38 Security Officer jobs in Qatar

Overview

Job Title: Security Officer (Cyber Security)

The Security Officer will be responsible for monitoring, analyzing, and safeguarding the organization’s IT/OT infrastructure against cyber threats. The role involves incident management, vulnerability assessments, security tool management, and ensuring compliance with approved security frameworks and policies.

• Monitor data and network traffic (internal and external) to detect and report suspicious activities.
• Analyze, triage, and remediate security incidents, including malware and vulnerability management.
• Manage, operate, and update security tools (SIEM, SOAR, Firewalls, Sandboxing, VPNs, etc.).
• Enforce security and access control policies; identify and report misuse or abuse of access.
• Provide security consultations to developers, network engineers, and related teams.
• Conduct vulnerability assessments, penetration testing, and ensure timely mitigation of risks.
• Stay updated on the latest IT/OT cyber threats, attacks, and security trends.
• Ensure adherence to Qatar-approved security frameworks and best practices.

• Bachelor’s degree in Information Security, Computer Science, Computer Engineering, or related field.
• Minimum 8+ years of experience in cyber security.
• Strong knowledge of networking principles (TCP/IP, WAN, LAN, Internet protocols, OT segmentation).
• Good understanding of cloud environments, client-server and web applications, and relational databases.
• Excellent command of English (reading and writing).
• Relevant certifications in Information Security are required (e.g., CISSP, CISM, CEH, etc.).

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Information Technology

Primary responsible for planning, coordinating, and organizing Information Security activities.

Enforce and monitor the implementation and compliance with IT Information Security Policy.

Develop and manage the implementation of Information Security Policies and Procedures.

Ensure Risk Assessments are conducted on all information systems such as people, process, technology, and information processing facilities.

Ensure implementation of all Information Security controls, as set forth in the Risk Treatment Plan, to ensure adequate security for the respective system.

Conduct Information Security communications and outreach by leveraging the Information Security Management System (ISMS) committee.

Establish appropriate measures to assess operational capabilities and determine compliance and effectiveness levels with Information Security Policy.

Supervise other related assurance functions, as necessary.

Ensure the compliance of Information Security Policies in the organization.

Develop and ensure implementation of Information Security procedures.

Develop and ensure implementation of incident handling and reporting.

Follow-up, escalate, and report the resolution of Information Security issues identified during security assessments, penetration tests, and audits.

Develop, implement, and maintain Disaster Recovery (DR) procedures and infrastructure in relation to the Business Continuity Plan (BCP) / IT Service Contingency Plan.

Conduct and coordinate Information Security awareness and orientation programs.

Responsible for conducting Committee meetings.

Security Incident Management

Establish a formal procedure for internally reporting and tracking security incidents. Ensure incident response and escalation procedures are followed, and inform all employees, contractors, and third-party users of their responsibility to report security incidents.

Incident Handling :

Participate and / or oversee the investigation and management of information security events and policy violations and track them to conclusion.

Incident Notification and Reporting :

Follow policy for the notification and reporting of incidents immediately upon discovery.

Corrective / Preventive Actions :

Develop and document corrective action plans and implement preventive actions to mitigate recurrence.

Analyze a security incident to detect an underlying problem that exists or is likely to exist.

Categorize and prioritize the problem based on the frequency, severity, and impact of the incident.

Investigate and diagnose the root cause of the problem.

Test and apply temporary workarounds.

Document the known error record.

Create a formal process to address risk through the coordination and control of activities regarding each risk.

Conduct formal vulnerability assessments of the environment on a regular basis.

Create a formal process to mitigate vulnerabilities and more.

Qualifications

Experience

8+ years in IT work experience

5+ years in a similar role

Education

Bachelor of Engineering

Or Bachelor of IT

Or Bachelor of Computer Science

Certifications

CRISC – Certified in Risk and Information Systems Control

Or ISO / IEC 27001 Lead Implementer or Lead Auditor

Or CISSP – Certified Information Systems Security Professional

Required Skillset

Expertise in implementation of security frameworks such as NIST , ISO / IEC 27001 , and other local regulations and frameworks.

Expertise in compliance requirements like GDPR , HIPAA , PCI DSS , SOX , and other relevant laws and regulations.

Expertise in conducting risk assessments , identifying security risks, evaluating impact, and implementing mitigation strategies.

Expertise in developing policies , procedures , and processes .

Expertise in creating and managing security awareness and training programs to educate employees on cybersecurity threats and best practices.

Information Security Officer • Doha, ad-Dawhah, Qatar

Role Purpose

The Information Security Officer (ISO) will be responsible for developing, implementing, and overseeing the bank’s information security strategy, policies, and controls. The role ensures that the bank’s data, systems, applications, and infrastructure are safeguarded against internal and external threats while meeting local regulatory requirements (QCB, QFCRA, NCSA-Q) and international standards (ISO 27001, NIST, GDPR, PCI-DSS as relevant).

Governance & Compliance

• Establish, maintain, and enforce the bank’s information security framework, aligned with QCB, QFCRA, and local cybersecurity regulations.
• Ensure compliance with international standards (ISO 27001, NIST CSF, COBIT, PCI-DSS) and conduct regular gap analyses.
• Prepare and present security risk assessments and reports to senior management, regulators, and the Board Risk Committee.
• Design, implement, and enforce security policies and procedures to safeguard the bank’s infrastructure and data.

Security Operations

• Oversee Security Operations Center (SOC) activities, incident response, and threat intelligence monitoring.
• Develop and maintain business continuity, disaster recovery, and incident response plans.
• Implement and monitor Data Loss Prevention (DLP), intrusion detection/prevention (IDS/IPS), endpoint protection, and other security tools.
• Lead investigations of security breaches, develop strategies for handling incidents, and ensure lessons learned are integrated into policies and processes.
• Stay current with the latest security systems, standards, and products to ensure optimal protection.
• Regularly evaluate the effectiveness of security measures and update them against emerging threats and industry best practices.
• Conduct regular staff training on security awareness, best practices, and incident procedures.
• Collaborate with IT and business management to continuously improve security controls and culture.

Risk Management

• Conduct enterprise-wide risk assessments on systems, applications, vendors, and third-party service providers.
• Identify vulnerabilities and ensure timely remediation through patch management and secure configurations.
• Work with IT and business units to integrate security into new product initiatives.

Vendor & Technology Oversight

• Evaluate and approve technology vendors, outsourcing partners, and cloud solutions for compliance with security standards.
• Manage penetration tests, vulnerability assessments, and external audits.

Requirements

• Bachelor’s degree in information security, Computer Science, or related field. Master’s degree preferred.
• Professional certifications: CISSP or CISM required; CISA and ISO 27001 Lead Implementer preferred.
• Cloud security certifications (e.g., CCSP, AWS Security) are a plus.
• 8–12 years in information security, with at least 5 years in the financial-services sector.
• Strong background in banking systems, digital channels, payment systems, and regulatory environments.
• Proven experience engaging with regulators (QCB, QFCRA, CMA, or equivalent).
• Proven experience in implementing SEIM Solutions, managing SOC Team.
• Expertise in cybersecurity frameworks, network security, cryptography, and identity & access management.
• Strong risk management and analytical skills.
• Excellent communication and stakeholder-management skills, capable of engaging effectively with regulators, auditors, and the Board.
• Ability to influence across departments, build a culture of security, and lead change initiatives without direct authority