IT Security Governance Officer

Malomatia; Doha; On-site; QAR 223,000 - 402,000; Full time

Job summary

Malomatia is seeking an IT Security Governance Officer to establish and enforce government-grade information security governance frameworks across public sector environments in Qatar.

The role ensures compliance with national regulations, aligns controls to ISO 27001, NIST and COBIT, and supports risk assessments, audits, and secure delivery of digital government services.

Qualifications

• Strong knowledge of government cybersecurity governance and regulatory environments
• Experience with public sector IT policies and compliance frameworks
• Risk management, audit coordination, and compliance monitoring skills
• Strong documentation, reporting, and policy-writing abilities
• Ability to communicate security risks in a non-technical, executive-friendly manner
• High integrity and attention to confidentiality requirements

Responsibilities

• Develop, implement, and maintain government-aligned information security policies, standards, and procedures
• Ensure compliance with national cybersecurity regulations, data protection laws, and government directives
• Align IT security governance with recognized frameworks (ISO 27001, NIST, COBIT, government cybersecurity standards)
• Conduct information security risk assessments and support risk treatment plans
• Monitor compliance with security controls across government systems and entities
• Coordinate internal and external audits, regulatory reviews, and compliance assessments
• Track security risks, exceptions, and remediation actions
• Support governance aspects of cybersecurity incidents, reporting, and post-incident reviews
• Review third-party and vendor security compliance for government contracts
• Ensure data classification, access control, and information handling policies are enforced
• Support cybersecurity awareness and mandatory government training programs
• Prepare governance reports, dashboards, and compliance submissions for senior management
• Collaborate with legal, compliance, IT, and national cybersecurity authorities

Skills

Governance knowledge

Regulatory compliance

Risk management

Audits & controls

Policy writing

Executive communication

Confidentiality

Education

Bachelor’s degree in information security, IT, Computer Science, or related field

Job description

Job Description

The IT Security Governance Officer is responsible for establishing and enforcing information security governance frameworks within a government entity. The role ensures compliance with national cybersecurity regulations, government policies, and international standards, while supporting risk management, audit readiness, and secure delivery of digital government services.

Responsibilities

• Develop, implement, and maintain government-aligned information security policies, standards, and procedures
• Ensure compliance with national cybersecurity regulations, data protection laws, and government directives
• Align IT security governance with recognized frameworks (ISO 27001, NIST, COBIT, government cybersecurity standards)
• Conduct information security risk assessments and support risk treatment plans
• Monitor compliance with security controls across government systems and entities
• Coordinate internal and external audits, regulatory reviews, and compliance assessments
• Track security risks, exceptions, and remediation actions
• Support governance aspects of cybersecurity incidents, reporting, and post-incident reviews
• Review third-party and vendor security compliance for government contracts
• Ensure data classification, access control, and information handling policies are enforced
• Support cybersecurity awareness and mandatory government training programs
• Prepare governance reports, dashboards, and compliance submissions for senior management
• Collaborate with legal, compliance, IT, and national cybersecurity authorities

Qualifications

Required Skills and Competencies

• Strong knowledge of government cybersecurity governance and regulatory environments
• Experience with public sector IT policies and compliance frameworks
• Risk management, audit coordination, and compliance monitoring skills
• Strong documentation, reporting, and policy-writing abilities
• Ability to communicate security risks in a non-technical, executive-friendly manner
• High integrity and attention to confidentiality requirements

Qualifications

• Bachelor’s degree in information security, IT, Computer Science, or a related field
• 4–7 years of experience in information security governance, risk, or compliance (public sector preferred)
• Professional certifications preferred:
  • CISM
  • CISSP
  • ISO 27001 Lead Implementer / Auditor
  • CRISC
• Knowledge of national cybersecurity policies and government data protection laws