Cyber Security and raising any new cyber security risks to his attention. - Maintain the security architecture blueprints of the bank, liaising with the Enterprise IT architect and GITD Heads to develop and track the plans to achieve compliance. - Help to form the Information Security budget in collaboration with the Group Information Security Officer ensuring that systems under management are licensed and appropriately sized for the environment - Ensure that all the licenses and contracts are maintained and kept updated.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Education And Experience Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s/Master&rsquo;s Degree in Computer Science, Computer Engineering or any related subject.
  </li>
  <li>
   Experience in IT service management of systems Technical Design, Implementation, and Maintenance on wide variety of platform including the main banking platform.
  </li>
  <li>
   At least 15 year&rsquo;s experience in a major bank of which at least 5 years in bank in a managerial capacity in an IT Security engineering or architecture function.
  </li>
  <li>
   Training courses and certifications in application development, database administration, security, and management is a plus. Professional certifications, an ITIL foundation, TOGAF and COBIT is a must - Professional certification such as CISSP, CISM, CISA is preferred.
   <br/>
   <br/>
  </li>
 </ul>
 Note: you will be required to attach the following:
 <br/>
 <br/>
 <ul>
  <li>
   Resume/CV
  </li>
  <li>
   Copy of Passport or QID
  </li>
  <li>
   Copy of Education Certificate
  </li>
  <li>
   Copy of Birth Certificate
  </li>
 </ul>
</div>


QNB3667 - Senior Vice President Cyber Security Strategy and Product Management (Qatarization)

