Cybersecurity Strategy & Risk Leader

PPL Dynamics; Doha; Vor Ort; QAR 180.000 - 240.000; Vollzeit

Zusammenfassung

PPL Dynamics is seeking a senior cybersecurity leader to develop and maintain the company’s information security framework, strategies and policies. The role involves guiding risk management, monitoring incidents, and ensuring controls meet regulatory obligations in the region.

You will collaborate with IT, oversee vendor risk, data protection, training programs, and provide direct updates to the CEO and committees on program status and control effectiveness.

Aufgaben

• Develop and maintain the Company's information and cybersecurity framework, strategy, policies and procedures.
• Identify, assess and monitor information and cybersecurity risks, vulnerabilities and control gaps.
• Maintain the cybersecurity risk register and follow up on remediation plans.
• Collaborate with IT to ensure that appropriate technical and security controls are implemented.
• Oversee cybersecurity monitoring, incident response, investigation, recovery and escalation.
• Review security requirements for new systems, technology changes, cloud services and digital initiatives.
• Assess cybersecurity risks relating to vendors, outsourced services and other third parties.
• Oversee information classification, data protection and the secure handling of sensitive company and customer information.
• Develop cybersecurity awareness and training programs for employees.
• Report cybersecurity risks, incidents, control effectiveness and program status directly to the CEO and relevant committees.
• Ensure alignment with applicable Qatar Central Bank requirements and other relevant regulatory obligations.

Jobbeschreibung

PPL Dynamics is seeking a senior cybersecurity leader to develop and maintain the company’s information security framework, strategies and policies. The role involves guiding risk management, monitoring incidents, and ensuring controls meet regulatory obligations in the region.

You will collaborate with IT, oversee vendor risk, data protection, training programs, and provide direct updates to the CEO and committees on program status and control effectiveness.