social media specialist

cloud security (infosec) specialist Jobs in Doha

cloud security (infosec) specialist

grc analyst (information security) Jobs in Doha

grc analyst (information security)

it specialist

planning specialist

information security specialist

Forvis Mazars in Qatar

<div>About Us: 
Forvis Mazars LLC is a firm registered under Qatar Financial Center in Qatar with License Registration No. 00634 established on 26 February 2019. However, we have been operating in the Qatari market for 40+ years under our sister entity, Mazars Consultants Auditors and Partners, established under Ministry of Commerce and Industry.
 
We have been the firm of choice by the local market with a strong foothold in the State by being in the industry for more than 40 years. 
Forvis Mazars LLC is a fully Integrated partner with Forvis Mazars group with access to all global resources and expertise.
 
Forvis Mazars in Qatar has been operating and serving the Qatari market with a wide range of experience in auditing, taxation, consulting and financial advisory services. The partners and professional team have international and diversified experience and have a thorough knowledge of the market. 

 
Responsibilities:

<ul><li>Develop and implement cybersecurity strategies and controls.
</li>
</ul><ul><li>Administer firewalls, IDS/IPS, EDR, and DLP systems.
</li>
</ul><ul><li>Conduct vulnerability assessments and incident monitoring.
</li>
</ul><ul><li>Manage identity and access controls.
</li>
</ul><ul><li>Contribute to Business Continuity (BCP) and Disaster Recovery (DR) planning.</li> 

</ul>
 
Requirements:

<ul><li>Bachelor&rsquo;s degree in IT/Cybersecurity, CompTIA Security+ or CEH, CISM/CISSP preferred,
</li>
</ul><ul><li>5+ years&rsquo; experience.
</li>
</ul><ul><li>Advanced communication skills
</li>
</ul><ul><li>Leadership skill
</li>
</ul><ul><li>Fluent in English and Arabic (Speaking, reading and writing)
</li>
</ul>Ready to join with short notice 
<ul><li>
</li></ul> 
Benefits: 
Attractive salary and benefits.</div>

Information Security Specialist

Traffic Tech (Gulf)

<div>Educational Qualifications
<ul>
<li>Bachelor&rsquo;s Degree / Master&rsquo;s in IT or a relevant discipline.</li>
<li>Relevant certifications like CISSP, CEH, Security+, or specialized vendor certifications.</li>
</ul>
Skills Required:
<ul>
<li>Deep knowledge of network security, operating systems, cloud security principles, and cryptographic protocols. Hands-on experience with security tools like SIEM, vulnerability scanners, and endpoint detection and response (EDR).</li>
</ul>
Trainings:
<ul>
<li>CISSP, CEH, Security+</li>
</ul>
Brief Job Description:
<ul>
<li>Responsible for designing, implementing, and maintaining security controls and systems to protect company data, while also managing risk assessments and mitigation strategies in alignment with ISO 27001 standards.</li>
</ul>
Key Responsibilities: 
<ul>
<li>Develop and maintain security architecture and controls (e.g., firewalls, encryption, access management).</li>
<li>Conduct regular vulnerability assessments and penetration tests to identify and prioritize security weaknesses.</li>
<li>Conduct regular risk assessments and maintain the risk register.</li>
<li>Identify, evaluate, and mitigate information security risks.</li>
<li>Perform vulnerability scans and penetration testing.</li>
<li>Monitor and respond to security incidents and breaches.</li>
<li>Support internal and external audits with technical evidence.</li>
<li>Collaborate with IT, compliance, and business units to ensure ISMS effectiveness.</li>
<li>Stay updated on emerging threats and recommend proactive measures.</li></ul></div>

Information Security Engineer

<div>
 <ul>
 <li>
 Run stakeholder Servicesshops to identify data domains, critical data elements (CDEs), owners/stewards, and business processes.
 
 </li>
 <li>
 Build and maintain the data inventory/catalog (systems, datasets, flows, lineage) and keep ownership metadata current.
 
 </li>
 <li>
 Define and operationalize the data taxonomy (classification levels, handling rules) and ensure labels propagate across systems.
 
 </li>
 <li>
 Perform data discovery and gap assessments to locate sensitive data (e.g., PII,SPI) and reconcile scan results with the catalog.
 
 </li>
 <li>
 Translate privacy &amp; policy requirements into controls (access models, masking, retention, encryption) and document control mappings.
 
 </li>
 <li>
 Design and enforce access control models (least privilege, RBAC/ABAC, purpose-based access), including periodic access reviews.
 
 </li>
 <li>
 Establish data protection baselines for storage, transfer, and processing (e.g., encryption in transit/at rest, key hygiene, segregation).
 
