hse officer

procurement officer

safety officer

assistant security manager

cloud security sme

information security officer

Starlink Qatar

<div>
 📌 𝗗𝗲𝘀𝗰𝗿𝗶𝗽𝘁𝗶𝗼𝗻:
 <br/>
 <br/>
 We are seeking a highly experienced InfoSec Officer to lead our information security initiatives, particularly focusing on the unique challenges of large-scale events. This role is pivotal in ensuring robust compliance with information security policies both during and outside of event periods. The successful candidate will be responsible for developing, implementing, and managing our Information Security Management System (ISMS), including all related policies and procedures. You will conduct comprehensive risk assessments, manage security incidents from detection to resolution, and oversee our disaster recovery planning. This position requires a proactive leader to monitor for vulnerabilities, implement effective safeguards, and cultivate a security-conscious culture through staff education and awareness programs. Your expertise will directly contribute to maintaining a secure and resilient information environment for the entire organization.
 <br/>
 <br/>
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
 <br/>
 <br/>
 🎯 𝗥𝗲𝗾𝘂𝗶𝗿𝗲𝗺𝗲𝗻𝘁𝘀:
 <br/>
 <br/>
 &rtrif; 8+ years of combined experience in systems, network, and IT security.
 <br/>
 <br/>
 &rtrif; 5+ years of dedicated experience in Information Security.
 <br/>
 <br/>
 &rtrif; Bachelor&rsquo;s Engineering Degree in Computer Science, Electronics &amp; Communication, or a related field.
 <br/>
 <br/>
 &rtrif; Professional certification in Information Security from a recognized body such as ISACA (e.g., CISM, CISA) or ISC2 (e.g., CISSP).
 <br/>
 <br/>
 &rtrif; Demonstrated experience in developing, implementing, and enforcing Information Security policies and procedures.
 <br/>
 <br/>
 &rtrif; Proven expertise in conducting formal risk assessments and managing risk treatment plans.
 <br/>
 <br/>
 &rtrif; Hands-on experience in managing the full lifecycle of security incidents, from reporting to root cause analysis.
 <br/>
 <br/>
 &rtrif; Experience with developing and maintaining Disaster Recovery (DR) and Business Continuity Plans (BCP).
 <br/>
 <br/>
 ✨ 𝗗𝗲𝘀𝗶𝗿𝗮𝗯𝗹𝗲𝘀:
 <br/>
 <br/>
 &rtrif; Experience managing information security for large-scale public events.
 <br/>
 <br/>
 &rtrif; Strong project management skills.
 <br/>
 <br/>
 &rtrif; Experience in coordinating and leading an Information Security Management System (ISMS) committee.
 <br/>
 <br/>
 &rtrif; Advanced knowledge of network security management and malicious code prevention.
 <br/>
 <br/>
 &rtrif; Excellent communication and leadership skills for promoting security awareness.
 <br/>
 <br/>
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
 <br/>
 <br/>
 🚀 𝗧𝗮𝗸𝗲 𝘁𝗵𝗲 𝗟𝗲𝗮𝗽 𝗧𝗼𝘄𝗮𝗿𝗱 𝗮𝗻 𝗘𝘅𝗰𝗶𝘁𝗶𝗻𝗴 𝗙𝘂𝘁𝘂𝗿𝗲 &ndash; 𝗔𝗽𝗽𝗹𝘆 𝗡𝗼𝘄! 🚀
</div>


