Technology Risk & Cybersecurity VP

Lesha Aviation Capital; Doha; On-site; QAR 350,000 - 550,000; Full time

Job summary

Lesha Bank LLC (Public) in Doha, Qatar seeks an experienced Technology Risk Vice President to strengthen cybersecurity risk management across business entities and technology environments. You will oversee risk assessments, security assurance, and regulatory compliance while engaging with stakeholders and auditors.

Responsibilities include security architecture reviews, cloud and AI security, secure SDLC and DevSecOps, vulnerability management and incident response coordination to enhance the

Qualifications

• Experience in cybersecurity risk assessments, control reviews and assurance activities.
• Ability to engage with business stakeholders and regulators on risk matters.
• Strong knowledge of ISO 27001, NIST, GDPR, PCI DSS and similar standards.

Responsibilities

• Conduct security reviews of enterprise infrastructure, applications, cloud environments, networks, databases and security solutions.
• Lead security assessments across cloud, on-premises and emerging technologies.
• Oversee SAST, DAST, SCA and penetration testing activities.
• Coordinate remediation of vulnerabilities and control deficiencies.
• Provide governance, metrics, dashboards and management reporting for cyber risk.
• Act as deputy to the Information Security Officer when needed.

Skills

Cybersecurity risk assessments

Security architecture reviews

Cloud security (Azure, GCP, OCI)

DevSecOps and secure SDLC

Threat modelling

Security governance & reporting

Executive stakeholder management

Penetration testing oversight

Vulnerability management

Incident response coordination

Education

Bachelor or Master degree in Computer or IT

Tools

OSCP

CEH

CHFI

CISSP

CISM

Job description

Lesha Bank LLC (Public) in Doha, Qatar seeks an experienced Technology Risk Vice President to strengthen cybersecurity risk management across business entities and technology environments. You will oversee risk assessments, security assurance, and regulatory compliance while engaging with stakeholders and auditors.

Responsibilities include security architecture reviews, cloud and AI security, secure SDLC and DevSecOps, vulnerability management and incident response coordination to enhance the