Head of Information Security - Qatari National

Malomatia; Doha; On-site; QAR 350,000 - 700,000; Full time

Job summary

Malomatia is seeking a Head of Information Security to lead the security strategy, governance, and risk management across the organization in Qatar. You will advise the executive team, align security objectives with business goals, and foster a security-first culture.

The role demands a Qatari national with 10+ years in information security leadership, strong regulatory knowledge (NCSA, NIA, CIIP, PDPPL), and relevant certifications.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field; Master’s degree advantageous
• Qatari National mandatory
• 10+ years in information security or cyber risk leadership
• 3–5 years leading information security / cybersecurity at executive level
• Experience with Qatar regulatory frameworks (NCSA, NIA, CIIP, PDPPL)
• Certifications such as CISSP, CISM, CISA, CRISC desirable
• Strong understanding of security, risk, governance and regulatory frameworks
• Ability to translate security requirements into business priorities and strategic initiatives
• Ability to promote a security-aware culture across the organisation
• Experience engaging and influencing executive management, boards and stakeholders

Responsibilities

• Develop and align the information security strategy with business objectives
• Establish and maintain the security governance framework
• Define and oversee security policies and initiatives
• Identify, assess and manage security risks
• Promote security awareness and accountability across the organisation
• Provide executive oversight during significant security incidents and crises
• Ensure compliance with regulations and governance requirements
• Report to executives on security posture, risks and priorities
• Coordinate security activities with business leaders and stakeholders
• Oversee third-party security risks and governance of external providers
• Define strategic investment priorities and manage the security budget
• Chair or sponsor the security governance committee

Skills

Leadership

Executive influence

Strategic thinking

Stakeholder management

Communication

Security governance

Security risk management

Decision making

Integrity & discretion

Education

Bachelor’s degree in CS/IT/Cybersecurity

Master’s degree (advantage)

Job description

Job Description

The role is responsible for protecting the organization’s information assets by defining the security strategy and ensuring effective management of the risks and threats that may impact the organization. The Head of Information Security provides leadership in establishing a secure and resilient operating environment, promotes a strong security culture, and ensures compliance with applicable regulatory and governance requirements. As a senior executive, the Head of Information Security advises executive management on security-related matters and ensures that security objectives remain aligned with business priorities and organizational goals.

Responsibilities

• Develop a deep understanding of the organization's business objectives, operating environment and critical information assets.
• Define the information security strategy and ensure alignment with corporate objectives.
• Establish and maintain the organization’s security governance framework.
• Define and oversee security policies and strategic security initiatives.
• Ensure that security risks are identified, assessed and managed appropriately.
• Promote security awareness and foster a culture of accountability across the organization.
• Provide executive oversight during significant security incidents and crisis situations.
• Ensure compliance with applicable regulations, standards and governance requirements.
• Periodically assess the effectiveness of the organization’s security capabilities and improvement initiatives.
• Define executive metrics and performance indicators to measure security effectiveness and risk exposure.
• Report regularly to executive leadership on the organization’s security posture, key risks and strategic priorities.
• Coordinate security-related activities with business leaders and key corporate stakeholders.
• Act as the primary point of alignment between business priorities and security objectives.
• Oversee third-party security risks and ensure appropriate governance of external service providers.
• Define strategic investment priorities and manage the security budget to support business objectives.
• Chair or sponsor the organization’s security governance committee.

Qualifications

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field from a recognized university. A relevant Master’s degree is an advantage.

Qatari National (mandatory)

Minimum 10+ years of relevant experience in information security, cyber risk management, or related leadership roles.

• Minimum 3–5 years of experience managing similar work – leading an information security / cybersecurity function or advising at executive level.
• Experience defining an information security strategy aligned with business objectives, and managing security risks and threats end-to-end.
• Demonstrated experience with Qatar’s regulatory frameworks (NCSA, NIA, CIIP, PDPPL).
• Proven ability to engage and influence executive management, boards and key stakeholders.
• Experience leading multidisciplinary teams and managing complex, high-pressure situations and incidents.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalent are desirable
• Strong understanding of security, risk, governance and regulatory frameworks
• Ability to translate security requirements into business priorities and strategic initiatives
• Ability to promote and foster a security-aware culture across the organisation
• Security incident and crisis leadership

Technical

• Security strategy & governance
• Risk & threat management
• Regulatory & compliance (NCSA, NIA, CIIP, PDPPL)
• Security architecture & resilience
• Incident & crisis management
• Third-party / vendor security governance

Behavioral

• Strategic & critical thinking
• Executive influence & stakeholder management
• Leadership & team management
• Result orientation
• Excellent communication
• Integrity & discretion