وظائف حارس أمن في قطر

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>We are seeking a highly experienced Senior Information Security / Senior Cyber Security Assessor (Certification) to lead and support cyber security certification and compliance assessment activities. The role is responsible for reviewing certification applications, evaluating organizations compliance with national and international security standards, conducting cyber security risk assessments and audits, and ensuring consistency, impartiality, and quality throughout the certification lifecycle. The ideal candidate will possess strong technical expertise in information security governance, risk management, compliance, auditing, and certification frameworks, along with proven leadership and stakeholder management capabilities. Key Responsibilities : Lead and deliver certification assessment and review activities for organizations seeking Information Security / Cyber Security certification. Manage assessment teams, assign cases, and oversee daily certification operations. Review and evaluate organizations compliance with national and international cyber security standards and frameworks. Assess the design and operating effectiveness of cyber security and information security controls Conduct cyber security risk assessments, audits, and compliance reviews. Maintain accurate, complete, and organized records of certification and assessment activities. Ensure impartiality, confidentiality, consistency, and compliance throughout certification processes. Document assessment observations and findings based on objective evidence and ensure traceability. Develop and maintain certification procedures, methodologies, and supporting tools aligned with national compliance frameworks. Develop compliance measurement mechanisms and monitoring tools to track improvements. Provide recommendations and assessment outcomes to stakeholders and decision-makers. Manage external communication throughout the audit and certification lifecycle, from application to final decision issuance. Stay updated on emerging cyber security threats, technologies, standards, and industry best practices. Develop and deliver internal training sessions and workshops to enhance team capabilities in cyber security, compliance, assurance, and auditing. Collaborate effectively with internal teams, clients, and stakeholders across multiple projects. The contract duration is 12 months, with the possibility of extension based on departmental requirements.</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><ul><li><b>Education:</b> Bachelor s degree in Information Technology, Computer Information Systems, Cyber Security, or a related field.</li><li><b>Professional Certifications:</b> One or more relevant professional certifications are preferred, such as: CISSP CISA CISM CRISC ISO 27001 Lead Auditor / Implementer</li><li><b>Experience:</b> Minimum 7 years of professional experience in Information Security / Cyber Security. Minimum 4 years of experience in one or more of the following areas: Information Security Auditing Cyber Security Auditing Risk Management Information Security Management Experience in consulting or implementing cyber security programs aligned with national or international standards is highly desirable.</li><li><b>Technical Skills &amp; Knowledge:</b> Strong knowledge of cyber security governance, risk assessment, and audit methodologies. Experience with security frameworks and standards such as: ISO 27001 NIST NIA Controls CSF Q2022 Familiarity with certification and audit standards including: ISO/IEC 17021 ISO/IEC 17024 ISO/IEC 27006 ISO/IEC 17065 ISO 19011 ITAF ISA Hands-on experience in Information Security Auditing and Information Security Management. Strong understanding of cyber security trends, threats, and emerging technologies. Excellent technical report writing and documentation skills.</li><li><b>Soft Skills:</b> Strong analytical and problem-solving abilities. Excellent communication and stakeholder management skills. Ability to work independently and manage multiple priorities effectively. High attention to detail and ability to work under pressure and meet deadlines. Strong interpersonal and team collaboration skills. Experience in delivering workshops, training sessions, and awareness programs.</li><li><b>Language Requirement:</b> Fluency in English is required. Arabic is a plus.</li></ul><p></p></section>

Overview<br><br>University of Doha for Science and Technology (UDST) is the first national applied University in the State of Qatar, offering applied bachelor’s and master’s degrees in different fields. UDST has over 50 programs in the fields of Computing and Information Technology, Engineering Technology and Industrial Trades, Business Management, Health Sciences, and more.<br><br>Thanks to a generous grant from the National Cyber Security Agency (NCSA, https://ncsa.gov.qa/en/) in the State of Qatar, the College of Computing and Information Technology (CCIT) invites applications for the position of NCSA Professorship Chair at the rank of Full Professor in Data and Cyber Security. This 10-month renewable full-time position will entail teaching (1 course per semester), applied research (with focus on critical infrastructure security), and service.<br><br>Responsibilities<br><br> Your Commitment <br><br>Reporting to the Head of Data and Cyber-Security Department, the successful candidate will collaborate with the faculty in the CCIT and staff members in the NCSA to achieve their respective missions. She/He will liaise with NCSA and key industry stakeholders in the State of Qatar to advance critical infrastructure security posture by working on research projects, developing strategic initiatives, and conducting workshops relevant to the field. The current data and cyber-security degree program in the CCIT encompasses a broad range of courses from applied cryptography to industrial control systems security, through network security, ethical hacking, security monitoring, and incident response. The degree program is also complemented with a master program in artificial intelligence and cognitive cybersecurity.<br><br>Qualifications<br><br> Education and Experience Requirements Education <br><br>PhD in Cyber-Security or closely related field from an internationally recognized university.<br><br>Experience<br><br> A minimum of 10 years teaching and research experience in a higher-education institution, along with preferably 5 years of employment experience as a practitioner/professional within the field of critical infrastructure security. A distinguished research record and international reputation evidenced by high quality publications in top tier journals. Excellent record of supervising research students. <br><br>Other Required Skills<br><br> A thorough knowledge and work experience in different areas of cyber security. Commitment to applied and experiential learning as a pedagogy and a key feature of UDST’s mandate. Digital literacy and demonstrated fluency in technology systems, and an ability to model and facilitate use of current and emerging digital tools to support research and learning. Demonstrated ability to develop technology-enriched learning environments that enable students to be active participants in their own learning. Commitment to the effectiveness, vitality, and self-renewal of the teaching profession through self-driven continuous professional development and life-long learning. Effective oral and written communication skills. Collaborative and collegial spirit and a demonstrated ability to establish rapport with learners, colleagues, sponsor-employers, and members of the community. Ability to initiate applied research projects. <br><br>How To Apply<br><br>Applicants must meet all essential qualifications to be shortlisted for the position; other qualifications may be a deciding factor in the selection. Qualifications and experience will be assessed through your application, which may include but not be limited to curricula vitae, motivation letter, references, teaching dossiers, and sample publications. It is the applicant’s responsibility to provide appropriate examples that illustrate how s/he meets each requirement. Failing to do so could result in the application being rejected. We thank all applicants for applying for the role; only those selected for further consideration will be contacted.

