Information Security Lead Engineer

Malomatia; Doha; On-site; QAR 180,000 - 300,000; Full time

Job summary

Malomatia is seeking an experienced information security professional to lead infrastructure and network security initiatives in a regulated environment. You will coordinate vulnerability assessments, enforce security policies, and support governance with risk management and compliance across ISO27001 and Qatar 2022 requirements.

The role emphasizes incident response, SOC operations, and KPI reporting, with collaboration across IT, security, and vendors to maintain a strong security posture in

Qualifications

• Bachelor's degree in Information Technology; MSc in Information Security/Cyber Security is a plus.
• Certifications in Information security such as CISM, CISA, CRISC, CISSP, CBCP, GIAC, ISO27001LA, CCNA-security, MCSE-security.
• Offensive security certifications CEH and CHFI are a plus.

Responsibilities

• Coordinate with vendors to conduct vulnerability assessments and penetration testing for infrastructure and network.
• Maintain infrastructure and network security policies and procedures in line with ISO 27001, NIA, Qatar 2022, and applicable laws.
• Assist in risk management, internal audits and governance to ensure compliance with enterprise security standards.
• Develop and implement information security architectures and regulatory compliance measures.
• Provide daily, weekly and monthly reports on security incidents, changes, and KPIs to the Information Security Lead.

Skills

Information security leadership

Risk management

SOC operations

Incident response

Regulatory compliance

Education

Bachelor's degree in Information Technology

MSc in Information Security / Cyber Security

CISM

CISA

CRISC

CISSP

CBCP

GIAC

ISO27001LA

CCNA-security

MCSE-security

CEH

CHFI

Job description

Job Description

Responsibilities

• Working with Infrastructure, Network and service operation teams to ensure that the SJC IT infrastructure, network and service operation security.
• Coordinate with vendors and conduct vulnerability assessments and penetration testing for infrastructure and network.
• Coordinate with Cybersecurity Engineer - governance and risk management to maintain infrastructure & network security management policies/ procedures and risk management.
• Assist to develop, implement, and manage the overall infrastructure enterprise process for information security and associated architecture standards such as ISO 27001, NIA, cyber security law, privacy management law and Qatar 2022 cyber security requirement.
• Evaluate suspected security breaches and recommend corrective actions (including incidents involving outside vendors).
• Follow cyber security incident management and incident response plan
• Serve as the part of the security incident response planning and execution
• Assist Risk Management, Internal Audit and IT department in the development of appropriate criteria needed to assess the level of new/existing applications and / or technology infrastructure elements for compliance with enterprise security standards.
• Assist in the review of infrastructure and/or technology environments during the development or acquisition process to (a) assure compliance with corporate security policies and directions and (b) assist in the overall integration process regarding SJC IT's own technology environment.
• Evaluate information security KPIs based on the Information Security/privacy Objectives and reviewing those KPIs based on the security objective's changes
• maintenance of Infrastructure and network to support the organization's information security/privacy policies and procedures and ensure timely updating thereof in light of changing circumstances/ best practices/ regulatory directives.
• Conduct security assessments to maintain adequate security posture within the SJC IT Environment
• Improve security operation center monitoring based on new cyber security environment and attacks
• Work with Head of Information Security to coordinate with MOI security shield and maintain the NCSOC onboarding and continuity of connectivity
• Work with Head of Information Security to coordinate with MPTO team and maintain Qatar 2022 implementations based on the agreed roadmap
• Provide daily, weekly and monthly reports to Information Security Lead related environment infrastructure & network changes, incidents, problems, service operation and critical area.
  

Mandatory actions

• IT Security Team Meeting - Monthly Basis
• Risk register validation - monthly basis (until IT environment in stable state)
• Information Security KPI validation - Monthly, Quarterly (reporting), Bi-annual and annual
• Compliance management - NIA, Qatar 2022, NCSOC, Q-cert, ISO 27001:2013, Cyber Crime Law, Privacy Law and other applicable laws and regulations to SJC IT.

Qualifications

Qualifications & Experience

Required Qualifications

• University Degree in Information Technology with Msc. in Information Security/ Cyber security from a recognized university is a plus.
• Certifications in Information security such as CISM, CISA, CRISC, CISSP, CBCP, GIAC, ISO27001LA, CCNA-security, MCSE-security
• Offensive security certifications CEH and CHFI is a plus

Preferred Experience

• Minimum 5-8 years of experience of which a minimum of 5 years should be in a similar position / responsibility.

Skills, Knowledge And Expected Behaviors Against Values

Competencies

Technical Competencies:

ORGANIZATION Values:

• Deep understanding and management experience of Information Security standards, processes and risk management.
• Knowledge of Department Priorities, Products, and the strategy
• Information security landscape
• Maintain ISO27001:2013 certificate and other compliance requirements
• Developing the information security strategy
• Information security KPI defining and validation
• Benchmarking
• Risk Management
• Designing and Maintaining Information Security Management Policies and procedure
• Knowledge of government and regulatory requirements
• Experience is Managing Security Operations Center (SOC)
• Experience in current Security tools and solutions
• Personal information privacy management
• Act as One
• Over deliver on our promises
• Share what matters
• Always Challenge Assumptions
• Be pioneering