Qatar National Bank

<div>Job Summary<p><br>
The incumbent will be responsible for the setup and management of the Cyber Security Strategy and Product management function in the Group Information Security (GIS) department. The incumbent will be a banking and finance technology thinker who constantly analyses the market for new technologies that would be best suited to support the Group's strategy</p>
Main Responsibilities<p><br>
A. Shareholder &amp; Financial: - Participate in the development, execution and maintenance of the IT Security strategy aligned to the overall corporate strategy, group long term goals and assist in the prioritization process. - Assist in the overall and annual IT Security business planning with the view of achieving the Group's short term goals and submit periodic reviews and resolution. - Provide inputs to the Technology Key Risk indicators (KRIs) which shall be applicable across the Group to manage Group's exposure to IT related risks effectively. Lead IT market research and provide applicable suggestions to further the Group's strategy and develop cost / benefit analysis to alternative technologies and processes. - Focal Point from GIS in the preparation of the GIS budget to support Group's long and short term goals. - Responsible for coordinating all aspects of the GIS budget process including: review of service area business plans and key performance indicators; annual capital budget and forecasts that include available and appropriate funding sources along with required project justification analysis; operating budget and forecast submissions that adhere to direction set by bank - Liaise with all Business Units Heads for preparing the yearly IT Business Plans, Prepare monthly and quarterly update on IT Business Plan. Monitor the Progress Status and raise issues / risks to GIS management. - Produce Availability Plans in line with QNB's business planning cycle; identifying Availability requirements early enough to take account of procurement lead times. - Create implement and report on Key Performance Indicators (KPIs) for performance monitoring purposes for the GIS group and monitor their achievement on a regular basis. - Produce Capacity Plans in line with QNB's business planning cycle; identifying Capacity requirements early enough to take account of procurement lead times. - Document the need for any increase or reduction in hardware resources based on service level requirements and cost constraints - Implements KPI's and best practices for Cyber Security Strategy and Product Management. - Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank. - Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same. - Demonstrate clear understanding of the important factors behind the bank's financial &amp; non-financial performance.
</p><p>B. Customer (Internal &amp; External): - Build and maintain strong relationship with all other related departments, external entities and sections within GIS. - Defining &amp; implementing Service Level Agreements (SLAs) and Operation Level Agreements (OLAs) between GIS, IT Group, other Business Units and International Branches. - Monitors capital and operating budget performance of GIS to identify unfavourable budget variances and recommend mitigating actions or additional approvals required to minimize impact to yearend surplus/deficit. - Seek to continually exceed internal and external customer expectations through introduction of breakthrough IT Security technologies and processes aimed to improve the Group's products/services. - Produce regular management reports which include current usage of resources, trends and forecasts - Build and maintain a strong relationship with the Business Relationship Manager, technical teams within IT, finance team and external vendors of products and services - To assist customers in all their queries on Bank's product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group's objectives</p><p>
C. Internal (Processes, Products, Regulatory): - Review and identify areas for improvement in the process to deliver effective &amp; efficient GIS projects and services - Act as a BCP Coordinator for GIS, coordinate implementation of DR setup as per the defined strategy - Assist in recruiting, motivating and developing personnel to ensure the function is staffed with individuals of the required caliber and that there is adequate succession planning and provision for future demands. - Analyse and recommend new products and solutions for GIS and business users to ensure that the group is upto-date with the latest trends in technology. - Support the new technology's development process, and ensure that project deliverables are met according to specifications and timeframes. - Compile and present relevant MIS to the Group CISO on a periodic basis for the existing systems and compare the existing functionalities vis-&agrave;-vis the efficiencies to be gained from proposed technologies. - Assist in the overall recruitment of the individual resources in the areas concerned - Continuous Improvement: - Set examples by leading improvement initiatives through cross-functional teams ensuring successes. - Identify and encourage people to adopt practices better than the industry standard. - Continuously encourage and recognise the importance of thinking out-of-the-box within the team. - Encourage, solicit and reward innovative ideas even in day-to-day issues.
</p><p>D. Learning &amp; Knowledge: - Possess good knowledge and experience in COBIT and ITIL framework. - Detailed understanding of IT systems and secure architecture designs. - Good understanding of suitable solutions for configuration management, service desk, software library etc. - Identify areas for professional development for self and direct reports and take necessary actions - Hold meetings with direct reports and assess their performance. - Attend specific conferences in areas of financial services technology breakthroughs and innovations to adapt suitable ones to the bank's security architecture and product portfolio. - Possess a superior knowledge of the GIS structure, its products and related risks together with a good knowledge of operations and related controls. - Identify areas for professional development of self and direct reports and act to enhance professional development of self and others - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Hold meetings with staff and assess their performance and your teams overall performance on a regular basis. - Take decisive action to ensure speedy resolution of unresolved grievances or conflicts within the team members. - Identify development opportunities and activities for staff and facilitate/coach them to improve their effectives and prepare them to assume greater responsibilities.
</p><p>E. Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank.
</p><p>F. Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time. - Lead and develop the Cyber Security Strategy of the bank in line with the business strategy, regulatory requirement, best practices and ongoing cyber security challenges. - Benchmark and evaluate the performance of the technologies engineered and operated by the GIS Cyber Security Technologies &amp; Services teams to ensure that these are kept fine-tuned and updated with the latest technological developments.- Constantly scanning the market and competitors capabilities and bringing in technology proven in other markets and suggesting them across the group. - Keeping the CISO updated with latest developments in Cyber Security and raising any new cyber security risks to his attention. - Maintain the security architecture blueprints of the bank, liaising with the Enterprise IT architect and GITD Heads to develop and track the plans to achieve compliance. - Help to form the Information Security budget in collaboration with the Group Information Security Officer ensuring that systems under management are licensed and appropriately sized for the environment - Ensure that all the licenses and contracts are maintained and kept updated.</p>
Education and Experience Requirements<ul><li><br>
Bachelor's/Master's Degree in Computer Science, Computer Engineering or any related subject.
</li><li>Experience in IT service management of systems Technical Design, Implementation, and Maintenance on wide variety of platform including the main banking platform.
</li><li>At least 15 year's experience in a major bank of which at least 5 years in bank in a managerial capacity in an IT Security engineering or architecture function.
</li></ul><p>- Training courses and certifications in application development, database administration, security, and management is a plus. Professional certifications, an ITIL foundation, TOGAF and COBIT is a must - Professional certification such as CISSP, CISM, CISA is preferred.</p></div>

Senior Vice President Cyber Security Strategy and Product Management (Qatarization)

