Consultant - Information Security

malomatia; Doha; On-site; QAR 180,000 - 320,000; Full time

Job summary

Malomatia is seeking a Consultant - Information Security to maintain information security management across the organization’s infrastructure and networks in Qatar. You will coordinate vulnerability assessments, support governance and risk management, and ensure compliance with ISO 27001 and related regulatory requirements.

You will work with the Information Security Lead and cross-functional teams to monitor KPIs, strengthen security posture, and contribute to security operations and incident

Qualifications

• University degree in IT with MSc in Information Security or related, is a plus.
• Certifications in information security such as CISM, CISA, CRISC, CISSP, CBCP, GIAC, ISO27001LA, CCNA-security, MCSE-security.
• Offensive security certifications CEH and CHFI are a plus.
• Minimum 5-8 years of experience in a similar role.

Responsibilities

• Maintain information security management across infrastructure and networks.
• Coordinate vulnerability assessments and penetration testing.
• Support governance and risk management to maintain policies and risk management.
• Develop and manage enterprise information security processes and architecture standards.
• Evaluate breaches and coordinate incident response planning and execution.
• Produce regular security reports to the Information Security Lead.

Skills

Information security

Risk management

Regulatory compliance

SOC management

Education

Bachelor's/MSc IT related

Information security certifications

Offensive security certs (CEH/CHFI)

Job description

Job Description

Consultant - Information Security role is responsible to maintain information security management within the Infrastructure & Network and continue security controls to maintain adequate cyber security posture within the environment and support manage IT Information Security Lead.

Responsibilities

• Working with Infrastructure, Network, and Service Operations teams to ensure the security of SJC IT infrastructure, networks, and service operations.
• Coordinate with vendors and conduct vulnerability assessments and penetration testing for infrastructure and networks.
• Coordinate with the Cybersecurity Engineer – Governance and Risk Management to maintain infrastructure and network security management policies, procedures, and risk management.
• Assist in developing, implementing, and managing the overall enterprise infrastructure processes for information security and associated architecture standards, such as ISO 27001, NIA, Cyber Security Law, Privacy Management Law, and Qatar 2022 Cyber Security Requirements.
• Evaluate suspected security breaches and recommend corrective actions, including incidents involving external vendors.
• Follow the cyber security incident management and incident response plan.
• Serve as part of the security incident response planning and execution.
• Assist Risk Management, Internal Audit, and the IT department in developing appropriate criteria to assess the compliance levels of new and existing applications and/or technology infrastructure elements against enterprise security standards.
• Assist in reviewing infrastructure and/or technology environments during the development or acquisition process to (a) ensure compliance with corporate security policies and directions and (b) assist in the overall integration process with SJC IT’s existing technology environment.
• Evaluate information security KPIs based on the Information Security/Privacy Objectives and review those KPIs based on changes to the security objectives.
• Maintain infrastructure and networks to support the organization’s information security/privacy policies and procedures, and ensure their timely updates in light of changing circumstances, best practices, and regulatory directives.
• Conduct security assessments to maintain an adequate security posture within the SJC IT environment.
• Improve Security Operations Center monitoring based on the evolving cyber security environment and emerging attacks.
• Work with the Head of Information Security to coordinate with the MOI Security Shield and maintain NCSOC onboarding and continuity of connectivity.
• Work with the Head of Information Security to coordinate with the MPTO team and maintain Qatar 2022 implementations based on the agreed roadmap.
• Provide daily, weekly, and monthly reports to the Information Security Lead related to infrastructure and network environment changes, incidents, problems, service operations, and critical areas.

Mandatory Actions

• IT Security Team Meeting – Monthly Basis.
• Risk Register Validation – Monthly Basis (until the IT environment reaches a stable state).
• Information Security KPI Validation – Monthly, Quarterly (Reporting), Bi-annual, and Annual.
• Compliance Management – NIA, Qatar 2022, NCSOC, Q-CERT, ISO 27001:2013, Cyber Crime Law, Privacy Law, and other applicable laws and regulations relevant to SJC IT.

Qualifications

Competencies

Technical Competencies:

• Deep understanding and management experience of Information Security standards, processes and risk management.
• Knowledge of Department Priorities, Products, and the strategy
• Information security landscape
• Maintain ISO27001:2013 certificate and other compliance requirements
• Developing the information security strategy
• Information security KPI defining and validation
• Benchmarking
• Risk Management
• Designing and Maintaining Information Security Management Policies and procedure
• Knowledge of government and regulatory requirements
• Experience is Managing Security Operations Center (SOC)
• Experience in current Security tools and solutions
• Personal information privacy management
• Act as One
• Over deliver on our promises
• Share what matters
• Always Challenge Assumptions
• Be pioneering
• Key Business Interactions

Internal External

• SJC IT Information Security Lead
• IT Department team and heads
• IT Security Team
• Internal Auditors
• Vendors
• External Auditors
• Regulatory

Required Qualifications

• University Degree in Information Technology with Msc. in Information Security/ Cyber security from a recognized university is a plus.
• Certifications in Information security such as CISM, CISA, CRISC, CISSP, CBCP, GIAC, ISO27001LA, CCNA-security, MCSE-security
• Offensive security certifications CEH and CHFI is a plus

Preferred Experience

• Minimum 5-8 years of experience of which a minimum of 5 years should be in a similar position / responsibility.

About Malomatia

ABOUT US

malomatia is a leading Qatar-based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end-to-end technology solutions that empower clients to achieve their strategic goals.

Our mission

Empowering Qatar’s businesses and governments to leap into the digital future with agile, knowledge-driven solutions.

Our vision

To become Qatar’s trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world-class tech ecosystem.

Driving change that makes a real impact

Since 2008, malomatia has been driving Qatar’s digital transformation through innovative, ISO-certified IT solutions. With expertise across key public and private sectors, we empower the nation’s vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar’s sustainable future.

About The Team

Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high-value digital solutions tailored to the unique needs of our clients.

Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation.

Join us in shaping the future of technology in Qatar