Job description

The Head of Information Security is the executive accountable for the client organization’s information security function. The role is responsible for protecting the organization’s information assets by defining the security strategy and ensuring effective management of the risks and threats that may impact the organization. The Head of Information Security provides leadership in establishing a secure and resilient operating environment, promotes a strong security culture, and ensures compliance with applicable regulatory and governance requirements. As a senior executive, the Head of Information Security advises executive management on security-related matters and ensures that security objectives remain aligned with business priorities and organizational goals.

Key Responsibilities:

1. Develop a deep understanding of the organisation’s business objectives, operating environment and critical information assets.

2. Define the information security strategy and ensure alignment with corporate objectives.

3. Establish and maintain the organization’s security governance framework.

4. Define and oversee security policies and strategic security initiatives.

5. Ensure that security risks are identified, assessed and managed appropriately.

6. Promote security awareness and foster a culture of accountability across the organization.

7. Provide executive oversight during significant security incidents and crisis situations.

8. Ensure compliance with applicable regulations, standards and governance requirements.

9. Periodically assess the effectiveness of the organization’s security capabilities and improvement initiatives.

10. Define executive metrics and performance indicators to measure security effectiveness and risk exposure.

11. Report regularly to executive leadership on the organization’s security posture, key risks and strategic priorities.

12. Coordinate security-related activities with business leaders and key corporate stakeholders.

13. Act as the primary point of alignment between business priorities and security objectives.

14. Oversee third-party security risks and ensure appropriate governance of external service providers.

15. Define strategic investment priorities and manage the security budget to support business objectives.

16. Chair or sponsor the organization’s security governance committee.

Skills

Qatari National (mandatory)



• Minimum 10+ years of relevant experience in information security, cyber risk management, or related leadership roles.

• Minimum 3–5 years of experience managing similar work – leading an information security / cybersecurity function or advising at executive level.

• Experience defining an information security strategy aligned with business objectives, and managing security risks and threats end-to-end.

• Demonstrated experience with Qatar’s regulatory frameworks (NCSA, NIA, CIIP, PDPPL).

• Proven ability to engage and influence executive management, boards and key stakeholders.

• Experience leading multidisciplinary teams and managing complex, high-pressure situations and incidents.

• Information security risk management and security strategy definition

• Strong understanding of security, risk, governance and regulatory frameworks

• Ability to translate security requirements into business priorities and strategic initiatives

• Ability to promote and foster a security-aware culture across the organisation

• Security incident and crisis leadership

Technical

• Security strategy & governance

• Risk & threat management

• Regulatory & compliance (NCSA, NIA, CIIP, PDPPL)

• Security architecture & resilience

• Incident & crisis management

• Third-party / vendor security governance