Overview<br><br>University of Doha for Science and Technology (UDST) is the first national applied University in the State of Qatar, offering applied bachelor’s and master’s degrees in different fields. UDST has over 50 programs in the fields of Computing and Information Technology, Engineering Technology and Industrial Trades, Business Management, Health Sciences, and more.<br><br>Thanks to a generous grant from the National Cyber Security Agency (NCSA, https://ncsa.gov.qa/en/) in the State of Qatar, the College of Computing and Information Technology (CCIT) invites applications for the position of NCSA Professorship Chair at the rank of Full Professor in Data and Cyber Security. This 10-month renewable full-time position will entail teaching (1 course per semester), applied research (with focus on critical infrastructure security), and service.<br><br>Responsibilities<br><br> Your Commitment <br><br>Reporting to the Head of Data and Cyber-Security Department, the successful candidate will collaborate with the faculty in the CCIT and staff members in the NCSA to achieve their respective missions. She/He will liaise with NCSA and key industry stakeholders in the State of Qatar to advance critical infrastructure security posture by working on research projects, developing strategic initiatives, and conducting workshops relevant to the field. The current data and cyber-security degree program in the CCIT encompasses a broad range of courses from applied cryptography to industrial control systems security, through network security, ethical hacking, security monitoring, and incident response. The degree program is also complemented with a master program in artificial intelligence and cognitive cybersecurity.<br><br>Qualifications<br><br> Education and Experience Requirements Education <br><br>PhD in Cyber-Security or closely related field from an internationally recognized university.<br><br>Experience<br><br> A minimum of 10 years teaching and research experience in a higher-education institution, along with preferably 5 years of employment experience as a practitioner/professional within the field of critical infrastructure security. A distinguished research record and international reputation evidenced by high quality publications in top tier journals. Excellent record of supervising research students. <br><br>Other Required Skills<br><br> A thorough knowledge and work experience in different areas of cyber security. Commitment to applied and experiential learning as a pedagogy and a key feature of UDST’s mandate. Digital literacy and demonstrated fluency in technology systems, and an ability to model and facilitate use of current and emerging digital tools to support research and learning. Demonstrated ability to develop technology-enriched learning environments that enable students to be active participants in their own learning. Commitment to the effectiveness, vitality, and self-renewal of the teaching profession through self-driven continuous professional development and life-long learning. Effective oral and written communication skills. Collaborative and collegial spirit and a demonstrated ability to establish rapport with learners, colleagues, sponsor-employers, and members of the community. Ability to initiate applied research projects. <br><br>How To Apply<br><br>Applicants must meet all essential qualifications to be shortlisted for the position; other qualifications may be a deciding factor in the selection. Qualifications and experience will be assessed through your application, which may include but not be limited to curricula vitae, motivation letter, references, teaching dossiers, and sample publications. It is the applicant’s responsibility to provide appropriate examples that illustrate how s/he meets each requirement. Failing to do so could result in the application being rejected. We thank all applicants for applying for the role; only those selected for further consideration will be contacted.

Overview<br><br>University of Doha for Science and Technology (UDST) is the first national applied University in the State of Qatar, offering applied bachelor’s and master’s degrees in different fields. UDST has over 50 programs in the fields of Computing and Information Technology, Engineering Technology and Industrial Trades, Business Management, Health Sciences, and more.<br><br>Thanks to a generous grant from the National Cyber Security Agency (NCSA, https://ncsa.gov.qa/en/) in the State of Qatar, the College of Computing and Information Technology (CCIT) invites applications for the position of NCSA Professorship Chair at the rank of Full Professor in Data and Cyber Security. This 10-month renewable full-time position will entail teaching (1 course per semester), applied research (with focus on critical infrastructure security), and service.<br><br>Responsibilities<br><br> Your Commitment <br><br>Reporting to the Head of Data and Cyber-Security Department, the successful candidate will collaborate with the faculty in the CCIT and staff members in the NCSA to achieve their respective missions. She/He will liaise with NCSA and key industry stakeholders in the State of Qatar to advance critical infrastructure security posture by working on research projects, developing strategic initiatives, and conducting workshops relevant to the field. The current data and cyber-security degree program in the CCIT encompasses a broad range of courses from applied cryptography to industrial control systems security, through network security, ethical hacking, security monitoring, and incident response. The degree program is also complemented with a master program in artificial intelligence and cognitive cybersecurity.<br><br>Qualifications<br><br> Education and Experience Requirements Education <br><br>PhD in Cyber-Security or closely related field from an internationally recognized university.<br><br>Experience<br><br> A minimum of 10 years teaching and research experience in a higher-education institution, along with preferably 5 years of employment experience as a practitioner/professional within the field of critical infrastructure security. A distinguished research record and international reputation evidenced by high quality publications in top tier journals. Excellent record of supervising research students. <br><br>Other Required Skills<br><br> A thorough knowledge and work experience in different areas of cyber security. Commitment to applied and experiential learning as a pedagogy and a key feature of UDST’s mandate. Digital literacy and demonstrated fluency in technology systems, and an ability to model and facilitate use of current and emerging digital tools to support research and learning. Demonstrated ability to develop technology-enriched learning environments that enable students to be active participants in their own learning. Commitment to the effectiveness, vitality, and self-renewal of the teaching profession through self-driven continuous professional development and life-long learning. Effective oral and written communication skills. Collaborative and collegial spirit and a demonstrated ability to establish rapport with learners, colleagues, sponsor-employers, and members of the community. Ability to initiate applied research projects. <br><br>How To Apply<br><br>Applicants must meet all essential qualifications to be shortlisted for the position; other qualifications may be a deciding factor in the selection. Qualifications and experience will be assessed through your application, which may include but not be limited to curricula vitae, motivation letter, references, teaching dossiers, and sample publications. It is the applicant’s responsibility to provide appropriate examples that illustrate how s/he meets each requirement. Failing to do so could result in the application being rejected. We thank all applicants for applying for the role; only those selected for further consideration will be contacted.

