Senior Information Security Officer

3 weeks ago


Doha, Qatar Talent Pal Full time

JobSummary andPurpose


Drivea strong and robust Information Security Management System (ISMS)in the organization through threat/vulnerability detection securityscanning penetration testing security monitoring vulnerabilitymitigations threat mitigations identifying IT/OT security risks andother related information securityactivities.



Ensure adherenceto the various information security standards and standards andprovide technical consultation on Information Securityissues.

Accountabilities

KeyAccountabilities:

InformationSecurity Management:

1. Identifyinformation security vulnerabilities and threats in the companyIT/OT technology network and infrastructure using varioustechniques e.g. penetration testing and vulnerabilityassessment.
2. Collate information from the conductedassessments and recommend appropriate remedial steps.
3.Develop review improve and update information security policiesprocedures guidelines and other related documents.
4.Provide support to build the organization wide information securityawareness and training programs. Contribute and provide content forawareness activities.
5. Monitor evaluate and ensure thesegregation of duties on all systems to mitigate the risk ofunintentional and/or deliberate system misuse.
6. Ensurecompliance with the applicable internal and internationalinformation security standards (e.g. NIA ISO27001).
7.Monitor changes or updates in any applicable law regulation oraccreditation standards pertaining to Information Security andensure compliance as required.
8. Ensure appropriateadministrative and technical safeguards are in place to protectinformation assets from internal and external threats. Coordinatephysical safeguards for those assets in coordination with theGeneral Services department.
9. Liaise and maintaincontact with governmental authorities regulatory bodies securitygroups and industry forums in the field of InformationSecurity.
10. Prepare security baselines and safeguardapplications operating systems and infrastructure devices byadopting the latest standards.
11. Resolve informationsecurity issues and improve the Information Security performance byproviding technical consultation in system development acquisitionprocurement implementation change management operation/support andarchitectural and other adhoc projects.
12. Assist allorganizational units in areas related to Information Security andfollow the related processes to provide support.

Accountabilities2

13. Workwith the concerned parties on the Information Security incidentsand vulnerability management processes from design toimplementation and beyond.
14. Review technicalinformation in the requirements statements feasibility analysisoperating procedure manuals and other documents produced in theprocess of system development.
15. Monitor and assess ITsystems security system audit trails/logs and the validity ofsystem configurations whenever required.
16. Assist invulnerability mitigation e.g. through software/system patchingthrough the IT department.
17. Assist in performingongoing security monitoring of information systems includingassessing information security risk conducting functional and gapanalyses to determine the extent to which key business areas andinfrastructure comply with statutory and regulatoryrequirements.
18. Evaluate and recommend new informationsecurity technologies and countermeasures against threats toinformation or privacy and develop security reports anddashboards.
19. Ensure identification recording reportingand resolving any Information Security violations.
20.Support and assist the other activities linked with Enterprise Riskand Business Continuity Management such as Risk Assessments andBusiness Impact Analysis.
21. Support the development ofthe organizations disaster recovery and business continuity plansfor information security and testsreadiness.

GenericAccountabilities:

QualityHealth Safety & Environment (QHSE):
22.Adhere to all relevant QHSE policies procedures instructions andcontrols so that NAKILAT provides a safe world class secure andenvironmentally responsible service to customers the public and itsown people.

Policies Systems Processes& Procedures:
23. Implement approvedpolicies processes and procedures and provide instructions tosubordinates to ensure their properimplementation.

Others:
24. Carry out any other duties as directed by the immediatesupervisor.

Accountabilities3Accountabilities4CompetenciesInteractive Communication Collaboration& Teamwork Drive Vision Solution Oriented Customer Centricity Achievement Oriented Empower & Nurture TalentKey ResultAreas
  • Contributeto the development and management of policies and procedures forthe Information Security ManagementSystem.
  • Develop coordinate and conductorganization wide information security awareness programs andtrainings.
  • Prepare Information Security relatedrisk assessments reports and other relevantdocumentation.
  • Conduct the required activitiesto identify threats and vulnerabilities for IT and OTinfrastructure.
  • Monitor various InformationSecurity systems.
  • Drive the vulnerabilitypatching.
Interactions and WorkingRelations


Internal: Interaction with all staff oninformation security activities such as data classification accessreview threats/vulnerabilities identification and mitigationsupport and contribution to information security initiatives andprojects.
External: Interface withvendors and external auditors and organizations for informationsecurity relatedmatters

FinancialAuthorities

AsperTOFA.