InfoSec Officer

Goldman Sachs

<div>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 <strong>
  Role Overview
  <br/>
  <br/>
 </strong>
 The Lead Information Security Officer for Asset Management is a critical leadership position responsible for defining, implementing, and overseeing the comprehensive information security and cybersecurity risk posture specifically within the Asset Management Private business. This role is pivotal in balancing commercial objectives with robust security controls, ensuring the division's resilience against an evolving threat landscape, and protecting client assets and data.
 <br/>
 <br/>
 This leader will directly manage and provide strategic direction to teams responsible for Governance, Risk &amp; Compliance (GRC), Application Security &amp; Advisory, and Product Security functions within Asset Management. Crucially, this role also involves the oversight and guidance of embedded Technology Risk Officers who are assigned to various Asset Management Private business vertical. The objective is to foster a unified and proactive approach to risk management, ensuring regulatory compliance, and enabling secure technological innovation across all Asset Management initiatives.
 <br/>
 <br/>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Work with internal application development teams that are developing the next generation of critical business applications, enable them to understand Information Security and Business Resiliency control requirements, and advise on the integration of these controls into their applications
  </li>
  <li>
   Collaborate with the global Application Security Risk, Business Continuity, Risk Measurement, and other global Technology Risk teams to develop and integrate best-in-class security and resiliency controls and practices.
  </li>
  <li>
   Communicate the impact of technology risks and the approach to mitigation/acceptance and provide risk assessment and advisory services to technology engineers, and technology and business management.
  </li>
  <li>
   Assess existing applications for design-related security risks and assist teams in determining appropriate remediation steps
  </li>
  <li>
   Provide guidance to engineering leadership and application developers on existing and emerging threats in the web and mobile application space.
  </li>
  <li>
   Drive adoption of embedded application security controls as part of the Software Development Life Cycle (SDLC).
  </li>
  <li>
   Provide deep subject matter expertise to application teams in secure application design and development approaches and techniques.
  </li>
  <li>
   Contribute to the technical understanding, adoption and convergence of information security standards, solutions and tools.
  </li>
  <li>
   Work with engineers to develop customized security testing strategy to complement the existing security testing program managed by Technology Risk.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Skills And Experience Required
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience: 5+ years of progressive experience in Multi domain Information Security experience such as vendor security, application security, vulnerability management, data loss prevention, data encryption, and infrastructure security.
  </li>
  <li>
   Regulatory &amp; Risk Expertise: Expert knowledge of global financial regulations (e.g., SEC , FINRA , GDPR , CCPA ) and proven experience applying risk management methodologies such as FAIR (Factor Analysis of Information Risk) or similar frameworks.
  </li>
  <li>
   Leadership &amp; Management: Proven ability to build, mentor, and lead high-performing global teams of security professionals.
  </li>
  <li>
   Program Management: Proven track record involving collaboration with engineering, technology, second line risk functions and audit partners to deliver projects and facilitate resolution of audit issues within committed timelines.
  </li>
  <li>
   Communication: Exceptional written and oral communication skills, with the ability to articulate complex technical risks and solutions clearly to both technical and executive audiences.
  </li>
  <li>
   Risk Management: Expertise in performing risk assessments, identifying gaps in compliance with information security policies, and recommending effective mitigation strategies.
  </li>
  <li>
   Security Standards: Familiarity with leading security standards and frameworks such as NIST, OWASP, SANS Top 20, PCI DSS, and CIS Controls.
  </li>
  <li>
   Technical Depth: Expertise in Technology Risk data analytics (metrics reporting and dashboarding) and Reviewing Software Development Lifecycle best practices e.g., code reviews, vulnerability scan report analysis to advise application development teams on for secure practices and frameworks, and other application security best practices
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   BS or MS degree in Computer Science, Cyber Security, Information Security, or a related technical field.
  </li>
  <li>
   Relevant industry certifications such as CISSP , CISM , CRISC , CISA, or cloud-specific security certifications (e.g., AWS Certified Security &ndash; Specialty).
  </li>
  <li>
   Experience with leveraging AI/ML to solve security problems and scale operations.
  </li>
  <li>
   Knowledge of secure coding languages (e.g., Python, Java, Go).
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About Goldman Sachs
  <br/>
  <br/>
 </strong>
 At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.
 <br/>
 <br/>
 We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.
 <br/>
 <br/>
 We&rsquo;re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html
 <br/>
 <br/>
 &copy; The Goldman Sachs Group, Inc., 2023. All rights reserved.
 <br/>
 <br/>
 Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.
</div>


