Head of Cybersecurity - AI Security - Financial Services

QatarYello; Qatar; On-site; QAR 400,000 - 700,000; Full time

Job summary

QatarYello, a leading financial services organisation, seeks a seasoned cybersecurity executive to define and govern risk-aligned security strategy across cloud, data, and SaaS environments. You will own AI and agent-based security, manage third-party risk, and serve as a senior liaison to executives, regulators, and auditors, guiding governance frameworks across multiple entities in regulated markets.

The role requires deep hands-on experience, statutory knowledge of financial services regs

Qualifications

• 12+ years in cybersecurity with hands-on design/implementation experience.
• Direct experience securing AI/LLM/agent-based systems and related risks (prompt injection, data exposure).
• Strong security architecture across cloud, SaaS, and data environments incl. identity, secrets management, IR.

Responsibilities

• Define and execute the group cybersecurity strategy aligned to risk and regulatory requirements.
• Design and implement security architecture across cloud, data, and SaaS/application environments.
• Own the security of AI and agent-based systems, including prompt injection, data exposure, and access controls.
• Establish governance, standards, and oversight across portfolio companies.
• Lead incident response and coordinate with managed security providers.
• Manage third party and vendor security risk.
• Act as the senior point of contact for executives, regulators, and auditors.

Skills

Cybersecurity strategy

Security architecture

AI security

Regulatory compliance

Incident response

Vendor risk management

Stakeholder engagement

Job description

A high profile financial services environment operating across multiple jurisdictions and business lines. The organisation has a strong focus on technology, data and AI, with security positioned as a core enabler of its operating model.

• Define and execute the group cybersecurity strategy aligned to risk and regulatory requirements
• Design and implement security architecture across cloud, data, and SAAS/application environments
• Own the security of AI and agent based systems, including prompt injection, data exposure, and access controls
• Establish governance, standards, and oversight across portfolio companies
• Lead incident response and coordinate with managed security providers
• Manage third party and vendor security risk
• Act as the senior point of contact for executives, regulators, and auditors

• 12+ years in cybersecurity with hands on experience designing or implementing controls and not purely oversight
• Direct experience securing AI, LLM, or agent based systems, including risks such as prompt injection, data exfiltration, and agent permissioning
• Strong understanding of security architecture across cloud, SaaS, and data environments, including identity, secrets management, and incident response
• Experience working within regulated environments, with exposure to financial services regulatory expectations (for example CBUAE, ADGM, DFSA, FSRA) and interaction with regulators or auditors
• Proven ability to establish cybersecurity frameworks, policies, and governance models across complex or multi entity environments
• Experience managing or overseeing third party security, managed SOC providers, and vendor ecosystem.
• Strong stakeholder engagement, with the ability to act as a primary point of contact for executives, regulators, and board level discussions