Qualifications Experience and JobSkills

Qualifications:

  • BachelorsDegree in Computer Science or any other equivalentfield.
  • Certified Information Systems SecurityProfessional (CISSP) Certified Ethical Hacker (CEH) and CertifiedISO27001 Lead implementer arepreferred.
  • Globally recognized credentialcertification is preferred in Information Security domain forexample CISMISO27001LA.


Experience:
  • Minimumof 4 years of Information Securityexperience.
  • IT background ispreferred.


Job SpecificSkills:
  • Ability to managepressure prioritize needs requirements and positively interact withthe company users and external parties.
  • Abilityto trouble shoot and investigate information securityincidents.
  • Knowledge of Information SecurityManagement System (ISO 27001) and other Information Securityframework (NIST).
  • Security relatedqualifications (e.g. CISSP CISM CEH ISO 27001LI/LA).

JobSpecific Competencies:
ii.Technical

8) Business /IndustryKnowledge
9) Enterprise Risk Management
10)Business Risk
11) Risk Project Management
12)Business Continuity Management
13) Governance
14) Risk Management Methodology/Process
15) RiskIdentification and Assessment
16) Business ImpactAnalysis
17) Risk Response & Reporting
18) Risk Mitigation & Control
19) InformationSecurityManagement

SeniorInformation Security OfficerDepartment: Business Support ServicesCity: Ras Laffan


Job Segment: Information Security InformationSystems Testing Change Management Computer Science TechnologyManagement

Thisjob has been sourced from an external job board.
Morejobs on

  • Doha, Qatar Talent Pal Full time

    Job Summary and PurposeDrive a strong and robust Information Security Management System (ISMS) in the organization through threat/vulnerability detection security scanning penetration testing security monitoring vulnerability mitigations threat mitigations identifying IT/OT security risks and other related information security activities. Ensure adherence to...


  • Doha, Qatar Talent Pal Full time

    **Job Summary and Purpose**: Drive a strong and robust Information Security Management System (ISMS) in the organization through threat/vulnerability detection, security scanning, penetration testing, security monitoring, vulnerability mitigations, threat mitigations, identifying IT/OT security risks and other related information security activities. Ensure...


  • Doha, Qatar Carnegie Mellon University Full time

    The Senior Information Security Engineer (SISE) is responsible security tool implementation and administration and for monitoring, investigation, response and support tasks related to the operation of the University's information security program with a primary focus on compliance areas by: - Monitoring and responding to network intrusion, system log, and...


  • Doha, Qatar Injazat Information Technology Full time

    Responsibilities: Collaboratingwith department managers to determine securityneeds. Planning and implementing comprehensivesecurity strategies. Controlling the securityoperations budget, monitoring expenses, and documentingprocesses. Supervising, recruiting, andtraining security personnel. Gathering securityintelligence and implementing preventativemeasures....


  • Doha, Baladīyat ad Dawḩah, Qatar Qatar Petroleum Full time

    Job SummaryLead Information Security projects and report regularly on their progress. Coordinate and provide expert technical support by integrating Cyber & Information Security requirements into ICT projects, OT and Infrastructure projects, and review and validate the effective implementation of Cyber & Information Securityrequirements into project...


  • Doha, Qatar Qatar Petroleum Full time

    Job SummaryLead Information Security projects and report regularly on their progress. Coordinate and provide expert technical support by integrating Cyber & Information Security requirements into ICT projects, OT and Infrastructure projects, and review and validate the effective implementation of Cyber & Information Securityrequirements into project...


  • Doha, Qatar qatar petroleum doha Full time

    Responsiblity:Monitor computer networks for security issues.Investigate security breaches and other cybersecurity incidents.Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs.Document security breaches and assess the damage they cause.Work with the security team...


  • Doha, Qatar Robert Walters Full time

    Requirements For The Role✔ 7+ years of experience in Information Security✔ Develop and monitor a strategic, comprehensive enterprise information /cyber security risk management program to ensure protection of digital anddata assets✔ Implement and lead the strategy for managing and reporting securityincidents and oversee investigations of reported...


