Information Security Officer - Data Security Specialist

Zohorecruit; Qatar; On-site; QAR 300,000 - 540,000; Full time

Job summary

Black & Grey HR invites applications for an Information Security Officer to lead the Data Security program in Doha, focusing on protecting data across enterprise, cloud, and AI/ML environments. You will design controls, manage encryption, BYOK, and secrets, and drive privacy-by-design across data governance initiatives.

The role requires 8+ years in information security, strong cryptography and KMS knowledge, and certifications such as CISSP/CCSP/CDPSE/CCSK, with preference for Arabic

Qualifications

• Bachelor’s degree in Engineering, IT, Computer Science, or related field; equivalent extensive experience considered.
• 8+ years in information security with focus on data protection, cryptography, and database security.
• Arabic language proficiency preferred.
• CISSP/CCSP/CDPSE/CCSK or similar certifications; cloud security certs (GCP/Azure/AWS) are a strong advantage.

Responsibilities

• Design and implement data protection controls across enterprise, cloud, and AI/ML solutions.
• Deploy and manage Data Loss Prevention (DLP), data masking, tokenization, and data discovery/classification tools.
• Collaborate with application and infrastructure teams to integrate security into the data lifecycle.
• Monitor data security posture and generate compliance and risk reports.
• Support incident response investigations related to data breaches or insider threats.
• Implement and manage data protection controls in GCP and Azure.
• Secure cloud databases, data lakes, and AI data pipelines.
• Configure encryption and BYOK strategies; manage secrets and access.

Skills

GCP

Azure

Data protection

Cryptography

KMS

DLP

DAM

Cloud security

Privacy compliance

Education

Bachelor’s degree in Engineering/IT/CS

Tools

HashiCorp Vault

Azure Key Vault

GCP Cloud KMS

GCP Secret Manager

Forcepoint

Microsoft Purview

Google Cloud DLP

Job description

Information Security Officer - Data Security Specialist

Black & Grey HR is recruiting for an established technology solutions and services provider i n Doha, Qatar. Our client is seekingan experienced Information Security Officer to lead and manage the Data Security program. You will be responsible for designing, implementing, and managing robust data protection controls, ensuring the confidentiality, integrity, and privacy of critical information assets.

Key Responsibilities

Data Security Engineering:

• Design and implement data protection controls across enterprise, cloud, and AI/ML solutions.
• Deploy and manage Data Loss Prevention (DLP), data masking, tokenization, and data discovery/classification tools.
• Collaborate with application and infrastructure teams to integrate security into the data lifecycle.
• Monitor the organization's data security posture and generate compliance and risk reports.
• Support incident response investigations related to data breaches or insider threats.
• Implement and manage data protection controls in Google Cloud Platform (GCP) and Microsoft Azure.
• Secure cloud databases, data lakes, and AI data pipelines.
• Configure encryption (at rest, in transit, in use) and Bring-Your-Own-Key (BYOK) strategies.
• Manage secrets and ensure secure access to cloud data storage systems.

Cryptography & Key Management:

• Define and enforce enterprise cryptographic standards and key management policies.
• Manage encryption practices and ensure compliance with industry cryptographic standards.

Data Privacy & Compliance:

• Ensure adherence to privacy regulations (GDPR, HIPAA, PDPPL).
• Integrate privacy-by-design principles into technical controls and data governance programs.

Database Security:

• Secure structured and unstructured data repositories (SQL, NoSQL).
• Implement Database Activity Monitoring (DAM) and stringent access controls.
• Conduct regular security reviews, hardening, and vulnerability assessments of database systems.
• Partner with stakeholders on enterprise data protection strategies.
• Ensure compliance with the Qatar NCSA framework and international standards (ISO 27001, NIST).
• Conduct third-party/vendor data security assessments and review data sharing agreements.
• Define KPIs, maintain security dashboards, and stay abreast of emerging threats and technologies.

Requirements

Qualifications & Required Experience:

• Bachelor’s degree in Engineering, IT, Computer Science, or a related field. Equivalent extensive experience will be considered.
• 8+ years in information security with a dedicated focus on data protection, cryptography, and database security.
• Arabic language proficiency is preferred.
• Professional certifications such as CISSP, CCSP, CDPSE, or CCSK are required. Cloud security certifications (GCP, Azure, AWS) are a strong advantage.

Technical Skillset:

• Hands-on experience with cloud platforms, specifically GCP and Azure.
• Proven expertise implementing data protection in multi-cloud environments.
• Strong knowledge of encryption standards, cryptographic protocols, and key management (KMS, GCP Cloud KMS, Azure Key Vault).
• Practical experience with secrets management (HashiCorp Vault, Azure Key Vault, GCP Secret Manager).
• Experience with DLP solutions (e.g., Forcepoint, Microsoft Purview, Google Cloud DLP).
• Skills in data discovery, classification, masking, tokenization, and anonymization.
• Experience configuring Database Activity Monitoring (DAM) tools (e.g., Imperva, IBM Guardium).
• In-depth understanding of privacy regulations (GDPR, HIPAA) and compliance frameworks.

Preferred Experience:

• Background in regulated industries (financial services, healthcare, government).
• Understanding of AI/ML data security governance.
• Knowledge of the Qatar NIA and NCSA frameworks.
• Excellent analytical and problem-solving skills.
• Strong communication skills with the ability to convey complex technical concepts to both technical and non-technical audiences.
• Strategic thinker with a track record of practical implementation and governance.