Asset & Wealth Management - Doha - Vice President - Lead Security Engineering

<div><div><div><div><div><div><div><p><b>Role Overview</b></p>
<p>
The Lead Information Security Officer for Asset Management is a critical leadership position responsible for defining, implementing, and overseeing the comprehensive information security and cybersecurity risk posture specifically within the Asset Management Private business. This role is pivotal in balancing commercial objectives with robust security controls, ensuring the division's resilience against an evolving threat landscape, and protecting client assets and data.</p>
<p>
This leader will directly manage and provide strategic direction to teams responsible for Governance, Risk &amp; Compliance (GRC), Application Security &amp; Advisory, and Product Security functions within Asset Management. Crucially, this role also involves the oversight and guidance of embedded Technology Risk Officers who are assigned to various Asset Management Private business vertical. The objective is to foster a unified and proactive approach to risk management, ensuring regulatory compliance, and enabling secure technological innovation across all Asset Management initiatives.</p><br>
<p></p>
<p><b>
Key Responsibilities</b></p>
<ul><li>
Work with internal application development teams that are developing the next generation of critical business applications, enable them to understand Information Security and Business Resiliency control requirements, and advise on the integration of these controls into their applications</li><li>
Collaborate with the global Application Security Risk, Business Continuity, Risk Measurement, and other global Technology Risk teams to develop and integrate best-in-class security and resiliency controls and practices.</li><li>
Communicate the impact of technology risks and the approach to mitigation/acceptance and provide risk assessment and advisory services to technology engineers, and technology and business management.</li><li>
Assess existing applications for design-related security risks and assist teams in determining appropriate remediation steps</li><li>
Provide guidance to engineering leadership and application developers on existing and emerging threats in the web and mobile application space.</li><li>
Drive adoption of embedded application security controls as part of the Software Development Life Cycle (SDLC).</li><li>
Provide deep subject matter expertise to application teams in secure application design and development approaches and techniques.</li><li>
Contribute to the technical understanding, adoption and convergence of information security standards, solutions and tools.</li><li>
Work with engineers to develop customized security testing strategy to complement the existing security testing program managed by Technology Risk.</li></ul><br>
<p></p>
<p><b>
Skills and Experience Required</b></p>
<ul><li>
Experience: 5+ years of progressive experience in Multi domain Information Security experience such as vendor security, application security, vulnerability management, data loss prevention, data encryption, and infrastructure security.</li><li>
Regulatory &amp; Risk Expertise: Expert knowledge of global financial regulations (e.g., SEC, FINRA, GDPR, CCPA) and proven experience applying risk management methodologies such as FAIR (Factor Analysis of Information Risk) or similar frameworks.</li><li>
Leadership &amp; Management: Proven ability to build, mentor, and lead high-performing global teams of security professionals.</li><li>
Program Management: Proven track record involving collaboration with engineering, technology, second line risk functions and audit partners to deliver projects and facilitate resolution of audit issues within committed timelines.</li><li>
Communication: Exceptional written and oral communication skills, with the ability to articulate complex technical risks and solutions clearly to both technical and executive audiences.</li><li>
Risk Management: Expertise in performing risk assessments, identifying gaps in compliance with information security policies, and recommending effective mitigation strategies.</li><li>
Security Standards: Familiarity with leading security standards and frameworks such as NIST, OWASP, SANS Top 20, PCI DSS, and CIS Controls.</li><li>
<p>Technical Depth: Expertise in Technology Risk data analytics (metrics reporting and dashboarding) and Reviewing Software Development Lifecycle best practices e.g., code reviews, vulnerability scan report analysis to advise application development teams on for secure practices and frameworks, and other application security best practices</p><br>
</li></ul><p></p><p><b>Preferred Qualifications</b></p>
<ul><li>
BS or MS degree in Computer Science, Cyber Security, Information Security, or a related technical field.</li><li>
Relevant industry certifications such as CISSP, CISM, CRISC, CISA, or cloud-specific security certifications (e.g., AWS Certified Security &ndash; Specialty).</li><li>
Experience with leveraging AI/ML to solve security problems and scale operations.</li><li>
Knowledge of secure coding languages (e.g., Python, Java, Go).</li></ul><br>
<p></p>
<p><b>
ABOUT GOLDMAN SACHS</b></p>
<p>
At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.</p>
<p>
We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. about our culture, benefits, and people at GS.com/careers.</p>
<p>
We&rsquo;re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. : https://www.goldmansachs.com/careers/footer/disability-statement.html</p>
<p>
&copy; The Goldman Sachs Group, Inc., 2023. All rights reserved.<br>
<br>
Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.</p></div></div></div></div></div></div><div><div><div><div><div><b>
We Offer Best-In-Class Benefits</b></div></div></div><p></p><div><div><div><div><div><div><div>
Healthcare &amp; Medical Insurance</div></div><p>
We offer a wide range of health and welfare programs that vary depending on office location. These generally include medical, dental, short-term disability, long-term disability, life, accidental death, labor accident and business travel accident insurance.</p></div></div></div></div><p></p><div><div><div><div><div><div>
Holiday &amp; Vacation Policies</div></div><p>
We offer competitive vacation policies based on employee level and office location. We promote time off from work to recharge by providing generous vacation entitlements and a minimum of three weeks expected vacation usage each year.</p></div></div></div></div><p></p><div><div><div><div><div><div>
Financial Wellness &amp; Retirement</div></div><p>
We assist employees in saving and planning for retirement, offer financial support for higher education, and provide a number of benefits to help employees prepare for the unexpected. We offer live financial education and content on a variety of topics to address the spectrum of employees&rsquo; priorities.</p></div></div></div></div><p></p><div><div><div><div><div><div>
Health Services</div></div><p>
We offer a medical advocacy service for employees and family members facing critical health situations, and counseling and referral services through the Employee Assistance Program (EAP). We provide Global Medical, Security and Travel Assistance and a Workplace Ergonomics Program. We also offer state-of-the-art on-site health centers in certain offices.</p></div></div></div></div><p></p><div><div><div><div><div><div>
Fitness</div></div><p>
To encourage employees to live a healthy and active lifestyle, some of our offices feature on-site fitness centers. For eligible employees we typically reimburse fees paid for a fitness club membership or activity (up to a pre-approved amount).</p></div></div></div></div><p></p><div><div><div><div><div><div>
Child Care &amp; Family Care</div></div><p>
We offer on-site child care centers that provide full-time and emergency back-up care, as well as mother and baby rooms and homework rooms. In every office, we provide advice and counseling services, expectant parent resources and transitional programs for parents returning from parental leave. Adoption, surrogacy, egg donation and egg retrieval stipends are also available.</p></div></div></div></div><p></p><div><div><div><div><div><div>
Benefits at Goldman Sachs</div></div><p>
Read more about the full suite of class-leading benefits our firm has to offer.</p></div></div></div></div></div></div></div></div><div></div>
<br><p>Opportunity Overview
CORPORATE TITLE
Vice President
OFFICE LOCATION(S)
Doha
JOB FUNCTION
Security Engineering
DIVISION
Asset &amp; Wealth Management</p>