  • Doha, Qatar Robert Walters Full time

    Requirements For TheRole✔ 7+ years of experiencein Information Security✔ Develop and monitora strategic, comprehensive enterprise information/cyber security risk management program toensure protection of digital anddataassets✔ Implement and lead the strategy formanaging and reporting securityincidents andoversee investigations of reported...


  • Doha, Qatar Injazat Information Technology Full time

    Responsibilities: Collaboratingwithdepartment managers to determine securityneeds. Planning andimplementing comprehensivesecurity strategies. Controlling thesecurityoperations budget, monitoring expenses, anddocumentingprocesses. Supervising, recruiting, andtraining securitypersonnel. Gathering securityintelligence and implementingpreventativemeasures....


  • Doha, Qatar qatar petroleum doha Full time

    Responsiblity:Monitorcomputer networks for securityissues.Investigate security breaches and othercybersecurity incidents.Install securitymeasures and operate software to protect systems and informationinfrastructure, including firewalls and data encryptionprograms.Document security breaches and assessthe damage they cause.Work with the securityteam to...


  • Doha, Qatar Robert Walters Full time

    Information Security Architect– Duties AndExperienceDomainArchitect Responsible forcurrent and target security architecture forgroupWork with group stakeholders, technicalteams, external vendors and partnersDevSecOpsWork with technical teams to embedDevSecOps cultureWork across group technologyand data functionsMentorLeading team members or...


  • Doha, Qatar Robert Walters Full time

    Information Security Architect – Duties And ExperienceDomain Architect Responsible for current and target security architecture for groupWork with group stakeholders, technical teams, external vendors and partners DevSecOps Work with technical teams to embed DevSecOps cultureWork across group technology and data functions Mentor Leading team members or...


  • Doha, Baladīyat ad Dawḩah, Qatar Qatar Petroleum Full time

    Job SummaryInformation Security Monitoring Analyst is an alert management analyst, responsible for monitoring, analysing and responding to information and operational security alerts triggered by Security Information and Event Management (SIEM) and Threat intelligence feeds. Primary responsibilities detect anomaly and potential security threats, filtering...


  • Doha, Qatar Raytheon Full time

    Qualifications We Value: Experience working in DoD classified operating and/or laboratory environmentsExperience with various information system security tools that address vulnerability analysis and mitigation. These may include Splunk, Forcepoint, Ivanti, Tenable, ACAS, HBSS, etc.Familiarity with implementation of Government directives and policies derived...


  • Doha, Baladīyat ad Dawḩah, Qatar Bay Avenue Tours Full time

    Job SummaryIn this role you will provide security operational support, coordination and management across the Passenger Terminal Complex and associated landside and airside facilities reporting into The Airport Security Operations Center Duty Manager.You will need to liase and direct effectively with all other airport stakeholders to ensure passenger, staff...


  • Doha, Qatar Bay Avenue Tours Full time

    Job SummaryIn this role you will provide security operational support, coordination and management across the Passenger Terminal Complex and associated landside and airside facilities reporting into The Airport Security Operations Center Duty Manager.You will need to liase and direct effectively with all other airport stakeholders to ensure passenger, staff...


  • Doha, Qatar Hamad International Airport Full time

    Job SummaryIn this role, you need to have a bachelor degree or equivalent with essential of qualified security area. Minimum of 4 years operation experience in Aviation Security Supervision with knowledge of emergency plans and AVSEC security principles. You must have good knowledge of computer literacy of MS Office applications and great command of English...


  • Doha, Qatar Al Nasr star security services Full time

    Job Title: Security Supervisor Location: Doha, Qatar (Local Hiring) **Position Overview**: **Qualifications**: Minimum of 5-7 years of experience in security management, with at least 3 years in a supervisory role. Age between 30 to 40 years. Proven experience in security management. High school diploma or equivalent; additional certifications in...


  • Doha, Baladīyat ad Dawḩah, Qatar Hamad International Airport Full time

    Job SummaryIn this role, you need to have a bachelor degree or equivalent with essential of qualified security area. Minimum of 4 years operation experience in Aviation Security Supervision with knowledge of emergency plans and AVSEC security principles. You must have good knowledge of computer literacy of MS Office applications and great command of English...