<div></div><div><div><ul><li><div><b>Business Unit</b>
</div><div>QNB - Qatar
</div></li><li><div><b>Division</b>
</div><div>Not Applicable
</div></li><li><div><b>Department</b>
</div><div>Not Applicable
</div></li><li><div><b>Location</b>
</div><div>Doha, Qatar
</div></li><li><div><b>Closing Date</b>
</div><div>31-Dec-2026
</div></li></ul></div><div><div><h5 class="jobSectionHeader"><b>About QNB</b></h5>
<p>Established in 1964 as the country&rsquo;s first Qatari-owned commercial bank, QNB Group has steadily grown to become the largest bank in the Middle East and Africa (MEA) region.</p>
<p>QNB Group&rsquo;s presence through its subsidiaries and associate companies extends to more than 31 countries across three continents providing a comprehensive range of advanced products and services. The total number of employees is more than 28,000 serving up to 20 million customers operating through 1,000 locations, with an ATM network of 4,300 machines.</p>
<p>QNB has maintained its position as one of the highest rated regional banks from leading credit rating agencies including Standard &amp; Poor&rsquo;s (A), Moody&rsquo;s (Aa3) and Fitch (A+). The Bank has also been the recipient of many awards from leading international specialised financial publications.</p>
<p>Based on the Group&rsquo;s consistent strong financial performance and its expanding international presence, QNB currently ranks as the most valuable bank brand in the Middle East and Africa, according to Brand Finance Magazine.</p>
<p>QNB Group has an active community support program and sponsors various social, educational and sporting events.</p>
</div></div><div><div><div><h5 class="jobSectionHeader"><b>Job Summary</b></h5>
</div><div><p>The incumbent will be responsible for the setup and management of the Cyber Security Strategy and Product management function in the Group Information Security (GIS) department. The incumbent will be a banking and finance technology thinker who constantly analyses the market for new technologies that would be best suited to support the Group&rsquo;s strategy</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Main Responsibilities</b></h5>
</div><div><p>A. Shareholder &amp; Financial: - Participate in the development, execution and maintenance of the IT Security strategy aligned to the overall corporate strategy, group long term goals and assist in the prioritization process. - Assist in the overall and annual IT Security business planning with the view of achieving the Group&rsquo;s short term goals and submit periodic reviews and resolution. - Provide inputs to the Technology Key Risk indicators (KRIs) which shall be applicable across the Group to manage Group&rsquo;s exposure to IT related risks effectively. Lead IT market research and provide applicable suggestions to further the Group&rsquo;s strategy and develop cost / benefit analysis to alternative technologies and processes. - Focal Point from GIS in the preparation of the GIS budget to support Group&rsquo;s long and short term goals. - Responsible for coordinating all aspects of the GIS budget process including: review of service area business plans and key performance indicators; annual capital budget and forecasts that include available and appropriate funding sources along with required project justification analysis; operating budget and forecast submissions that adhere to direction set by bank - Liaise with all Business Units Heads for preparing the yearly IT Business Plans, Prepare monthly and quarterly update on IT Business Plan. Monitor the Progress Status and raise issues / risks to GIS management. - Produce Availability Plans in line with QNB&rsquo;s business planning cycle; identifying Availability requirements early enough to take account of procurement lead times. - Create implement and report on Key Performance Indicators (KPIs) for performance monitoring purposes for the GIS group and monitor their achievement on a regular basis. - Produce Capacity Plans in line with QNB&rsquo;s business planning cycle; identifying Capacity requirements early enough to take account of procurement lead times. - Document the need for any increase or reduction in hardware resources based on service level requirements and cost constraints - Implements KPI&rsquo;s and best practices for Cyber Security Strategy and Product Management. - Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank. - Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same. - Demonstrate clear understanding of the important factors behind the bank's financial &amp; non-financial performance.
</p><p>B. Customer (Internal &amp; External): - Build and maintain strong relationship with all other related departments, external entities and sections within GIS. - Defining &amp; implementing Service Level Agreements (SLAs) and Operation Level Agreements (OLAs) between GIS, IT Group, other Business Units and International Branches. - Monitors capital and operating budget performance of GIS to identify unfavourable budget variances and recommend mitigating actions or additional approvals required to minimize impact to yearend surplus/deficit. - Seek to continually exceed internal and external customer expectations through introduction of breakthrough IT Security technologies and processes aimed to improve the Group&rsquo;s products/services. - Produce regular management reports which include current usage of resources, trends and forecasts - Build and maintain a strong relationship with the Business Relationship Manager, technical teams within IT, finance team and external vendors of products and services - To assist customers in all their queries on Bank&rsquo;s product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group&rsquo;s objectives</p><p>