Arab Solutions

<div>
 <strong>
  Job Title:
 </strong>
 Senior IT Security Consultant / Officer
 <br/>
 <br/>
 <strong>
  Engagement Type:
 </strong>
 2-Month Contract
 <br/>
 <br/>
 <strong>
  Location:
 </strong>
 Qatar
 <br/>
 <br/>
 <strong>
  Position Overview
  <br/>
  <br/>
 </strong>
 We are seeking a highly experienced
 <strong>
  Senior IT Security Consultant / Officer
 </strong>
 for a short-term 2-month engagement to support cybersecurity governance, compliance alignment, and operational security enhancement within a governmental environment.
 <br/>
 <br/>
 The ideal candidate will bring deep expertise in cybersecurity operations, GRC implementation, regulatory compliance (NCSA standards), and hands-on technical security capabilities including SOC coordination, penetration testing, and incident response.
 <br/>
 <br/>
 <strong>
  Key Qualifications &amp; Experience
 </strong>
 <br/>
 <br/>
 <ul>
  <li>
   10&ndash;14 years of experience in Cybersecurity
  </li>
  <li>
   8&ndash;10 years of experience in Information Technology and Networks
  </li>
  <li>
   2&ndash;4 years of experience implementing NCSA standards within a governmental entity
  </li>
  <li>
   2&ndash;4 years of experience in Information Security / Cybersecurity operational roles
  </li>
  <li>
   3&ndash;5 years of experience in Governance, Risk &amp; Compliance (GRC)
  </li>
  <li>
   Proven experience with:
  </li>
  <ul>
   <li>
    ISO/IEC 27000
   </li>
   <li>
    ISO 22301
   </li>
   <li>
    Qatar Cybersecurity Framework
   </li>
   <li>
    National Information Assurance
   </li>
  </ul>
  <li>
   Expertise in:
  </li>
  <ul>
   <li>
    SOC monitoring &amp; analysis
   </li>
   <li>
    Penetration Testing
   </li>
   <li>
    Endpoint security analysis
   </li>
   <li>
    Incident response &amp; root cause analysis
   </li>
  </ul>
  <li>
   Fluency in English and Arabic
  </li>
  <li>
   Valid Driving License (Mandatory)
   <br/>
  </li>
 </ul>
 <strong>
  Required Certifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Cisco Certified Network Associate
  </li>
  <li>
   ISC2 Cybersecurity Certification (e.g., CISSP, SSCP, etc.)
  </li>
  <li>
   VMware Data Center Virtualization
  </li>
  <li>
   Certified Ethical Hacker
  </li>
  <li>
   ISO 27001 Lead Auditor (Preferred)
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Implement and manage Governance, Risk &amp; Compliance (GRC) processes to ensure regulatory alignment.
  </li>
  <li>
   Lead compliance alignment with ISO 27000 series, ISO 22301, QCSF, and NIA requirements.
  </li>
  <li>
   Conduct penetration testing to identify vulnerabilities across organizational systems.
  </li>
  <li>
   Lead cybersecurity incident response efforts, ensuring rapid containment and recovery.
  </li>
  <li>
   Perform root cause analysis of security incidents and implement corrective actions.
  </li>
  <li>
   Collaborate with SOC teams to enhance monitoring, detection, and incident management capabilities.
  </li>
  <li>
   Review, update, and strengthen cybersecurity policies, procedures, and standards.
  </li>
  <li>
   Support audit readiness, documentation, and regulatory reporting activities.
   <br/>
   <br/>
  </li>
 </ul>
 Skills: ncsa standards,ethical hacker,cybersecurity,grc,cissp,nia requirements,soc monitoring,analysis,iso 22301,sscp,qcsf
</div>


Senior IT Security Consultant / Officer

C2HR LLP

<p>Requirements:</p><ul><li>Bachelor&rsquo;s in Computer Science / Information Security / Electrical Engineering</li><li>7+ years in OT/ICS</li><li>Certifications:</li><li>CISA</li><li>CISM</li><li>CRISC</li><li>ISO 27001 Lead Auditor</li><li>IEC 62443</li><li>Strong understanding of:</li><li>Q-CERT</li><li>ISO 27001</li><li>IEC 62443</li></ul><p>Duties:</p><ul><li>Conduct cyber risk assessments</li><li>Perform Business Impact Analysis</li><li>Ensure regulatory compliance</li><li>Lead audits &amp; close findings</li><li>Maintain vulnerability &amp; incident records</li><li>Deliver cybersecurity awareness training</li></ul><p>Job Type: Permanent</p><p>Pay: QAR22,000.00 - QAR30,000.00 per month</p>

OT/ICS Cybersecurity Governance, Risk & Compliance (GRC)