<p>Commissions the preparation and the implementation of necessary operational security software updates, firewall installation, hardware additions, and any authorized technical changes related to the security functions to ensure compliance both with internal security policies etc. and applicable laws and regulations required security levels. Design and manage processes for detection, investigation, correction, and/or prosecution of operational security breaches, violations, and incidents. Benchmark, analyze report on, and make recommendations for the improvement of Operational Technology (OT) security infrastructure. Works with management to ensure that as new equipment, facilities, services, and systems are installed that the OT security issues are addressed. Liaison with and offers technical direction to related operational security governance functions (such as Physical Security/Facilities, Risk Management, Legal and Compliance) plus senior and middle managers throughout the organization as necessary, on information security matters such as routine security activities plus emerging security risks and control technologies. Plan, implement and upgrade security measures and controls. Protect digital files and operational security systems against unauthorized access, modification, or destruction. Maintain data and monitor/review security access authorizations. Manage network, intrusion detection and prevention systems. Work out on the security tools such as security asset inventory management and risk management reporting to security information and event management system (SIEM). Define, implement, and maintain corporate security manuals, policies, procedures &amp; instructions. Coordinate further security plans, awareness received from vendors and take required actions. Security assessments of network infrastructure, hosts and applications. Work out on ICS security related audit findings and maintain corrective actions. Download, validate and apply the latest Antivirus DAT file to AV server and ensure published to all ICS machines by continuously monitor the AV server dashboard. Asset identification, monitoring and analysis using supportive tools (IPS, firewall log, system events and antivirus reports. ICS Firewall Events log, DNS, Router, and switches Events log analysis. Validation and deployment of firmware and software updates, deactivate of unnecessary software's or access. Define and implement backup schedule for all ICS assets, System configuration backups, Machines image backups, Router and switches backups, FW backups. Manage User accounts ICS, network, and security equipment. Support Project execution team to integrate new Operational Technology (OT) system in Plant security framework. Work out on Audit findings and observations. Work out with ICS modifications as requested. Collect and archive system logs, events, change logs, failure events etc. To support audit and forensic analysis. Ensure that all implementation activities are complied with published ICS policies, instructions, procedures.</p><p><strong>Desired Candidate Profile</strong></p><p>Typically, a background in technical Operational Technology (OT) roles such as architecture, security program development or operations, with a clear and abiding interest in operational security.</p><p>Bachelor's Degree in Information security Technology, Computer Science or Electronic/Electrical Engineer.</p><p>Must be ICS certified from SANS, however following certificates will be great additional advantage for the candidate:</p><ul><li>GIAC GICSP (Global Industrial Cybersecurity Professional).</li><li>ISA CAP (Certified Automation Professional).</li><li>Cybersecurity for Automation, Control, and SCADA Systems (ISA-99/IEC-62443) - ISA</li><li>Advanced SCADA Security - Red Tiger/ any other vendor.</li><li>Industrial Cybersecurity for OPC - Matrikon/any other vendor.</li><li>OPC-UA Hands-on Training Level-3 - OPCTI.</li></ul><p>3-5 years at least of field experience in OT Cybersecurity domain in Oil &amp; gas &amp; petrochemical industry.</p><p>Excellent knowledge of common IT/OT ICS specialization areas related to PLC's, DCS's, PDCS, Firewalls, networks, and switches.</p><p>Knowledge of international &amp; national standards frameworks such as ISA99, IEC62433, IEC61511, IEC62351, IEC62591 ISO27001, 27002, 27005 Compliance regulations.</p><p>Strong understanding of core operations and of the information security requirements.</p><p>Extensive knowledge of several ICS DCS/PDCS/PLC/ESD/Servers, routers, switches &amp; firewalls technologies within several OEM technologies such as, Siemens, HIMA, TRICONEX, HONEYWELL, GE, Allan Bradley, CISCO, MacAfee.</p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Job Summary <br> <p>The incumbent will assist the Senior Vice President (SVP) of IT Security International in providing oversight, guidance and governance to the QNB Group Subsidiaries in all matters relating to the QNB Group IT Security. The incumbent will be working closely with the IT Security teams and other relevant stakeholders in each of the Subsidiaries and International Branches to provide oversight, guidance and challenge on the deployment of a consistent methodology, approach and execution of Group Information Security policies, standards and practices. The incumbent may undertake risk assessments and promote efficient and prompt communication, interaction and synergies between QNB International Units’ IT Security functions with the various QNB business areas (i.e. Corporate and Institutional Banking, Treasury, Retail, Wealth Management) and support areas (Operations, IT, Services, Communications, Human Capital), as well as Audit, Legal, Group Strategy, Compliance and Financial Control functions (”QNB Divisions”).</p><br> <br> <br><br> Main Responsibilities <br> <p>A. Shareholder &amp; Financial: - - - - - - - </p><br><p>Support the implementation of the QNB Group Information Security Framework (Polies, Procedures and </p><br><p>standards) with the aim to improve the groups management of its Information Security </p><br><p>Increase the effectiveness of management’s oversight by creating a methodology and list of KPI/KRIs to monitor </p><br><p>the effectivenes or controls and assess the security posture of the entities. </p><br><p>Provide inputs to the Manager of IT Security International to prepare the Information Security Strategy. </p><br><p>Assist the Senior Vice President of IT Security International in preparing the Information Security Strategy that </p><br><p>reflects the Group’s tolerance for risk and present it to the GCRO for discussion/ review. </p><br><p>Promote a strong control culture and general awareness of risk management across the business. </p><br><p>Implements KPI’s and best practices for IT Security International. </p><br><p>Act within the limits of the powers delegated to the incumbent. </p><br><p>B. Customer (Internal &amp; External): - - - - - - - - - - - - </p><br><p>Build and maintain strong and effective relationship with all Support departments and units to achieve the Group’s </p><br><p>goals/ objectives. </p><br><p>Build and maintain strong and effective relationship with all relevant stakeholders in Subsidiaries and International </p><br><p>branches to achieve the Group’s goals/ objectives. </p><br><p>Provide timely and accurate information to the external and internal auditors and the Compliance function as and </p><br><p>when required. </p><br><p>Ensure the pro-active participation and support of QNB International Units in the preparation / updating of policies, </p><br><p>procedures and guidelines. </p><br><p>Ensure that the information security framework is well embedded across the business and functions to ensure </p><br><p>transparency of risks, issues and events. </p><br><p>Regularly contribute presentations to governance committees ensuring the Information Security profile is clearly </p><br><p>reported and understood. </p><br><p>Consolidate portfolio management data/ other Information Security data received from the other Information </p><br><p>Security sub-functions. </p><br><p>Produce adequate and accurate reports pertaining to Information Security. </p><br><p>To assist customers in all their queries on Bank’s product and seek solution to their requests. </p><br><p>Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve </p><br><p>improvements in turn-around time. </p><br><p>Build and maintain strong/effective relationships with related departments/units to achieve the Group’s objectives. </p><br><p>Provide timely/accurate data to external/internal Auditors, Compliance, Financial Control and Risk when required. </p><br><p>C. Internal (Processes, Products, Regulatory): - </p><br><p>Stay updated with the relevant best practice pronouncements pertaining to Information Security and work towards </p><br><p>instilling the same within the Group’s Information Security practices.</p><br><p>- Carry out appropriate on-going evaluation of all systems, processes and infrastructure, to ensure policies, </p><br><p>processes and standards are in place to identify, assess, measure, manage and report Information Securitys, </p><br><p>including identification of the Subsidiaries systemic Information Security. - Escalate relevant Information Security reporting/issues as requested by the VPs and Managers of IT Security </p><br><p>International to include and comply with all internal and/or external requirements. - Assist in the delivery of other projects as mandated by the VPs and Managers of IT Security International </p><br><p>D. Learning &amp; Knowledge: - Possess an understanding of business processes and controls in all related operational areas. - Possess superior knowledge on quantitative techniques to assessing, measuring and managing Information </p><br><p>Security. - Maintain an understanding of all pertinent regulations as well as best practices pertaining to Information Security. - Keep abreast of the latest technical developments in modeling Information Security. - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. </p><br><p>E. Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, </p><br><p>Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control </p><br><p>Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, </p><br><p>monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the </p><br><p>Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank. </p><br><p>F. Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course </p><br><p>of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and </p><br><p>Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time.</p><br> <br> <br><br> Education and Experience Requirements <br> <p>- Bachelor’s degree preferably with a Major in Marketing, Banking, Finance, Accounting, Economics, Business Administration or Information Technology (related field of study). </p><br><p>- Professional certifications such as CCSP, CISSP is mandatory. </p><br><p>- At least of 6 years’ experience in a major International bank in an Information Security department </p><br><p>- Ideally a mix of both 1st, 2nd and 3rd line experience</p><br> <br> <br> </div>

Dear Candidate,Greetings from Brunel Energy. We are currently hiring for an OT Cyber Security Engineer for a well-known Oil & Gas company in Qatar. Position: OT Cyber Security Engineer Location: Qatar Employment Type: Permanent Work Schedule: 8 Hours / 5 Days per Week<br>Bachelor’s degree in automation and control systems, industrial control system, Cyber Security, or computer science engineering. Knowledge and/or Experience4 years’ experience in engineering in oil and gas environment. Understanding of different operational technologies environment for example DCS, SIS, metering, machinery monitoring / controls systems, and Instrument asset management systems. Understanding of OT Infrastructure communication and protocols. Knowledge of OT Cyber Security Infrastructure and solutions such as Endpoint Protection Platforms, Industrial Networks and boundaries protection, OT IDS, SIEM, Authentication and Access control, etc. Familiar with industry- specific regulations and standards that impact Operational Technology Cyber Security such us (IEC, ISA, NIST, ISO).<br>Interested relevant candidate may share the resume on r.rohit@brunel.net with the below following details:-<br>Full Name as per Passport:Date of Birth:Nationality:Highest Educational Qualification:Direct Mobile / Whats App Number:Marital Status:Dependents:MS Teams ID:Notice Period:Current Location:Point of Origin:Current Salary:Expected Salary:<br>Please confirm the following:Do you have 4+ years of Oil & Gas engineering experience, with substantial experience in OT/ICS Cyber Security? - Have you worked hands-on with DCS, SIS, PLC, SCADA, or other Industrial Control Systems, rather than exclusively in IT Cyber Security? - Do you have experience designing or supporting OT network architecture, network segmentation, industrial firewalls, OT IDS, and secure OT infrastructure? - Have you supported FAT/SAT, commissioning, incident management, troubleshooting, and project execution for OT Cyber Security systems? - <br><br>Regards,Rohit Brunel