C. Internal (Processes, Products, Regulatory): - Review and identify areas for improvement in the process to deliver effective &amp; efficient GIS projects and services - Act as a BCP Coordinator for GIS, coordinate implementation of DR setup as per the defined strategy - Assist in recruiting, motivating and developing personnel to ensure the function is staffed with individuals of the required caliber and that there is adequate succession planning and provision for future demands. - Analyse and recommend new products and solutions for GIS and business users to ensure that the group is up to-date with the latest trends in technology. - Support the new technology&rsquo;s development process, and ensure that project deliverables are met according to specifications and timeframes. - Compile and present relevant MIS to the Group CISO on a periodic basis for the existing systems and compare the existing functionalities vis-&agrave;-vis the efficiencies to be gained from proposed technologies. - Assist in the overall recruitment of the individual resources in the areas concerned - Continuous Improvement: - Set examples by leading improvement initiatives through cross-functional teams ensuring successes. - Identify and encourage people to adopt practices better than the industry standard. - Continuously encourage and recognise the importance of thinking out-of-the-box within the team. - Encourage, solicit and reward innovative ideas even in day-to-day issues.
</p><p>D. Learning &amp; Knowledge: - Possess good knowledge and experience in COBIT and ITIL framework. - Detailed understanding of IT systems and secure architecture designs. - Good understanding of suitable solutions for configuration management, service desk, software library etc. - Identify areas for professional development for self and direct reports and take necessary actions - Hold meetings with direct reports and assess their performance. - Attend specific conferences in areas of financial services technology breakthroughs and innovations to adapt suitable ones to the bank&rsquo;s security architecture and product portfolio. - Possess a superior knowledge of the GIS structure, its products and related risks together with a good knowledge of operations and related controls. - Identify areas for professional development of self and direct reports and act to enhance professional development of self and others - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Hold meetings with staff and assess their performance and your teams overall performance on a regular basis. - Take decisive action to ensure speedy resolution of unresolved grievances or conflicts within the team members. - Identify development opportunities and activities for staff and facilitate/coach them to improve their effectives and prepare them to assume greater responsibilities.
</p><p>E. Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank.
</p><p>F. Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time. - Lead and develop the Cyber Security Strategy of the bank in line with the business strategy, regulatory requirement, best practices and ongoing cyber security challenges. - Benchmark and evaluate the performance of the technologies engineered and operated by the GIS Cyber Security Technologies &amp; Services teams to ensure that these are kept fine-tuned and updated with the latest technological developments.- Constantly scanning the market and competitors capabilities and bringing in technology proven in other markets and suggesting them across the group. - Keeping the CISO updated with latest developments in Cyber Security and raising any new cyber security risks to his attention. - Maintain the security architecture blueprints of the bank, liaising with the Enterprise IT architect and GITD Heads to develop and track the plans to achieve compliance. - Help to form the Information Security budget in collaboration with the Group Information Security Officer ensuring that systems under management are licensed and appropriately sized for the environment - Ensure that all the licenses and contracts are maintained and kept updated.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Education and Experience Requirements</b></h5>
</div><div><ul><li>Bachelor&rsquo;s/Master&rsquo;s Degree in Computer Science, Computer Engineering or any related subject.
</li><li>Experience in IT service management of systems Technical Design, Implementation, and Maintenance on wide variety of platform including the main banking platform.
</li><li>At least 15 year&rsquo;s experience in a major bank of which at least 5 years in bank in a managerial capacity in an IT Security engineering or architecture function.
</li></ul><p>- Training courses and certifications in application development, database administration, security, and management is a plus. Professional certifications, an ITIL foundation, TOGAF and COBIT is a must - Professional certification such as CISSP, CISM, CISA is preferred.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Note: you will be required to attach the following:</b></h5>
</div><div><div><ul><li>Resume/CV</li></ul>
<ul><li>Copy of Passport or QID
</li></ul><ul><li>Copy of Education Certificate
</li></ul><ul><li>Copy of Birth Certificate</li></ul></div></div></div></div></div><div></div>

Senior Vice President Cyber Security Strategy and Product Management

Explore 1381+ Information security manager in Doha this May. Find roles across top companies and apply now to boost your career.