IT Security Governance Officer

Malomatia; Doha; On-site; QAR 180,000 - 360,000; Full time

Job summary

Malomatia in Doha, Qatar seeks an IT Security Governance Officer to establish and enforce governance frameworks across government entities. The role focuses on compliance with national regulations, data protection laws, and international standards to support risk management and audit readiness.

Responsibilities include policy development, risk assessments, audits coordination, and ensuring secure delivery of digital government services.

Qualifications

• Bachelor's degree or higher in information security, IT, CS, or related field.
• Certifications preferred: CISM, CISSP, ISO 27001 Lead Implementer/Auditor, CRISC.

Responsibilities

• Develop and maintain government-aligned information security policies, standards, and procedures.
• Ensure compliance with national regulations and government directives.
• Align IT security governance with ISO 27001, NIST, COBIT and government standards.
• Conduct information security risk assessments and support remediation plans.
• Coordinate internal and external audits, regulatory reviews, and compliance assessments.
• Track security risks, exceptions, and remediation actions.
• Support governance during cybersecurity incidents and post-incident reviews.
• Review third-party and vendor security compliance for government contracts.
• Ensure data classification, access control, and information handling policies are enforced.
• Support cybersecurity awareness training programs for government staff.
• Prepare governance reports and dashboards for senior management.
• Collaborate with legal, compliance, IT, and national cybersecurity authorities.

Skills

Governance knowledge

Regulatory compliance

Risk management

Audit coordination

Policy writing

Executive communication

Data protection laws

Confidentiality

Education

Bachelor's degree in information security / IT / CS

CISM

CISSP

ISO 27001 Lead Implementer / Auditor

CRISC

Job description

Job Title: IT Security Governance Officer

The IT Security Governance Officer is responsible for establishing and enforcing information security governance frameworks within a government entity. The role ensures compliance with national cybersecurity regulations, government policies, and international standards, while supporting risk management, audit readiness, and secure delivery of digital government services.

Key Responsibilities

• Develop, implement, and maintain government-aligned information security policies, standards, and procedures
• Ensure compliance with national cybersecurity regulations, data protection laws, and government directives
• Align IT security governance with recognized frameworks (ISO 27001, NIST, COBIT, government cybersecurity standards)
• Conduct information security risk assessments and support risk treatment plans
• Monitor compliance with security controls across government systems and entities
• Coordinate internal and external audits, regulatory reviews, and compliance assessments
• Track security risks, exceptions, and remediation actions
• Support governance aspects of cybersecurity incidents, reporting, and post-incident reviews
• Review third-party and vendor security compliance for government contracts
• Ensure data classification, access control, and information handling policies are enforced
• Support cybersecurity awareness and mandatory government training programs
• Prepare governance reports, dashboards, and compliance submissions for senior management
• Collaborate with legal, compliance, IT, and national cybersecurity authorities

Experience Required

• 4–7 years of experience in information security governance, risk, or compliance (public sector preferred)

Education Qualifications

• Bachelor’s degree in information security, IT, Computer Science, or a related field
• Professional certifications preferred: CISM, CISSP, ISO 27001 Lead Implementer / Auditor, CRISC

Skills Required

• Strong knowledge of government cybersecurity governance and regulatory environments
• Experience with public sector IT policies and compliance frameworks
• Risk management, audit coordination, and compliance monitoring skills
• Strong documentation, reporting, and policy-writing abilities
• Ability to communicate security risks in a non-technical, executive-friendly manner
• High integrity and attention to confidentiality requirements
• Knowledge of national cybersecurity policies and government data protection laws

Employment / Job Type

Full Time

Nationality

Any Nationality

About the Company

A Qatari technology services and solutions provider supporting digital transformation for government and enterprise clients. Its portfolio covers systems integration, managed services, cybersecurity, cloud, data and artificial intelligence, application development and contact centre operations. The company serves government, healthcare, education, energy, transport and financial services in line with national digital goals.

Company Industry

IT Services

Department / Functional Area

IT Security

Closing Date

30 October 2026