 </li>
 <li>
 Configure and tune DLP/egress policies across channels (endpoint, email, web/cloud, storage) and reduce false positives.
 
 </li>
 <li>
 Implement data masking/tokenization strategies for production, analytics, and non-prod environments; manage detokenization approvals.
 
 </li>
 <li>
 Define and monitor security telemetry (auth, data access, key usage, admin events) and create detections for anomalous data activity.
 
 </li>
 <li>
 Lead/assist data-related incident response (scoping, containment, evidence handling, root cause, corrective actions, lessons learned).
 
 </li>
 <li>
 Implement retention &amp; disposal controls (schedules, holds, verification of deletion) and align backups/archives with policy.
 
 </li>
 <li>
 Assess third-party and SaaS data risks (contracts, DPAs, data flow reviews) and track remediation with vendors and owners.
 
 </li>
 <li>
 Produce dashboards and KPIs/KRIs (coverage, data classification completeness, DLP precision, access review closure, incident MTTR).
 
 </li>
 <li>
 Create and maintain documentation &amp; training (standards, playbooks, runbooks, onboarding materials) and brief stakeholders regularly.
 
 
 
 
 </li>
 </ul>
 Requirements
 
 
 <ul>
 <li>
 Bachelors in computer science, Information Security, IT and equivalent hands‑on experience.
 
 </li>
 <li>
 Certifications : ISO/IEC 27701 Lead Implementer/Auditor , CISSP, CIPM and any relevant certifications
 
 </li>
 <li>
 Clear written and verbal communication
 
 </li>
 <li>
 4+ years in information security with at least 2 years focused on data security/privacy (data discovery, classification/taxonomy, DLP, masking/tokenization, retention/disposal, DPIA/PIA, RoPA).
 
 </li>
 </ul>
</div>

Data Security Specialist/Data Security Analyst (Information Security)

ECCO Gulf Majorel Qatar

<div>Job Description
Job Specific Skills<div> 
<ul><li>Cloud Governance and Standards.</li><li>Risk &amp; Exception Management: Run risk assessments on cloud services/Servicesloads; propose compensating controls; operate exception register with expiry and review cadence.</li><li>Identity &amp; Access Governance: Design RBAC/ABAC models, SoD matrices, privileged access patterns, break-glass procedures; lead quarterly access reviews with evidence capture.</li><li>Data Protection: Classify data; specify encryption at rest/in transit; key management lifecycle (KMS/Key Vault/Cloud KMS), BYOK/HYOK guidance, DLP guardrails.</li><li>Logging &amp; Monitoring Requirements: Define mandatory telemetry. (CloudTrail/Azure Activity/GCP Audit), retention/integrity controls, and SIEM onboarding schema/use cases.</li><li>Posture Management (CSPM/CIEM/CNAPP): Configure and tune policies; triage high-severity findings; route ownership; track remediation SLAs and metrics.</li><li>IR Enablement (Cloud): Author cloud-specific playbooks (privilege escalation, exposed storage, key compromise); define evidence collection and containment prerequisites for SOC.</li><li>Compliance &amp; Audit Readiness: Map controls to ISO 27001/GDPR/NIA/Qatar Cloud Policy frameServices/ etc.; produce test procedures and evidence plans; support audits without material findings.</li><li>Stakeholder Communication: Clear, concise risk narratives and decision records for engineering leads, product owners, and auditors.</li><li>Nice-to-Have / Depth Areas</li></ul>
o DevSecOps Oversight: Policy-as-code checks (OPA/Kyverno/Conftest), IaC compliance gates 
(Terraform/ARM/Bicep), artifact integrity (signing/SBOM/SLSA) governance focus. 
o Kubernetes/Container Governance: Pod Security Standards, admission policy governance, registry controls, and runtime policy baselines. 
o SaaS Security Reviews: Due diligence and ongoing assurance for high-risk SaaS (identity, data residency, logging, export controls). 
o Data Residency &amp; Sovereignty: Regulatory mapping and guardrail design for regional constraints.</div>
Minimum Qualification

Bachelor&rsquo;s in computer science, Information Security, IT and equivalent 
hands&#8209;on experience.
Certifications

CCSP, CISSP, ISO 27001 Lead Implementer/Auditor, Microsoft SC&#8209;100/SC&#8209;200, AWS Security&#8209;Specialty, 
GCP Manpower Cloud Security Engineer. 
Knowledge: CIS Benchmarks, ISO 27001/27017/27018, NIST 800&#8209;53/CSF, CSA CCM, MITRE ATT&amp;CK (Cloud). 
Minimum Experience
3&ndash;5+ years cloud security (governance/assurance) with hands-on in at least one major cloud.</div>