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>Urgent Security Specialist Duties and Responsibilities Minimum experience - 4 Years Analyze IT specifications to assess security risks Design and implement safety measures and data recovery plans Act on privacy breaches and malware threats Serve as a security expert and conduct trainings when needed Draft policies and guidelines Proven experience as a Computer Security Specialist Programming skills are preferred (e.g. knowledge of C++, PHP languages) Familiarity with security frameworks (e.g. NIST Cybersecurity framework) and risk management methodologies Knowledge of patch management, firewalls and intrusion detection/prevention systems (e.g. TippingPoint) Familiarity with public key infrastructure (PKI) and cryptographic protocols (e.g. SSL/ TLS) An analytical mind with excellent problem-solving ability Outstanding communication and organization skills Decision-making skills Analyze and establish security requirements for your systems/networks Defend systems against unauthorized access, modification and/or destruction Configure and support security tools such as firewalls, anti-virus software, patch management systems, etc. Define access privileges, control structures and resources Perform vulnerability testing, risk analyses and security assessments Identify abnormalities and report violations Oversee and monitor routine security administration Develop and update business continuity and disaster recovery protocols Train fellow employees in security awareness, protocols and procedures Design and conduct security audits to ensure operational security Respond immediately to security incidents and provide post-incident analysis Research and recommend security upgrades Provide technical advice to developers regarding various security vulnerabilities like SQL Injection, XSS (Cross Site Scripting),Source Code Revelation,Remote File Inclusion,Session Hijacking,Cross Site Request Forgery</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><p>Proven experience as a Computer Security Specialist Programming skills are preferred (e.g. knowledge of C++, PHP languages) Familiarity with security frameworks (e.g. NIST Cybersecurity framework) and risk management methodologies Knowledge of patch management, firewalls and intrusion detection/prevention systems (e.g. TippingPoint) Familiarity with public key infrastructure (PKI) and cryptographic protocols (e.g. SSL/ TLS) An analytical mind with excellent problem-solving ability Outstanding communication and organization skills Decision-making skills</p><p></p></section>

Dear Candidate,Greetings from Brunel Energy. We are currently hiring for an OT Cyber Security Engineer for a well-known Oil & Gas company in Qatar. Position: OT Cyber Security Engineer Location: Qatar Employment Type: Permanent Work Schedule: 8 Hours / 5 Days per Week<br>Bachelor’s degree in automation and control systems, industrial control system, Cyber Security, or computer science engineering. Knowledge and/or Experience4 years’ experience in engineering in oil and gas environment. Understanding of different operational technologies environment for example DCS, SIS, metering, machinery monitoring / controls systems, and Instrument asset management systems. Understanding of OT Infrastructure communication and protocols. Knowledge of OT Cyber Security Infrastructure and solutions such as Endpoint Protection Platforms, Industrial Networks and boundaries protection, OT IDS, SIEM, Authentication and Access control, etc. Familiar with industry- specific regulations and standards that impact Operational Technology Cyber Security such us (IEC, ISA, NIST, ISO).<br>Interested relevant candidate may share the resume on r.rohit@brunel.net with the below following details:-<br>Full Name as per Passport:Date of Birth:Nationality:Highest Educational Qualification:Direct Mobile / Whats App Number:Marital Status:Dependents:MS Teams ID:Notice Period:Current Location:Point of Origin:Current Salary:Expected Salary:<br>Please confirm the following:Do you have 4+ years of Oil & Gas engineering experience, with substantial experience in OT/ICS Cyber Security? - Have you worked hands-on with DCS, SIS, PLC, SCADA, or other Industrial Control Systems, rather than exclusively in IT Cyber Security? - Do you have experience designing or supporting OT network architecture, network segmentation, industrial firewalls, OT IDS, and secure OT infrastructure? - Have you supported FAT/SAT, commissioning, incident management, troubleshooting, and project execution for OT Cyber Security systems? - <br><br>Regards,Rohit Brunel

Senior Cloud and Network Security Engineer (Azure)<br><br>Position Summary<br><br>We are seeking a Senior Cloud and Network Security Engineer with at least 10 years of relevant experience to design, implement, and maintain secure network infrastructure across Microsoft Azure and on-premises environments.<br><br>This role combines network security architecture with hands-on engineering, with particular responsibility for DNS, VPN connectivity, Azure Private Endpoints, proxies, and on-premises firewalls. The successful candidate will support multiple projects, translating business and technical requirements into secure, reliable, and scalable network designs.<br><br>Key Responsibilities<br><br>Network Architecture and Project Delivery<br><br>- Design end-to-end network security architectures for Azure and hybrid environments, ensuring alignment with enterprise security standards and project requirements.<br>- Develop high-level and low-level designs, network diagrams, IP addressing plans, traffic flow mappings, and firewall rule matrices.<br>- Define network segmentation, routing, ingress and egress controls, and secure connectivity between applications, cloud services, and on-premises systems.<br>- Review proposed solutions, identify network security risks and dependencies, and recommend appropriate controls.<br>- Work with solution architects, cybersecurity teams, infrastructure engineers, application teams, and vendors throughout project delivery.<br><br>Azure Networking and Security<br><br>- Configure and manage Azure Virtual Networks, subnets, peering, route tables, Network Security Groups, and Application Security Groups.<br>- Implement Azure Private Endpoints and Private Link, including associated DNS configuration and access controls.<br>- Configure and troubleshoot Azure DNS, Private DNS Zones, Azure DNS Private Resolver, and hybrid DNS resolution.<br>- Implement and maintain site-to-site and point-to-site VPNs, Azure VPN Gateway, and Express Route connectivity where required.<br>- Configure Azure Firewall, network virtual appliances, NAT Gateway, and application protection services such as Web Application Firewall.<br>- Design and maintain hub-and-spoke or Azure Virtual WAN architectures, including centralized inspection and controlled outbound access.<br><br>On-Premises Firewalls, Proxies, and Hybrid Connectivity<br><br>- Configure, maintain, and troubleshoot on-premises firewalls, including security policies, NAT rules, routing, VPN tunnels, and logging.<br>- Manage enterprise proxies and secure web gateways, including authentication, URL filtering, allowlists, and TLS inspection requirements.<br>- Establish secure connectivity between Azure workloads, corporate networks, third-party services, and remote users.<br>- Investigate connectivity issues involving DNS, routing, asymmetric traffic flows, firewall policies, proxies, certificates, and VPN tunnels.<br>- Review firewall and proxy rules regularly to remove unnecessary access and enforce least-privilege connectivity.<br><br>Operations, Governance, and Documentation<br><br>- Monitor network availability, performance, and security using Azure and enterprise monitoring tools.<br>- Support incident investigation and root cause analysis for network and security-related issues.<br>- Implement changes through established change management processes, including impact assessments, testing, and rollback plans.<br>- Automate repeatable configurations using Terraform, Bicep, Power Shell, or Azure CLI.<br>- Maintain configuration documentation, operational runbooks, architecture standards, and support handover materials.<br>- Validate resilience and failover arrangements for critical network connectivity and security components.<br><br>Required Experience and Technical Skills<br><br>- Minimum 10 years of experience in network engineering, network security, infrastructure security, or closely related roles.<br>- Substantial hands-on experience designing and implementing Microsoft Azure networking and security solutions in enterprise environments.<br>- Proven delivery of hybrid architectures connecting Azure with on-premises networks.<br>- Strong practical expertise in DNS, TCP/IP, subnetting, routing, BGP, NAT, IPsec VPNs, and TLS.<br>- Demonstrated experience configuring Azure Private Endpoints and resolving hybrid private DNS issues.<br>- Hands-on experience with enterprise firewalls from vendors such as Palo Alto Networks, Fortinet, Check Point, or Cisco.<br>- Experience managing enterprise proxies or secure web gateways and troubleshooting application connectivity through these services.<br>- Strong understanding of network segmentation, Zero Trust principles, least-privilege access, and defense in depth.<br>- Infrastructure as Code (IaC): Hands-on experience using Terraform or Azure Bicep to provision and manage Azure networking and security infrastructure, including virtual networks, subnets, route tables, security groups, firewalls, VPN gateways, Private Endpoints, and DNS configurations.<br>- Experience developing reusable IaC modules, managing configurations in version control, and deploying changes through CI/CD pipelines.<br>- Ability to produce clear architecture documentation and take ownership of technical delivery across multiple projects.<br>- Strong troubleshooting, communication, and stakeholder management skills.<br><br>Qualifications and Certifications<br><br>- Bachelor’s degree in computer science, information technology, engineering, or a related discipline, or equivalent professional experience.<br>- Required: Microsoft Certified: Azure Network Engineer Associate (AZ-700).<br>- Preferred: Additional relevant Microsoft certifications in Azure architecture or cloud security.<br>- Advantageous: Professional-level networking or security certifications, such as CCNP, CCIE, CISSP, or relevant firewall vendor certifications.<br><br>Soft Skills and Professional Competencies<br><br>- Influencing and stakeholder engagement: Ability to influence technical teams, project managers, and business stakeholders to adopt secure architecture decisions and implement recommended controls.<br>- Driving best practices: Ability to establish, promote, and embed cloud infrastructure and network security best practices into project delivery and day-to-day operations.<br>- Communication: Clearly explain technical risks, architectural decisions, and recommendations to both technical and non-technical audiences.<br>- Collaboration: Work effectively across cybersecurity, infrastructure, application, and vendor teams to resolve dependencies and deliver solutions.<br>- Ownership and accountability: Take responsibility for solutions from design through implementation and operational handover, proactively addressing risks and issues.<br>- Problem-solving and judgment: Apply structured troubleshooting and sound judgment to balance security, reliability, cost, and business requirements.<br>- Constructive challenge: Confidently challenge insecure or unsustainable approaches and propose practical alternatives.<br>- Mentoring and knowledge sharing: Support colleagues through technical guidance, design reviews, documentation, and knowledge-sharing sessions.<br><br>Desirable Experience<br><br>- Supporting secure connectivity for enterprise applications, data platforms, and AI services.<br>- Working in regulated industries or large organizations with formal security governance.<br>- Integrating network and firewall logs with centralized monitoring and SIEM platforms.<br>- Designing highly available connectivity and supporting disaster recovery exercises.

