Lead, Risk and Information Protection

Overview

We are looking for a Lead, Risk and Information Protection for one of our clients with the following details:

Start date:
May 2026

End date:
Oct 2026

Location:
Doha, Qatar

Work Scheme:
Residential, Single

Qualification and Experience required:

• Graduate and/or master's degree qualifications in either Computer Science, Information Technology, or a related discipline.
• 10+ years' experience in a similar role, in large enterprise environments (>1000 users), with multiple geographic locations.
• Oil and Gas experience (or manufacturing industries) is preferred.
• Professional certifications in Information Security and/or Information technology - CISSP and/or CISM at minimum is required.
• Proficiency in performing risk, business impact, control, and vulnerability assessments, and in defining treatment strategies.
• Knowledge of and experience in managing, developing and documenting security programs and plans, including strategic, tactical, and operational plans.
• Strong analytical skills to analyse security requirements and relate them to appropriate security controls.
• Strong communication skills, including written, oral and presentation skills. Must be fluent in English.
• Knowledge and experience in Enterprise IT/OT security technologies, services, and processes:
• Information Security models and frameworks (NIST, ISO 27001) and best practices
• Risk Assessment:
  Operating Systems (Windows, Linux), Network technologies and protocols, Information protection
• Security technologies, tools & controls, including Antivirus, Antimalware, proxies, web filtering and firewalls, XDR, SIEM, IDS/IPS...
• Incident Response processes and tools
• Patch and Vulnerability management processes and tools
• Risk Assessment, Change Management Processes
• Information Classification, Information Protection
• Disaster Recovery, Business Continuity
• Professional certification in Industrial Cybersecurity e.g., GICSP or similar) is desirable.
• Knowledge of Industrial Cybersecurity standards is desirable.
• Exposure to program and project management is desirable.
• Vendor management skills and ability to define and negotiate effective SLAs and service KPIs with vendors.
• Extensive technological domain knowledge to understand integration of digital products with IT systems & architecture.
• Good knowledge of the business to understand business requirements and implications on organization operations.

If you are interested, kindly apply!