Vice President, Technology Risk

Lesha Bank LLC; Doha; On-site; QAR 250,000 - 420,000; Full time

Job summary

Lesha Bank LLC is seeking a Vice President of Technology Risk to strengthen cybersecurity governance and risk assurance across the group. The role leads risk assessments, security controls evaluation, and remediation across enterprise environments, cloud platforms, and AI/ emerging tech initiatives.

The VP will engage with stakeholders, auditors, and regulators to enhance cyber resilience, establish risk-based controls, and drive secure architecture and DevSecOps across multiple business lines.

Qualifications

• Bachelor or Master degree in Computer or IT or related fields.
• 10+ years of experience in Cybersecurity / Technology Risk Assessment and Assurance.
• Experience supporting compliance with ISO 27001, NIST, GDPR, PDPL or similar standards.

Responsibilities

• Lead Security Architecture & Technology Risk reviews for enterprise infra, cloud, networks, apps, databases and middleware.
• Oversee Cloud, AI, and Emerging Tech security assessments across Azure, Google Cloud, OCI environments.
• Manage Application Security assessments across the SDLC and ensure secure DevSecOps practices.
• Oversee vulnerability management, PKI, penetration testing and remediation governance.
• Provide security operations oversight, incident management, and governance reporting to executives.
• Support regulatory audits with evidence collection and remediation tracking.
• Prepare cybersecurity metrics, dashboards, and management reports for governance forums.

Skills

Security Architecture

Risk Assessments

Cloud Security

AI Security

Application Security

DevSecOps

Vulnerability Management

Penetration Testing

Threat Modelling

SIEM & Monitoring

Executive Reporting

Stakeholder Management

Leadership

Education

Bachelor/Master in Computer or IT

Job description

Lesha Bank is searching for the greatest talent and brightest minds to contribute to the current growth phase at our bank. We are looking for top-tier individuals who are passionate and hungry to add value from day one. Every day at Lesha is different, presenting a new challenge with the opportunity to contribute and grow. We are looking for an Vice President- Technology Risk

Job Summary We are seeking an experienced Technology Risk Vice President to strengthen and enhance Lesha Group’s cybersecurity risk management and assurance capabilities across its business entities and technology environments.

The role will be responsible for conducting and overseeing cybersecurity risk assessments, evaluating the effectiveness of security controls, performing cybersecurity assurance and compliance reviews, monitoring technology and cyber risk exposure, and supporting the remediation of identified vulnerabilities, control deficiencies, and emerging threats. The position will also contribute to the ongoing enhancement of the Group’s cybersecurity governance, risk management, and regulatory compliance framework.

The successful candidate will possess a strong blend of cybersecurity risk management, security assurance, and technical security expertise, with the ability to assess complex technology environments and engage effectively with business stakeholders, technology teams, project managers, third-party service providers, auditors, and regulatory authorities to strengthen the Group’s overall cyber resilience and risk posture.

Key Responsibilities

Security Architecture & Technology Risk

• Conduct security reviews of enterprise infrastructure, applications, cloud environments, networks, databases, middleware, and security solutions.
• Review proposed technology solutions and architectures to ensure security requirements are incorporated by design.
• Perform threat modelling and security risk assessments for new technologies and business initiatives.
• Define and assess security baselines and configuration standards.
• Provide security recommendations for enterprise architecture and technology transformation initiatives.

Cloud, AI & Emerging Technology Security

• Assess and strengthen security controls across Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure environments.
• Conduct cloud security assessments covering identity, network security, workloads, containers, data protection, logging, and monitoring.
• Support security governance for container environments.
• Conduct security and risk assessments of AI, Generative AI, Machine Learning, and emerging technology solutions.
• Assess security controls and compliance requirements for AI-powered applications and third-party AI service providers.
• Establish appropriate security controls for cloud-native, AI-enabled, and emerging technology environments.

Application Security & Dev Sec Ops

• Lead application security assessments throughout the software development lifecycle.
• Establish and enhance secure SDLC and Dev Sec Ops practices.
• Integrate security testing and controls into CI/CD pipelines.
• Oversee SAST, DAST, SCA, penetration testing, and application security reviews.
• Work closely with development teams to identify and remediate application security vulnerabilities.
• Promote security-by-design principles across application development and technology projects.

Vulnerability & Security Testing

• Oversee enterprise vulnerability management and risk-based vulnerability remediation.
• Manage penetration testing activities for applications, infrastructure, and external-facing systems.
• Coordinate internal and external penetration testing engagements and track remediation.
• Establish vulnerability management KPIs, KRIs, risk acceptance processes, and remediation timelines.
• Chair or facilitate vulnerability remediation governance forums where required.
• Identify recurring vulnerabilities and drive improvements to the organization’s overall security posture.

Security Operations & Incident Management

• Provide governance and oversight of security monitoring and incident response capabilities.
• Work with SOC and security operations teams to improve detection, response, and remediation processes.
• Review SIEM use cases, security monitoring requirements, and incident management processes.
• Support major cybersecurity incident investigations and post-incident improvement activities.
• Ensure lessons learned from incidents are incorporated into security controls and risk management processes.

Cybersecurity Governance, Risk & Compliance

• Act as a deputy to the Information Security Officer when required, ensuring business continuity and ongoing execution of cybersecurity governance, risk management, compliance, and assurance activities.
• Provide analytical and administrative support to cybersecurity governance forums, risk committees, and management review meetings, including the preparation of presentations, reports, and action tracking.
• Support internal, external, and regulatory audits through evidence collection, stakeholder coordination, tracking of findings, and monitoring of remediation activities.
• Prepare and maintain cybersecurity metrics, dashboards, risk reports, KPIs, KRIs, and management reporting materials for governance and oversight purposes.
• Perform cybersecurity assurance activities and control effectiveness reviews to support the evaluation of the Group's cybersecurity maturity and control environment.

Preferred Certifications

• OSCP - Offensive Security Certified Professional
• CEH - Certified Ethical Hacker
• CHFI - Computer Hacking Forensic Investigator
• CISSP - Certified Information Systems Security Professional
• CISM – Certified Information Security Manager

Educational Qualifications Required

Bachelor or Master degree in Computer or IT or any related fields

Experience Requirements

More than 10 years of experience in Cybersecurity / Technology Risk Assessment and Assurance Experience supporting compliance with recognized frameworks and regulations such as ISO 27001, NIST, NIA, QCSF, PCI DSS, GDPR, PDPL, or similar standards. Hands-on experience conducting cybersecurity risk assessments, control reviews, and security assurance activities. Skilled in enterprise security architecture reviews, cloud, AI, emerging technologies security reviews, application security reviews, Dev Sec Ops, vulnerability assessment, penetration testing, security operations and information security incident management.

Technical and Professional Skills Required

• Enterprise Security Architecture
• Cybersecurity Risk Assessments
• Cloud Security
• AI Security
• Application Security
• Dev Sec Ops
• Vulnerability Management
• Penetration Testing
• Threat Modelling
• Security Operations & Incident Response
• SIEM and Security Monitoring
• Executive Reporting and Stakeholder Management

Key Competencies

• Strong analytical and risk-based decision-making capability.
• Ability to translate technical cybersecurity issues into business risks.
• Strong understanding of regulatory and compliance requirements.
• Ability to lead cybersecurity initiatives across multiple business and technology functions.
• Excellent stakeholder and executive communication skills.
• Ability to balance governance requirements with practical technology and business needs.
• Strong leadership, influencing, and problem-solving capabilities.