<p><b>Job Role</b>: IT Security Specialist Expereince: 10+ years Location: Qatar (Onsite) Duration: 1 year renewable Key Job Accountabilities: Investigates security breaches in accordance with established procedures and security standards and recommends required actions and supports / follows up to ensure these are implemented. Investigates and reconciles violation reports and logs generated by automated systems. Where appropriate (i.e. involving employees within own organisation) interviews minor offenders and compiles reports and recommendations for management follow-up. Provides guidance and assistance in defining access rights and privileges. Operates and administers both physical and logical access controls used in order to provide continuous and secure access to information services. Conducts security control reviews in well defined areas. Assesses security of information and infrastructure components. Investigates and assesses risks of network attacks and recommends remedial action. Conducts business risk and vulnerability assessments and business impact analysis for medium complexity information systems. Reviews compliance with information security policies and standards. Assesses configurations and security procedures for adherence to legal and regulatory requirements. Reviews network usage. Assesses the implications of any unacceptable usage and breaches of privileges or corporate policy. Recommends appropriate action. Explains the purpose of and provides advice and guidance on the application and operation of elementary physical, procedural and technical security controls. (For example the key controls defined in IS27002). Communicates information assurance risks and requirements effectively to users of systems and networks. Investigates suspected attacks and undertakes the investigation and resolution of security incidents, in accordance with established procedures including incident management procedures. Uses forensics where appropriate . Reports on findings and lessons learnt / improvement actions. Delivers elements of the security components of system architectures. Investigates causes of incidents and seeks resolution.</p><p><strong>Desired Candidate Profile</strong></p><p>Qualifications: Bachelor s degree in Computer Science, Information Technology, Information Systems or other relevant discipline. Knowledge and/or Experience: 10 years Information Security experience ideally within the oil/gas industry. Conversant with relevant Information Security national and international standards. Attain and maintain experience in accordance with relevant IT competency frameworks. Good working knowledge of Information Security coupled with equivalent knowledge of the activities of those businesses and other organizations that employ IT. Understanding of the principles and practices involved in development and maintenance of Information Security requirements Technical and Business Skills: Assesses and evaluates risk and the impact of legislation, and actively promotes compliance. Possesses a good understanding of IT business applications. Effective and persuasive in both written and oral communication</p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p> <b>Experience:</b> 3–5+ years in OT/ICS Cybersecurity</p><p> <b>Industry:</b> Oil &amp; Gas / Petrochemical</p><p> <b>Education:</b> Bachelor’s in Cybersecurity, Computer Science, Electrical/Electronics or related field</p><p> <b>Certification:</b> SANS ICS Certification; <b>GICSP </b></p><p> <b>Skills:</b> PLC, DCS, SCADA, ESD, PDC, Firewalls, Networks, IDS/IPS, SIEM</p><p> <b>Standards:</b> ISA-99, IEC 62443, IEC 61511, IEC 62351, ISO 27001/27002/27005</p><p> <b>OEM:</b> Siemens, HIMA, Triconex, Honeywell, GE, Allen-Bradley, Cisco</p> </div><h2 class="h5">Skills</h2> <div data-jb-field="skills"><ul><li><b>OT / ICS Cybersecurity</b></li><li><b>DCS / PLC / SCADA / SIS / ESD</b></li><li><b>OT Network Security &amp; Segmentation</b></li><li><b>Firewalls / Routers / Switches</b></li><li><b>Risk &amp; Vulnerability Assessment</b></li><li><b>System Hardening &amp; Patch Management</b></li><li><b>SIEM / IDS / IPS / Nozomi</b></li><li><b>IEC 62443 / ISA-99</b></li><li><b>ICS Security Monitoring &amp; Incident Response</b></li><li><b>Backup &amp; Disaster Recovery</b></li><li><b>FAT / SAT / Commissioning</b></li><li><b>Oil &amp; Gas / Petrochemical Cybersecurity</b></li><li><b>GICSP / SANS ICS </b></li></ul><p><br></p><p><br></p></div>

