Security Operations Officer – Data Security Specialist

Security Operations Officer – Data Security Specialist

Monthly salary: QAR
80,000 - QAR
180,000 per year. Company:
Black & Grey HR.

Location:

Doha, Qatar. Posted today.

Black & Grey HR is recruiting for an established technology solutions and services provider in Doha, Qatar. The client seeks an experienced Security Operations Officer – Data Security Specialist responsible for safeguarding sensitive data across enterprise, cloud, and AI environments. The role is central to implementing advanced data protection controls, managing cryptographic practices, ensuring regulatory compliance, and strengthening overall data governance.

• Data Security Engineering:
  Design and implement data protection controls across enterprise systems, cloud platforms, and AI-driven solutions.
• Deploy and manage technologies such as Data Loss Prevention (DLP), data masking, tokenization, and anonymization.
• Work closely with application and infrastructure teams to embed security throughout the data lifecycle.
• Implement and maintain data discovery and classification tools to identify, label, and control sensitive data enterprise-wide.
• Monitor the organization's data security posture and generate compliance, audit, and risk reports.
• Support incident response efforts by investigating data-related incidents, insider threats, and potential breaches.
• Cloud Data Security:
  Implement and manage cloud-native data protection controls within GCP and Azure environments.
• Secure databases, data warehouses, and data lake ecosystems.
• Configure and manage encryption at rest, in transit, and in use—including BYOK and cloud key management strategies.
• Deploy cloud-native tools for data discovery, classification, and risk scoring.
• Manage secrets using solutions like Azure Key Vault, GCP Secret Manager, and other vault technologies.
• Implement AI-specific data governance controls to protect training data, model inputs, and sensitive datasets.
• Cryptography:
  Define, enforce, and maintain enterprise cryptographic standards and key management processes.
• Manage encryption practices for sensitive data across all environments.
• Ensure alignment with industry and regulatory cryptographic requirements.
• Data Privacy:
  Ensure compliance with privacy frameworks such as GDPR, HIPAA, and PDPPL.
• Embed privacy-by-design principles into applications, architecture, and system engineering.
• Lead data classification and governance initiatives to safeguard personal and sensitive information.
• Database Security:
  Secure structured and unstructured data repositories including relational, No
  
  SQL, and distributed databases.
• Implement Database Activity Monitoring (DAM) and enforce strong access controls.
• Perform regular security posture assessments, hardening reviews, and vulnerability analysis of database systems.
• Collaboration & Governance:
  Collaborate with IT, cloud, security, and business stakeholders on enterprise data protection strategies.
• Ensure alignment with Qatar's NCSA requirements and international security standards.
• Conduct data security assessments for vendors, third parties, and integrations.
• Review and approve data sharing agreements and ensure compliant handling of sensitive information.
• Define and track KPIs, KRIs, and metrics related to data security performance.
• Maintain data security dashboards for continuous visibility and oversight.
• Stay updated on emerging data security threats, technologies, frameworks, and best practices.

• 8+ years of experience in information security with a focus on data protection, cryptography, and database security.
• Bilingual proficiency in Arabic (Mandatory).
• Hands‑hand expertise with cloud platforms, particularly GCP and Azure.
• Strong understanding of encryption standards, cryptographic protocols, and key management systems.
• Practical experience with secrets management tools (Hashi Corp Vault, Azure Key Vault, AWS Secrets Manager, GCP Secret Manager).
• Deep expertise in multi‑cloud data protection, masking, tokenization, and anonymization techniques.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• CISSP, CCSP, CDPSE, CCSK, and cloud security certifications (GCP,…