Cloud Security (InfoSec) Specialist

ECCO Gulf WLL

<div>
 
 Job Description
 
 
 
 
 Job Specific Skills
 
 
 
 <ul>
 <li>
 Cloud Governance and Standards.
 </li>
 <li>
 Risk &amp; Exception Management: Run risk assessments on cloud services/Servicesloads; propose compensating controls; operate exception register with expiry and review cadence.
 </li>
 <li>
 Identity &amp; Access Governance: Design RBAC/ABAC models, SoD matrices, privileged access patterns, break-glass procedures; lead quarterly access reviews with evidence capture.
 </li>
 <li>
 Data Protection: Classify data; specify encryption at rest/in transit; key management lifecycle (KMS/Key Vault/Cloud KMS), BYOK/HYOK guidance, DLP guardrails.
 </li>
 <li>
 Logging &amp; Monitoring Requirements: Define mandatory telemetry. (CloudTrail/Azure Activity/GCP Audit), retention/integrity controls, and SIEM onboarding schema/use cases.
 </li>
 <li>
 Posture Management (CSPM/CIEM/CNAPP): Configure and tune policies; triage high-severity findings; route ownership; track remediation SLAs and metrics.
 </li>
 <li>
 IR Enablement (Cloud): Author cloud-specific playbooks (privilege escalation, exposed storage, key compromise); define evidence collection and containment prerequisites for SOC.
 </li>
 <li>
 Compliance &amp; Audit Readiness: Map controls to ISO 27001/GDPR/NIA/Qatar Cloud Policy frameServices/ etc.; produce test procedures and evidence plans; support audits without material findings.
 </li>
 <li>
 Stakeholder Communication: Clear, concise risk narratives and decision records for engineering leads, product owners, and auditors.
 </li>
 <li>
 Nice-to-Have / Depth Areas
 </li>
 <li>
 DevSecOps Oversight: Policy-as-code checks (OPA/Kyverno/Conftest), IaC compliance gates
 
 
 </li>
 </ul>
 (Terraform/ARM/Bicep), artifact integrity (signing/SBOM/SLSA) governance focus.
 
 
 <ul>
 <li>
 Kubernetes/Container Governance: Pod Security Standards, admission policy governance, registry controls, and runtime policy baselines.
 </li>
 <li>
 SaaS Security Reviews: Due diligence and ongoing assurance for high-risk SaaS (identity, data residency, logging, export controls).
 </li>
 <li>
 Data Residency &amp; Sovereignty: Regulatory mapping and guardrail design for regional constraints.
 
 
 </li>
 </ul>
 
 Minimum Qualification
 
 
 
 Bachelor&rsquo;s in computer science, Information Security, IT and equivalent
 
 
 hands‑on experience.
 
 
 
 Certifications
 
 
 
 CCSP, CISSP, ISO 27001 Lead Implementer/Auditor, Microsoft SC‑100/SC‑200, AWS Security‑Specialty,
 
 
 GCP Manpower Cloud Security Engineer.
 
 
 Knowledge: CIS Benchmarks, ISO 27001/27017/27018, NIST 800‑53/CSF, CSA CCM, MITRE ATT&amp;CK (Cloud).
 
 
 
 Minimum Experience
 
 
 
 3&ndash;5+ years cloud security (governance/assurance) with hands-on in at least one major cloud.
</div>

<div>
 <ul>
 <li>
 Cloud Governance and Standards
 
 </li>
 <li>
 Risk &amp; Exception Management: Run risk assessments on cloud services/Servicesloads; propose compensating controls; operate exception register with expiry and review cadence.
 
 </li>
 <li>
 Identity &amp; Access Governance: Design RBAC/ABAC models, SoD matrices, privileged access patterns, break-glass procedures; lead quarterly access reviews with evidence capture.
 
 </li>
 <li>
 Data Protection: Classify data; specify encryption at rest/in transit; key management lifecycle (KMS/Key Vault/Cloud KMS), BYOK/HYOK guidance, DLP guardrails
 
 </li>
 <li>
 Logging &amp; Monitoring Requirements: Define mandatory telemetry (CloudTrail/Azure Activity/GCP Audit), retention/integrity controls, and SIEM onboarding schema/use cases.
 
 </li>
 <li>
 Posture Management (CSPM/CIEM/CNAPP): Configure and tune policies; triage high-severity findings; route ownership; track remediation SLAs and metrics.
 
 </li>
 <li>
 IR Enablement (Cloud): Author cloud-specific playbooks (privilege escalation, exposed storage, key compromise); define evidence collection and containment prerequisites for SOC.
 