Job Description<br><br>We are seeking a Cybersecurity Consultant with analytical, technical, and communication skills to support corporate cybersecurity initiatives across multiple domains, including risk, architecture, data security, and resilience. The role is designed for a well-rounded professional who can operate in dynamic environments and bridge the gap between technical teams, business stakeholders, and security governance functions.<br><br>Responsibilities<br><br>Cybersecurity Risk & Advisory: Perform and support risk assessments across IT systems, cloud environments, applications, and third-party services. Contribute to maintaining the risk register and support the definition of mitigation strategies and security improvements Security Architecture Support: Assist in the design and review of secure architectures across on-premise and cloud environments. Provide input on security controls, identity & access management, network segmentation, and secure system design principles. Data Security & Privacy: Support the implementation and assessment of data protection measures, including classification, encryption, data lifecycle management, and compliance with privacy and regulatory requirements. Disaster Recovery (DR) Planning: Participate in disaster recovery planning and testing activities, <br><br>supporting the validation and continuous improvement of recovery capabilities.<br><br>Cyber Incident & Crisis Support: Collaborate with security operations and incident response teams to ensure effective integration of incident scenarios into crisis management and resilience processes. Governance, Risk & Compliance (GRC) support: Provide support in aligning cybersecurity practices with relevant frameworks and standards (e.g., ISO 27001, NIST, QSF, NIA). Assist in audits, control assessments, and evidence collection activities. Third-Party security risk management: Evaluate and monitor cybersecurity risks related to vendors and partners, supporting due diligence activities and tracking remediation actions. Continuous Improvement: Support ongoing enhancement of cybersecurity risk and resilience practices by incorporating lessons learned, regulatory updates, and evolving business needs.<br><br>Qualifications<br><br>Bachelor’s in Information Security, IT, or related field (or equivalent experience). Experience: 2-3 years in cybersecurity consulting or audit Languages: Strong English required Certifications: ISO/IEC 27001 ISO/IEC 22301 <br>About Malomatia<br><br> ABOUT US <br><br>malomatia is a leading Qatar-based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end-to-end technology solutions that empower clients to achieve their strategic goals.<br><br>Our mission<br><br>Empowering Qatar’s businesses and governments to leap into the digital future with agile, knowledge-driven solutions.<br><br>Our vision<br><br>To become Qatar’s trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world-class tech ecosystem.<br><br>Driving change that makes a real impact<br><br>Since 2008, malomatia has been driving Qatar’s digital transformation through innovative, ISO-certified IT solutions. With expertise across key public and private sectors, we empower the nation’s vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar’s sustainable future.<br><br>About The Team<br><br>Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high-value digital solutions tailored to the unique needs of our clients.<br><br>Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation.<br><br>Join us in shaping the future of technology in Qatar

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><ul><li><p>Develop and implement ICS/OT Cyber Security frameworks, policies, and procedures.</p></li><li><p>Ensure compliance with ISA/IEC 62443 and industry cybersecurity standards.</p></li><li><p>Perform OT risk assessments, vulnerability assessments, and cybersecurity gap analysis.</p></li><li><p>Secure Industrial Control Systems including DCS, PLC, SIS, SCADA, and Windows-based OT environments.</p></li><li><p>Manage patch management, antivirus, Active Directory, firewalls, SIEM, IDS/IPS, and endpoint security.</p></li><li><p>Support incident response, threat monitoring, and cybersecurity investigations.</p></li><li><p>Design and review secure OT network architecture, network segmentation, and industrial communication security.</p></li><li><p>Participate in FAT, SAT, commissioning, MOC, PSSR, and operational handover activities.</p></li><li><p>Collaborate with Operations, Maintenance, Engineering, and IT teams to strengthen OT cybersecurity.</p></li><li><p>Prepare technical documentation, reports, and cybersecurity compliance records.</p></li></ul></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><ul><li><p>Bachelor's Degree in Electrical, Instrumentation, Electronics, Automation, Computer Engineering, Computer Science, Cyber Security, or related discipline.</p></li><li><p>Minimum 5 years of experience in Control Systems Engineering, DCS/PLC/SIS, Instrumentation, or Industrial Automation.</p></li><li><p>Minimum 3 years of hands-on ICS/OT Cyber Security experience in Oil &amp; Gas, Petrochemical, Refinery, LNG, or Chemical Manufacturing industries.</p></li><li><p>Strong knowledge of ISA/IEC 62443, NIST SP 800-82, and industrial cybersecurity best practices.</p></li><li><p>Experience with Active Directory, Windows Server, GPO, SIEM, IDS/IPS, Firewalls, Antivirus, and Patch Management.</p></li><li><p>Knowledge of Industrial Protocols such as Modbus, Profibus, OPC, and Ethernet/IP.</p></li><li><p>Experience with Honeywell, Yokogawa, or Emerson DCS platforms is highly preferred.</p></li><li><p>Professional certifications such as ISA/IEC 62443, GICSP, CISSP, CCNA, or MCSE will be an advantage.</p></li><li><p>Strong communication, troubleshooting, and stakeholder management skills.</p></li></ul><p></p></section>

Introduction<br><br>A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.<br><br>Your Role And Responsibilities<br><br>Support IBM's Cyber Strategy & Risk team on client engagements in cybersecurity strategy, risk management, and governance/compliance. The intern will assist consultants and cybersecurity professionals with research, documentation, assessments, analysis, and the development of client-ready deliverables.<br><br>Cybersecurity Strategy: support development of cybersecurity strategies, roadmaps, operating models, and maturity improvement plans; research trends, emerging threats, regulatory requirements, and best practices; benchmark capabilities against NIST CSF, ISO 27001, CIS Controls and other standards; prepare presentations, reports, and executive summaries.<br><br>Risk Management: support risk assessments (threats, vulnerabilities, business impacts, control gaps); document risk registers, treatment plans, and remediation tracking; analyze risks against business processes, critical assets, third parties, and technology; prepare risk dashboards and management reports.<br><br>Governance, Risk & Compliance: review policies, standards, and procedures; support compliance assessments against frameworks and regulations; collect and organize audit evidence; map controls across ISO 27001, NIST, PCI DSS, Qatar NIA, and other requirements.<br><br>Project & Delivery Support: prepare workshops, meeting notes, action trackers, and client deliverables; maintain project documentation, status updates, and issue logs; perform data analysis, document review, and QA on deliverables.<br><br>Eligibility: This internship is open to Qatari Nationals only.<br><br>Required Technical And Professional Expertise<br><br>Currently pursuing or recently completed a degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Business, Risk Management, or a related field. Strong interest in cybersecurity governance, risk, compliance, strategy, and consulting. Good understanding of basic cybersecurity concepts (threats, vulnerabilities, controls, identity management, incident response, data protection, security awareness). Strong analytical, research, and documentation skills. Good command of Microsoft Power Point, Word, and Excel. Ability to work independently and in a team. Strong English communication skills; Arabic is a plus.<br><br>Arabic, Command, Communication, Computer Science, Consulting, Documentation, English, Incident Response, Information Technology, Management, Microsoft Power Point, Research, Risk Management, Security, Security Awareness, Strategy, Cybersecurity, Compliance, Data Protection, Risk, Governance, National Institute of Standards and Technology Cybersecurity Framework, Risk & Compliance, International Organization for Standardization, Information Systems, Customer Information Systems<br><br>Preferred Technical And Professional Experience<br><br>Exposure to frameworks such as NIST CSF, ISO 27001, CIS Controls, Qatar NIA. Arabic language

