Security Operations Officer; Data Security Specialist

Hiring for the post of Security Operations Officer (Data Security Specialist) - Qatar for a  Co.

• Security Architecture:
  Design and implement data security controls including DLP, encryption, and data protection mechanisms across structured and unstructured environments.
• Control Enforcement:
  Ensure consistent enforcement of data classification, encryption, and access controls across databases, endpoints, and cloud platforms.
• Compliance Enablement:
  Translate PDPPL and national data classification requirements (C0–C4) into enforceable technical controls.

• Privacy Controls Implementation:
  Embed privacy controls (masking, tokenization, anonymization) into applications and data platforms.
• DPIA Execution:
  Conduct Data Protection Impact Assessments (DPIAs) with a focus on identifying and mitigating technical risks.
• Data Visibility:
  Implement data discovery, classification, and lineage tooling to track sensitive data flows.
• Data Residency Controls:
  Enforce data residency and sovereignty requirements across cloud platforms (Azure/GCP).

• AI Security Controls:
  Implement safeguards for Generative AI and LLM usage, including access control, logging, and data leakage prevention.
• Data Sanitization:
  Apply masking and anonymization techniques to datasets used in AI/ML pipelines.
• Third‑Party Risk (Technical):
  Perform technical security validation of AI vendors, focusing on data handling and model training exposure risks.

• Secure Data Transfer:
  Implement encryption and data filtering controls for data flows between OT and IT/cloud environments.
• Segmentation Controls:
  Enforce security controls at Industrial DMZ and integration points (e.g., firewalls, proxies, encryption gateways).
• Monitoring & Risk Detection:
  Support detection of data exposure risks from industrial systems through logging and monitoring solutions.

• Encryption & Key Management:
  Operate and manage encryption solutions including HSMs and Cloud KMS (BYOK/HYOK).
• Security Tools Operation:
  Deploy, tune, and operate DLP, Database Activity Monitoring (DAM), and data classification tools (e.g., Microsoft Purview / Azure Information Protection).
• Monitoring & Response:
  Support incident detection and response related to data leakage, misuse, or unauthorized access.

• 8+ years in Information Security, with at least 5 years focused on data security implementation or privacy engineering
• Experience in Critical Infrastructure, Energy, or Government sectors (Qatar regulatory exposure preferred)
• English (Fluent);
  Arabic (Preferred)

• Cloud:
  Hands‑on implementation of Azure/GCP data security controls
• Regulations:
  Practical implementation of PDPPL, ISO 27001, NIA, NIST CSF
• AI/ML:
  Understanding of AI data security risks (e.g., OWASP Top 10 for LLMs)
• OT Exposure:
  Familiarity with Purdue Model and IEC 62443

• CISSP or CISM
• CDPSE or CIPP/E
• CCSP or relevant AI security certifications (e.g., AIGP)