brilliant mind events

<p><b>Job Title:</b> Main Venue Accreditation Officer<br/><b>Location:</b> Doha, Qatar<br/><b>Job Type:</b> Temporary / Event-Based Contract<br/><b>Department:</b> Event Operations</p><p><b>Job Summary:</b></p><p>The Main Venue Accreditation Officer will oversee accreditation processing at the primary event venue, ensuring all staff, contractors, and stakeholders receive appropriate access credentials in compliance with event security protocols.</p><p><b>Key Responsibilities:</b></p><ul><li>Process and issue event accreditation badges</li><li>Validate applicant credentials and access levels</li><li>Coordinate with venue security and operations teams</li><li>Manage accreditation desk operations</li><li>Provide assistance and guidance to event personnel</li><li>Maintain accurate records of issued credentials</li></ul><p><b>Requirements:</b></p><ul><li>Experience in large-scale events or accreditation services</li><li>Strong organizational and multitasking skills</li><li>Professional appearance and customer service mindset</li><li>Ability to handle confidential information</li><li>Good problem-solving skills</li><li>Fluent in English (Arabic preferred)</li></ul><p><b>Preferred Qualifications:</b></p><ul><li>Experience in sports, government, or high-security events</li><li>Familiarity with accreditation management systems</li></ul><p>Job Types: Full-time, Part-time, Permanent, Temporary, Contract</p>