<p><strong>Key Responsibilities:</strong><br></p><ul><li><p>Designing and delivering cybersecurity training programs.<br></p></li><li><p>Creating and updating cyber security awareness/educational content.<br></p></li><li><p>Assess the training needs and evaluate the current security awareness level of organizations.<br></p></li><li><p>Develop customized training programs tailored to different employee roles and departments.<br></p></li><li><p>Review and update programs based on feedback, emerging threats, or organizational needs.<br></p></li><li><p>Develop Simulation Scenarios and Practical Exercises<br></p></li><li><p>Conducting research on emerging threats and technologies.</p></li><li><p>Monitoring and reporting training and development metrics.</p></li></ul><p><strong>Desired Candidate Profile</strong></p><p><strong>Education:</strong></p><ul><li><p>Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.</p></li><li><p>Master’s degree in Cybersecurity (Preferred)</p></li></ul><p><strong>Certifications:</strong></p><ul><li><p>CompTIA Security+<br></p></li><li><p>GIAC Security Essentials (GSEC)<br></p></li><li><p>Cisco Certified Network Associate (CCNA)<br></p></li><li><p>CompTIA Cybersecurity Analyst (CySA+)<br></p></li><li><p>Computer Hacking Forensic Investigator (CHFI)<br></p></li><li><p>CompTIA PenTest+<br></p></li><li><p>Certified Ethical Hacker (CEH)<br></p></li><li><p>Certified Penetration Tester (CPENT)<br></p></li><li><p>GIAC Certified Incident Handler (GCIH)<br></p></li><li><p>GIAC Certified Penetration Tester (GPEN)<br></p></li><li><p>Offensive Security Certified Professional (OSCP)<br></p></li><li><p>Certified Information Systems Auditor (CISA)<br></p></li><li><p>Certified Information Security Manager (CISM)<br></p></li><li><p>Certified Information Systems Security Professional (CISSP)<br></p></li></ul><p><strong>Experience:</strong></p><ul><li><p>5-10 years of experience in the Cyber Security field</p></li></ul><p><strong>Language Proficiency:</strong></p><ul><li><p>Proficiency in English & Arabic is required.</p></li></ul><p><strong>Additional Required Skills and Knowledge:</strong></p><ul><li><p>Strong presentation and communication skills.<br></p></li><li><p>Ability to simplify complex technical concepts for non-technical audiences.<br></p></li><li><p>In-depth knowledge of the latest cybersecurity threats and defence strategies.<br></p></li><li><p>Analytical thinking and problem-solving abilities.<br></p></li><li><p>Capability to assess and improve security awareness programs.</p></li></ul>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>Key Responsibilities: Designing and delivering cybersecurity training programs. Creating and updating cyber security awareness/educational content. Assess the training needs and evaluate the current security awareness level of organizations. Develop customized training programs tailored to different employee roles and departments. Review and update programs based on feedback, emerging threats, or organizational needs. Develop Simulation Scenarios and Practical Exercises Conducting research on emerging threats and technologies. Monitoring and reporting training and development metrics. The contract duration is 12 months, with the possibility of extension based on departmental requirements.</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><ul><li>Bachelor s degree in Cybersecurity, Information Technology, Computer Science, or a related field.</li><li>Master s degree in Cybersecurity (Preferred)</li><li>Certifications: CompTIA Security+ GIAC Security Essentials (GSEC) Cisco Certified Network Associate (CCNA) CompTIA Cybersecurity Analyst (CySA+) Computer Hacking Forensic Investigator (CHFI) CompTIA PenTest+ Certified Ethical Hacker (CEH) Certified Penetration Tester (CPENT) GIAC Certified Incident Handler (GCIH) GIAC Certified Penetration Tester (GPEN) Offensive Security Certified Professional (OSCP) Certified Information Systems Auditor (CISA) Certified Information Security Manager (CISM) Certified Information Systems Security Professional (CISSP)</li><li>5-10 years of experience in the Cyber Security field</li><li>Proficiency in English &amp; Arabic is required.</li><li>Strong presentation and communication skills.</li><li>Ability to simplify complex technical concepts for non-technical audiences.</li><li>In-depth knowledge of the latest cybersecurity threats and defence strategies.</li><li>Analytical thinking and problem-solving abilities.</li><li>Capability to assess and improve security awareness programs.</li></ul><p></p></section>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p>* To execute the day-to-day ICS activities related to the operational technology security in the plants by managing the design and overseeing the implementation of all security measures linked to ICS applications and systems, conducting risk assessment and developing contingency plans to mitigate any foreseeable security threats and protect the confidentiality and integrity of employee, customer and business information in compliance with ICS cybersecurity policies , instructions, manuals and standards.</p><br><br><p>* Commissions the preparation and the implementation of necessary operational security software updates, firewall installation, hardware additions, and any authorized technical changes related to the security functions to ensure compliance both with internal security policies etc. and applicable laws and regulations required security levels.* Design and manage processes for detection, investigation, correction, and/or prosecution of operational security breaches, violations, and incidents.<br>* Benchmark, analyze report on, and make recommendations for the improvement of Operational Technology (OT) security infrastructure.* Works with management to ensure that as new equipment, facilities, services, and systems are installed that the OT security issues are addressed.<br>* Typically, a background in technical Operational Technology (OT) roles such as architecture, security program development or operations, with a clear and abiding interest in operational security.* Liaison with and offers technical direction to related operational security governance functions (such as Physical Security/Facilities, Risk Management, Legal and Compliance) plus senior and middle managers throughout the organization as necessary, on information security matters such as routine security activities plus emerging security risks and control technologies.<br>* Plan, implement and upgrade security measures and controls.* Protect digital files and operational security systems against unauthorized access, modification, or destruction.<br>* Maintain data and monitor/review security access authorizations.* Manage network, intrusion detection and prevention systems.<br>* Work out on the security tools such as security asset inventory management and risk management reporting to security information and event management system (SIEM).* Define, implement, and maintain corporate security manuals, policies, procedures &amp; instructions.<br>* Coordinate further security plans, awareness received from vendors and take required actions.* Security assessments of network infrastructure, hosts and applications.<br>* Work out on ICS security related audit findings and maintain corrective actions.* Download, validate and apply the latest Antivirus DAT file to AV server and ensure published to all ICS machines by continuously monitor the AV server dashboard.<br>* Asset identification, monitoring and analysis using supportive tools (IPS, firewall log, system events and antivirus reports.* ICS Firewall Events log, DNS, Router, and switches Events log analysis.<br>* Validation and deployment of firmware and software updates, deactivate of unnecessary software's or access.* Define and implement backup schedule for all ICS assets, System configuration backups, Machines image backups, Router and switches backups, FW backups.<br>* Manage User accounts ICS, network, and security equipment.* Support Project execution team to integrate new Operational Technology (OT) system in Plant security framework.<br>* Work out on Audit findings and observations.* Work out with ICS modifications as requested.<br>* Collect and archive system logs, events, change logs, failure events etc. To support audit and forensic analysis.* Ensure that all implementation activities are complied with published ICS policies, instructions, procedures,</p><br><br><ul> <li>Bachelor's Degree in Information security Technology, Computer Science or Electronic/Electrical Engineer.</li> <li>Must be ICS certified from SANS, however following certificates will be great additional advantage for the candidate: - <ul> <li>GIAC GICSP (Global Industrial Cybersecurity Professional).</li> <li>ISA CAP (Certified Automation Professional).</li> <li>Cybersecurity for Automation, Control, and SCADA Systems (ISA-99/IEC-62443) - ISA</li> <li>Advanced SCADA Security - Red Tiger/ any other vendor.</li> <li>Industrial Cybersecurity for OPC - Matrikon/any other vendor.</li> <li>OPC-UA Hands-on Training Level-3 - OPCTI.</li> </ul> </li> <li>3-5 years at least of field experience in OT Cybersecurity domain in Oil &amp; gas &amp; petrochemical industry.</li> <li>Excellent knowledge of common IT/OT ICS specialization areas related to PLC's, DCS's, PDCS, Firewalls, networks, and switches.</li> <li>Exposure of implementing IT/OT security policies and regulations.</li> <li>Knowledge of international &amp; national standards frameworks such as ISA99, IEC62433, IEC61511, IEC62351, IEC62591 ISO27001, 27002, 27005 Compliance regulations.</li> <li>Extensive knowledge of several ICS DCS/PDCS/PLC/ESD/Servers, routers, switches &amp; firewalls technologies within several OEM technologies such as, Siemens, HIMA, TRICONEX, HONEYWELL, GE, Allan Bradley, CISCO, MacAfee.</li> </ul><br><ul> <li><strong>Salary:</strong><ul> <li>Monthly Rate in QAR Plus allowance</li> </ul></li> <li><strong>Work Schedule:</strong><ul> <li>8 Hours / 5 Days</li> </ul></li> </ul> <ul> <li><strong>Duration:</strong> <ul> <li>2 years with possible extension</li> </ul> </li> <li><strong>Location:</strong> <ul> <li>Qatar</li> </ul> </li> </ul> </div>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>Commissions the preparation and the implementation of necessary operational security software updates, firewall installation, hardware additions, and any authorized technical changes related to the security functions to ensure compliance both with internal security policies etc. and applicable laws and regulations required security levels.</p><p>Design and manage processes for detection, investigation, correction, and/or prosecution of operational security breaches, violations, and incidents.</p><p>Benchmark, analyze report on, and make recommendations for the improvement of Operational Technology (OT) security infrastructure.</p><p>Works with management to ensure that as new equipment, facilities, services, and systems are installed that the OT security issues are addressed.</p><p>Typically, a background in technical Operational Technology (OT) roles such as architecture, security program development or operations, with a clear and abiding interest in operational security.</p><p>Liaison with and offers technical direction to related operational security governance functions (such as Physical Security/Facilities, Risk Management, Legal and Compliance) plus senior and middle managers throughout the organization as necessary, on information security matters such as routine security activities plus emerging security risks and control technologies.</p><p>Plan, implement and upgrade security measures and controls.</p><p>Protect digital files and operational security systems against unauthorized access, modification, or destruction.</p><p>Maintain data and monitor/review security access authorizations.</p><p>Manage network, intrusion detection and prevention systems.</p><p>Work out on the security tools such as security asset inventory management and risk management reporting to security information and event management system (SIEM).</p><p>Define, implement, and maintain corporate security manuals, policies, procedures &amp; instructions.</p><p>Coordinate further security plans, awareness received from vendors and take required actions.</p><p>Security assessments of network infrastructure, hosts and applications.</p><p>Work out on ICS security related audit findings and maintain corrective actions.</p><p>Download, validate and apply the latest Antivirus DAT file to AV server and ensure published to all ICS machines by continuously monitor the AV server dashboard.</p><p>Asset identification, monitoring and analysis using supportive tools (IPS, firewall log, system events and antivirus reports.</p><p>ICS Firewall Events log, DNS, Router, and switches Events log analysis.</p><p>Validation and deployment of firmware and software updates, deactivate of unnecessary software's or access.</p><p>Define and implement backup schedule for all ICS assets, System configuration backups, Machines image backups, Router and switches backups, FW backups.</p><p>Manage User accounts ICS, network, and security equipment.</p><p>Support Project execution team to integrate new Operational Technology (OT) system in Plant security framework.</p><p>Work out on Audit findings and observations.</p><p>Work out with ICS modifications as requested.</p><p>Collect and archive system logs, events, change logs, failure events etc. To support audit and forensic analysis.</p><p>Ensure that all implementation activities are complied with published ICS policies, instructions, procedures,</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"><b>Bachelor's Degree</b> in Information security Technology, Computer Science or Electronic/Electrical Engineer. <br>Must be ICS certified from SANS, however following certificates will be great additional advantage for the candidate: - <br><br>GIAC GICSP (Global Industrial Cybersecurity Professional). <br>ISA CAP (Certified Automation Professional). <br>Cybersecurity for Automation, Control, and SCADA Systems (ISA-99/IEC-62443) - ISA <br>Advanced SCADA Security - Red Tiger/ any other vendor. <br>Industrial Cybersecurity for OPC - Matrikon/any other vendor. <br>OPC-UA Hands-on Training Level-3 - OPCTI. <br><br><br>3-5 years at least of field experience in OT Cybersecurity domain in Oil &amp; gas &amp; petrochemical industry. <br>Excellent knowledge of common IT/OT ICS specialization areas related to PLC's, DCS's, PDCS, Firewalls, networks, and switches. <br>Exposure of implementing IT/OT security policies and regulations. <br>Knowledge of international &amp; national standards frameworks such as ISA99, IEC62433, IEC61511, IEC62351, IEC62591 ISO27001, 27002, 27005 Compliance regulations. <br>Extensive knowledge of several ICS DCS/PDCS/PLC/ESD/Servers, routers, switches &amp; firewalls technologies within several OEM technologies such as, Siemens, HIMA, TRICONEX, HONEYWELL, GE, Allan Bradley, CISCO, MacAfee.</p></section>