 </li>
 <li>
 Compliance &amp; Audit Readiness: Map controls to ISO 27001/GDPR/NIA/Qatar Cloud Policy frameServices/ etc.; produce test procedures and evidence plans; support audits without material findings.
 
 </li>
 <li>
 Stakeholder Communication: Clear, concise risk narratives and decision records for engineering leads, product owners, and auditors.
 
 </li>
 <li>
 Nice-to-Have / Depth Areas:
 
 </li>
 </ul>
 - DevSecOps Oversight: Policy-as-code checks (OPA/Kyverno/Conftest), IaC compliance gates (Terraform/ARM/Bicep), artifact integrity (signing/SBOM/SLSA) governance focus.
 
 - Kubernetes/Container Governance: Pod Security Standards, admission policy governance, registry controls, and runtime policy baselines.
 
 - SaaS Security Reviews: Due diligence and ongoing assurance for high-risk SaaS (identity, data residency, logging, export controls).
 
 - Data Residency &amp; Sovereignty: Regulatory mapping and guardrail design for regional constraints.
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 Bachelor&rsquo;s in computer science, Information Security, IT and equivalent hands‑on experience.
 
 </li>
 <li>
 Certifications (nice‑to‑have): CCSP, CISSP, ISO 27001 Lead Implementer/Auditor, Microsoft SC‑100/SC‑200, AWS Security‑Specialty, GCP Manpower Cloud Security Engineer.
 
 </li>
 <li>
 Knowledge: CIS Benchmarks, ISO 27001/27017/27018, NIST 800‑53/CSF, CSA CCM, MITRE ATT&amp;CK (Cloud)
 
 </li>
 <li>
 5+ years cloud security (governance/assurance) with hands-on in at least one major cloud.
 
 </li>
 </ul>
</div>

Liverpool John Moores University | Oryx University, Doha, Qatar

<div>
 
 
 Web Specialist
 
 
 
 
 Are you a detail-oriented web professional with a passion for creating and maintaining engaging online experiences? We are seeking a skilled and proactive Website Manager / Web Specialist to oversee the technical health, functionality, and performance of our digital platforms. If you thrive in a dynamic environment and possess a strong blend of technical expertise and problem-solving skills, we encourage you to apply!
 
 
 
 
 Job Profile
 
 
 
 <ul>
 <li>
 Website Maintenance &amp; Update
 
 </li>
 <li>
 HTML5, CSS, and JavaScript
 
 </li>
 <li>
 Managing the CMS
 
 </li>
 <li>
 Development &amp; Implementation
 
 </li>
 <li>
 Performance &amp; Optimization
 
 </li>
 <li>
 Security Management
 
 </li>
 <li>
 SEO &amp; Analytics
 
 </li>
 <li>
 Troubleshooting &amp; Support
 
 </li>
 <li>
 Backup &amp; Recovery
 
 </li>
 <li>
 Collaboration
 
 </li>
 <li>
 Technology Research
 
 </li>
 <li>
 Hosting &amp; Domain Management
 
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 
 
 
 
 
 
 Requirements
 
 
 
 <ul>
 <li>
 
 Education:
 
 Bachelor's degree in Computer Science, Information Technology, Web Development, or a related field. (Equivalent practical experience will also be considered.)
 
 </li>
 <li>
 
 Experience:
 
 
 </li>
 <li>
 Minimum of 3-5 years of proven experience in website management, web development, or a similar role.
 
 </li>
 <li>
 Demonstrable portfolio of previous web projects or managed websites.
 
 </li>
 </ul>
 
 
 Expected Technical Proficiency
 
 
 
 <ul>
 <li>
 Proficiency with Content Management Systems (CMS) such as WordPress, Drupal, Joomla or similar platforms, including theme and plugin customization.
 
 </li>
 <li>
 Understanding of web security best practices and common vulnerabilities.
 
 </li>
 <li>
 Strong hands-on experience in developing responsive web interfaces using HTML5, CSS, and JavaScript.
 
 </li>
 <li>
 Experience with web analytics tools (e.g., Google Analytics) and SEO best practices.
 
 </li>
 <li>
 Basic graphic design skills for image optimization and web asset creation (e.g., Adobe Photoshop, GIMP).
 
 </li>
 </ul>
</div>

Web Specialist

Explore 1255+ Information security specialist in Doha this December. Find roles across top companies and apply now to boost your career.

1255 information security specialist jobs IN Doha

Information Security Specialist

Information Security Engineer

Data Security Specialist/Data Security Analyst (Information Security)

Cloud Security (InfoSec) Specialist

Cloud Security (InfoSec) Specialist

Cloud Security (InfoSec) Specialist

Web Specialist