Job Description
Black & Grey HR is recruiting for an established technology solutions and services provider i n Doha, Qatar. Our client is seeking an experienced Information Security Officer who will be responsible for providing ongoing leadership and expertise in information security, ensuring robust protection of organizational assets both during mega sports events and in standard operational periods. This role is responsible for establishing a proactive security posture through comprehensive risk management, policy enforcement, staff education, and incident response.
Key Responsibilities
Information Security Management
- Develop, implement, and maintain the organization's Information Security Policies, Procedures, and the Information Security Management System (ISMS).
- Chair the ISMS committee, facilitating communication and outreach across the organization.
- Enforce and monitor compliance with the IT Information Security Policy, conducting regular assessments to evaluate effectiveness.
- Plan and coordinate all information security activities, including oversight of related assurance functions.
Risk & Vulnerability Management
Conduct organization-wide Risk Assessments covering people, processes, technology, and facilities.Develop Risk Treatment Plans and ensure the implementation of all mandated security controls.Perform regular vulnerability assessments and manage a formal process for risk mitigation.Track, escalate, and report on the resolution of security issues identified in audits and penetration tests.Incident & Problem Management
Establish and manage formal procedures for security incident reporting, response, and escalation.Lead investigations into security events and policy violations, ensuring thorough documentation and resolution.Analyze incidents to identify underlying problems, perform root cause analysis, and implement corrective and preventive actions.Develop and document incident handling, disaster recovery (DR), and IT service contingency plans.Security Implementation & Compliance
Develop and document operational procedures for key areas, including : Network Security Management | Protection against malicious code | Data backup, integrity, and media handling | Secure information exchange and electronic messagingEnsure internal compliance with security policies and external compliance with all applicable laws, regulations, and statutory requirements.Implement continuous monitoring to ensure adherence to operational policies and procedures.People Management & Awareness
Provide performance management, guidance, and development planning for direct reports.Design and deliver organization-wide Information Security awareness and training programs to foster a culture of security.Requirements
Qualifications & Experience
8-10 years of overall experience in systems, network, and IT security, with at least 5-6 years in a dedicated information security management role.Bachelor’s degree in Computer Science, Electronics & Communication, IT, or a related field.Mandatory professional certification in Information Security from an internationally recognized body (e.g., CISSP, CISM, from (ISC)² or ISACA).Required Skills & Competencies
Subject matter expert in information security principles and practices.Bilingual proficiency with Arabic as a mandatory requirement.Proven ability in strategic planning, policy development, and team management.Strong capability in risk assessment, problem-solving, and root cause analysis.Excellent skills in developing policies, delivering training, and reporting to stakeholders.Benefits
Competitive Salary + Benefits PackageRequirements
Qualifications & Experience - 8-10 years of overall experience in systems, network, and IT security, with at least 5-6 years in a dedicated information security management role. - Bachelor’s degree in Computer Science, Electronics & Communication, IT, or a related field. - Mandatory professional certification in Information Security from an internationally recognized body (e.g., CISSP, CISM, from (ISC)² or ISACA). Required Skills & Competencies - Subject matter expert in information security principles and practices. - Bilingual proficiency with Arabic as a mandatory requirement. - Proven ability in strategic planning, policy development, and team management. - Strong capability in risk assessment, problem-solving, and root cause analysis. - Excellent skills in developing policies, delivering training, and reporting to stakeholders.