Head of Information Security - Qatari National

malomatia; Doha; On-site; QAR 350,000 - 550,000; Full time

Job summary

Malomatia in Doha, Qatar seeks a Head of Information Security to lead the security strategy, protect information assets, and align security objectives with business priorities. The role requires extensive leadership experience and expertise in governance, risk management, and regulatory compliance.

The Head of Information Security will advise executive management, establish a resilient security program, and oversee cross-functional teams to address threats, incidents, and regulatory

Qualifications

• Minimum 10+ years of relevant experience in information security or leadership roles.
• 3–5 years of experience leading information security / cybersecurity function or advising at executive level.
• Experience with Qatar regulatory frameworks (NCSA, NIA, CIIP, PDPPL).
• Certifications such as CISSP, CISM, CISA, CRISC desirable.
• Ability to engage and influence executive management, boards and key stakeholders.
• Experience leading multidisciplinary teams and managing high-pressure incidents.
• Strong understanding of security, risk, governance and regulatory frameworks.

Responsibilities

• Develop a deep understanding of the organization's business objectives, operating environment and critical information assets.
• Define the information security strategy and ensure alignment with corporate objectives.
• Establish and maintain the organization’s security governance framework.
• Define and oversee security policies and strategic security initiatives.
• Ensure that security risks are identified, assessed and managed appropriately.
• Promote security awareness and foster a culture of accountability across the organization.
• Provide executive oversight during significant security incidents and crisis situations.
• Ensure compliance with applicable regulations, standards and governance requirements.
• Periodically assess the effectiveness of the organization’s security capabilities and improvement initiatives.
• Define executive metrics and performance indicators to measure security effectiveness and risk exposure.
• Report regularly to executive leadership on the organization’s security posture, key risks and strategic priorities.
• Coordinate security-related activities with business leaders and key corporate stakeholders.
• Act as the primary point of alignment between business priorities and security objectives.
• Oversee third-party security risks and ensure appropriate governance of external service providers.
• Define strategic investment priorities and manage the security budget to support business objectives.
• Chair or sponsor the organization’s security governance committee.

Skills

Security governance

Risk management

Regulatory compliance

Security architecture

Incident management

Vendor security governance

Executive influence

Leadership

Strategic thinking

Communication

Education

Bachelor’s degree in CS/IT/Cybersecurity or related field

Master’s degree (advantage)

Job description

Job Description

The role is responsible for protecting the organization’s information assets by defining the security strategy and ensuring effective management of the risks and threats that may impact the organization. The Head of Information Security provides leadership in establishing a secure and resilient operating environment, promotes a strong security culture, and ensures compliance with applicable regulatory and governance requirements. As a senior executive, the Head of Information Security advises executive management on security-related matters and ensures that security objectives remain aligned with business priorities and organizational goals.

The role is responsible for protecting the organization’s information assets by defining the security strategy and ensuring effective management of the risks and threats that may impact the organization. The Head of Information Security provides leadership in establishing a secure and resilient operating environment, promotes a strong security culture, and ensures compliance with applicable regulatory and governance requirements. As a senior executive, the Head of Information Security advises executive management on security-related matters and ensures that security objectives remain aligned with business priorities and organizational goals.

Responsibilities

• Develop a deep understanding of the organization's business objectives, operating environment and critical information assets.
• Define the information security strategy and ensure alignment with corporate objectives.
• Establish and maintain the organization’s security governance framework.
• Define and oversee security policies and strategic security initiatives.
• Ensure that security risks are identified, assessed and managed appropriately.
• Promote security awareness and foster a culture of accountability across the organization.
• Provide executive oversight during significant security incidents and crisis situations.
• Ensure compliance with applicable regulations, standards and governance requirements.
• Periodically assess the effectiveness of the organization’s security capabilities and improvement initiatives.
• Define executive metrics and performance indicators to measure security effectiveness and risk exposure.
• Report regularly to executive leadership on the organization’s security posture, key risks and strategic priorities.
• Coordinate security-related activities with business leaders and key corporate stakeholders.
• Act as the primary point of alignment between business priorities and security objectives.
• Oversee third-party security risks and ensure appropriate governance of external service providers.
• Define strategic investment priorities and manage the security budget to support business objectives.
• Chair or sponsor the organization’s security governance committee.

Qualifications

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field from a recognized university. A relevant Master’s degree is an advantage.

Qatari National (mandatory)

Minimum 10+ years of relevant experience in information security, cyber risk management, or related leadership roles.

• Minimum 3–5 years of experience managing similar work – leading an information security / cybersecurity function or advising at executive level.
• Experience defining an information security strategy aligned with business objectives, and managing security risks and threats end-to-end.
• Demonstrated experience with Qatar’s regulatory frameworks (NCSA, NIA, CIIP, PDPPL).
• Proven ability to engage and influence executive management, boards and key stakeholders.
• Experience leading multidisciplinary teams and managing complex, high-pressure situations and incidents.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalent are desirable
• Strong understanding of security, risk, governance and regulatory frameworks
• Ability to translate security requirements into business priorities and strategic initiatives
• Ability to promote and foster a security-aware culture across the organisation
• Security incident and crisis leadership

Technical

• Security strategy & governance
• Risk & threat management
• Regulatory & compliance (NCSA, NIA, CIIP, PDPPL)
• Security architecture & resilience
• Incident & crisis management
• Third-party / vendor security governance

Behavioral

• Strategic & critical thinking
• Executive influence & stakeholder management
• Leadership & team management
• Result orientation
• Excellent communication
• Integrity & discretion