Main Venue Accreditation Officer

PROZ TECHNOLOGIES

<p>Hello,<br/>Greetings from Proztec Qatar! I hope everything is going well with you.</p><p>We are thrilled to extend multiple exciting job opportunities, and currently, we are hiring for the role of <b>Compliance officer</b></p><p>with one of our prestigious clients in Qatar. Below, you will find details of the role, key responsibilities, and requirements.</p><p><b>JOB OVERVIEW</b></p><p><b>JOB TITLE : </b> <b>Compliance officer</b></p><p><b>LOCATION : </b> Doha, Qatar</p><p><b>GENERAL JOB DESCRIPTION</b></p><p>Several advisory services in term of Security Management and Governance are being expected to support the adaptation of the policies, guidelines, for example, covering:</p><p>&middot; Risk management.</p><p>&middot; Threats and vulnerabilities modeling.</p><p>&middot; Attacks path modeling and countermeasures.</p><p>&middot; Managerial aspects concerning information security.</p><p>&middot; Assessment of information security effectiveness and degrees of control.</p><p>&middot; Awareness and Education around security concepts for all stakeholders.</p><p>&middot; Standards for information security.</p><p>&middot; Reporting (e.g. disaster recovery and business continuity).</p><p>&middot; Theoretical and empirical analysis.</p><p>&middot; Economic aspects of the cybersecurity ecosystem.</p><p>&middot; Capability modeling.</p><p>&middot; Liaise with MOTC, Ooredoo and other stakeholders in the project and be the focal point for all cyber security related tasks.</p><p>Build and drive a successful cyber security practice for Tasmu based on Industry and International best practices in the constantly evolving cyber threat landscape.</p><p><b>DUTIES &amp; RESPONSIBILITIES</b></p><p>The <b>Compliance and Audit activity</b> provides the key elements that include:</p><p>&middot; Review existing governance models, structure, and process: Review documentation, capture existing practices, conduct interviews, draw the current landscape, and define the baseline for the engagement activity.</p><p>&middot; Define the targeted level of maturity on the governance level.</p><p>&middot; Perform Gap Analysis: Analyze current organizational governance structures with well-defined industry frameworks, standards, and models &ndash; identify opportunities to strengthen existing methods and structures and/or replace them with new and improved methods.</p><p>&middot; Define Governance Operating Model: Identifies governance structure inconsistencies, overlaps, and gaps among governance mechanisms and maps current governance processes and structures.</p><p>&middot; Plan of Action deliverables: Provides a set of deliverables that provide visibility and insights into the engagement activities, current landscape, achievable target state (i.e., desired state to accomplish), prioritized set of actions with milestones, to lead towards the target state to enhance and strengthen the security framework.</p><p><b>Policy enablement : </b></p><p>&middot; Enable security policies on key aspects such as Digital identification, Global Security, Information Classification, IoT Security, and Organization Governance to improve security based on the emergence of new threats, new technological trends, and national/international regulatory framework evolution.</p><p>&middot; Ensure that policies are applied on use case and IoT services definition.</p><p>&middot; Collaborate with Microsoft on the definition of Cloud-based Security Control Framework to ensure and ease the sharing, compliance, and application of policies as well as the follow-up of the adoption of those policies by all TASMU ecosystem's stakeholders.</p><p><b>Awareness :</b></p><p>The objective of the Awareness activity is to provide training and awareness sessions on information security to TASMU operators/key personnel. This awareness program shall be based on policies, standards, procedures, and best practices previously defined as well as performed in a risk-centric approach to enable TASMU operators to understand the stakes/challenges of cybersecurity within the TASMU program's context.