Head of Information Security

malomatia; Doha; On-site; QAR 360,000 - 600,000; Full time

Job summary

malomatia seeks a Head of Information Security to define and lead the security strategy, ensuring a resilient operating environment and a strong security culture in Doha, Qatar. You will advise the executive team and align security with business priorities while governing risk, policy, and governance across the organization.

You will oversee incident management, regulatory compliance, and third‑party security governance, reporting to top management and guiding strategic investments in security

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• A relevant Master’s degree is an advantage.
• Qatari National (mandatory).
• Minimum 10+ years of relevant experience in information security, cyber risk management, or related leadership roles.
• Minimum 3-5 years of experience managing similar work - leading an information security / cybersecurity function or advising at executive level.
• Experience with Qatar’s regulatory frameworks (NCSA, NIA, CIIP, PDPPL) and ability to engage executive management and stakeholders.
• Certifications such as CISSP, CISM, CISA, CRISC are desirable.
• Strong understanding of security, risk, governance and regulatory frameworks; translate security requirements into business priorities.
• Ability to promote a security-aware culture and lead incident/crisis situations.

Responsibilities

• Develop understanding of business objectives and critical assets.
• Define information security strategy aligned with corporate objectives.
• Establish and maintain the organization’s security governance framework.
• Define and oversee security policies and strategic initiatives.
• Ensure risks are identified, assessed and managed.
• Promote security awareness and foster accountability across the organization.
• Provide executive oversight during significant security incidents and crises.
• Ensure regulatory compliance (NCSA, NIA, CIIP, PDPPL).
• Report on security posture to executive leadership.
• Coordinate security activities with business leaders and stakeholders.
• Align security objectives with business priorities and manage third-party security governance.
• Define strategic investment priorities and manage the security budget.
• Chair or sponsor the organization’s security governance committee.

Skills

Security leadership

Executive influence

Risk management

Stakeholder management

Communication

Integrity

Education

BSc in CS/IT/Cybersecurity

Master’s degree (advantage)

Job description

Job Description

The role is responsible for protecting the organization’s information assets by defining the security strategy and ensuring effective management of the risks and threats that may impact the organization. The Head of Information Security provides leadership in establishing a secure and resilient operating environment, promotes a strong security culture, and ensures compliance with applicable regulatory and governance requirements. As a senior executive, the Head of Information Security advises executive management on security-related matters and ensures that security objectives remain aligned with business priorities and organizational goals.

Responsibilities

• Develop a deep understanding of the organization's business objectives, operating environment and critical information assets.
• Define the information security strategy and ensure alignment with corporate objectives.
• Establish and maintain the organization’s security governance framework.
• Define and oversee security policies and strategic security initiatives.
• Ensure that security risks are identified, assessed and managed appropriately.
• Promote security awareness and foster a culture of accountability across the organization.
• Provide executive oversight during significant security incidents and crisis situations.
• Ensure compliance with applicable regulations, standards and governance requirements.
• Periodically assess the effectiveness of the organization’s security capabilities and improvement initiatives.
• Define executive metrics and performance indicators to measure security effectiveness and risk exposure.
• Report regularly to executive leadership on the organization’s security posture, key risks and strategic priorities.
• Coordinate security-related activities with business leaders and key corporate stakeholders.
• Act as the primary point of alignment between business priorities and security objectives.
• Oversee third-party security risks and ensure appropriate governance of external service providers.
• Define strategic investment priorities and manage the security budget to support business objectives.
• Chair or sponsor the organization’s security governance committee.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field from a recognized university.
• A relevant Master’s degree is an advantage.

Qatari National (mandatory)

• Minimum 10+ years of relevant experience in information security, cyber risk management, or related leadership roles.
• Minimum 3-5 years of experience managing similar work - leading an information security / cybersecurity function or advising at executive level. Experience defining an information security strategy aligned with business objectives, and managing security risks and threats end-to-end.
• Demonstrated experience with Qatar’s regulatory frameworks (NCSA, NIA, CIIP, PDPPL). Proven ability to engage and influence executive management, boards and key stakeholders.
• Experience leading multidisciplinary teams and managing complex, high-pressure situations and incidents.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalent are desirable Strong understanding of security, risk, governance and regulatory frameworks Ability to translate security requirements into business priorities and strategic initiatives Ability to promote and foster a security-aware culture across the organisation Security incident and crisis leadership

Technical

• Security strategy & governance
• Risk & threat management
• Regulatory & compliance (NCSA, NIA, CIIP, PDPPL)
• Security architecture & resilience
• Incident & crisis management
• Third-party / vendor security governance

Behavioral

• Strategic & critical thinking
• Executive influence & stakeholder management
• Leadership & team management
• Result orientation
• Excellent communication
• Integrity & discretion