</p><p>The Awareness program should be conducted as an on-going program to ensure that training and knowledge are not just delivered as an annual activity, rather it is used to maintain a high level of security awareness on a daily basis.</p><p>&middot; Assemble the Security Awareness Team</p><p>&middot; Determine Roles for Security Awareness</p><p>&middot; Identify levels of responsibility (Management, specific roles, and all other personnel)</p><p>&middot; Establish Minimum Security Awareness and the depth of the security awareness training required for each stakeholder</p><p>&middot; Determine the content of training and applicability</p><p><b>Risk Management:</b> The Risk Management activity is including risk identification, analysis, and control. In the frame of security operations phases, the following actions are needed:</p><p>&middot; Review and refresh the Risk register</p><p>&middot; Identify points of Risk Acceptance and ownership</p><p>&middot; Identify paths of Risk Escalation</p><p>&middot; Establish Risk Appetite</p><p>&middot; Identify, Analyze &amp; Document</p><p><b>The improvements and modernization will provide benefit by: </b></p><p>&middot; Providing guidelines for governance security and privacy</p><p>&middot; Provide a mapping between client controls and industry standards</p><p>&middot; Ensure that an organization's security policy continues to meet the changing and evolving needs of the underlying business.</p><p>&middot; Maintain on-going situational awareness of the security state of an organization's network, information systems, and the environments in which those systems operate.</p><p><b>Privacy : </b></p><p>Extended knowledge with regulatory contexts such as GDPR, HIPAA, FFIEC, PCI, CJIS, etc. and mapping services with respect to protecting the information (integrity, confidentiality and availability) in accordance with these frameworks and with the policies enforced within the TASMU ecosystem (i.e. Information Classification Policy).</p><p>GDPR knowledge provides a complete approach to compliance, ensuring smooth adoption, and minimizing any future breach risk. Services are broad in scope and cover everything from the initial impact assessment to guidance in the appointment of a Data Protection Officer.</p><p>The Privacy related activities shall be conducted in agreement with incident management and response activities to be able to identify unauthorized presence before data leaks, apply protective measures and in the worst case, identify and retrieve the data leaked (DLP related controls).</p><p><b>SKILLS &amp; ABILITIES</b></p><p>&middot; Experience Excellent interpersonal skills</p><p>&middot; Excellent communication and presentation skills</p><p>&middot; Customer oriented</p><p>&middot; Relevant technology skills.</p><p>&middot; Relevant product and solution skills</p><p>If you are interested and ready to proceed, kindly share your CV in Word format along with the following details:</p><p>Name:</p><p>Nationality:</p><p>Total Experience:</p><p>Relevant Experience:</p><p>Current Location:</p><p>Visa Status:</p><p>Current Salary:</p><p>Expected Salary:</p><p>Notice Period:</p><p>About Proztec:<br/>Proz Technologies (PROZTEC) is a leading ICT specialist firm based in Doha, Qatar (a tax-free country) with over 300 employees. We look forward to the possibility of welcoming you to our growing team.</p><p>Thanks &amp; regards,<br/>Syeda Humera<br/>Recruitment Consultant<br/>Proz Technologies<br/>M: 974-70955929<br/>P: 974-4442-0050 Ext: 109<br/>www.proztec.com</p><p>Job Type: Permanent</p><p>Pay: QAR10,000.00 - QAR15,000.00 per month</p>

Compliance officer

Explore 669+ Information security officer in Doha this March. Find roles across top companies and apply now to boost your career.

669 information security officer jobs In Doha

InfoSec Officer

Asset & Wealth Management - Doha - Vice President - Lead Security Engineering

Asset & Wealth Management - Doha - Vice President - Lead Security Engineering

Senior IT Security Consultant / Officer

OT/ICS Cybersecurity Governance, Risk & Compliance (GRC)

Main Venue Accreditation Officer

Compliance officer