Lesha Bank is searching for the greatest talent and brightest minds to contribute to the current growth phase at our bank. We are looking for top-tier individuals who are passionate and hungry to add value from day one. Every day at Lesha is different, presenting a new challenge with the opportunity to contribute and grow. We are looking for an Cybersecurity & Infrastructure Analyst.<br>Purpose of the role:The Cybersecurity & Infrastructure Analyst provides experienced, execution capacity across the Bank's infrastructure, cloud, and cybersecurity operations, operating within the strategy, standards, and direction set by the Cybersecurity & Infrastructure Lead. Drawing on significant hands-on experience, the role carries out day-to-day infrastructure administration, security monitoring, and operational activity across on-premise, hosted, and cloud environments — exercising sound, experience-based judgment to resolve matters directly where appropriate, and escalating those requiring further guidance or direction — in support of the Bank's infrastructure resilience and cybersecurity posture.<br>RESPONSIBILITIES:<br>Infrastructure & Cloud Operations Support and administer the Bank's infrastructure estate across on-premise, hosted, and cloud environments, including networks, servers, storage, virtualization, and end-user computing. Carry out day-to-day administration of core infrastructure platforms, including server virtualization, directory and identity services, email and messaging systems, database systems, and enterprise backup and storage. Follow ITIL-aligned service management practices across infrastructure operations, covering incident, problem, and change management. Manage the Bank's help desk/service management system, ensuring it is used effectively and tickets are properly logged, progressed, and resolved.<br>Disaster Recovery & Business Continuity Manage infrastructure disaster recovery planning and exercises, conducting testing against defined recovery objectives. Administer data replication technologies supporting production and DR environments.<br>Cybersecurity Manage the Bank's day-to-day cybersecurity posture, including threat monitoring, incident response, vulnerability management, and risk mitigation activity. Manage the relationship with the Bank's Security Operations Center (SOC), coordinating monitoring, alerting, and incident escalation. Administer core security tooling, including email security and endpoint protection. Execute data loss prevention and information protection/classification controls in line with strategy and direction set by the Information Security function. Manage conditional access and endpoint security configuration for mobile and BYOD access. Manage cyber control activity supporting Risk, Compliance, and Internal Audit requirements.<br>Delivery & Escalation Carry out infrastructure and security changes in line with standards and processes set by the Cybersecurity & Infrastructure Lead, escalating decisions requiring sign-off or strategic direction. Provide senior delivery capacity across infrastructure and cybersecurity workstreams, ensuring continuity of operations at all times.<br>Vendor & Asset Support Manage day-to-day engagement with infrastructure and security vendors. Maintain IT hardware and software inventory and asset records.<br>Business Partnership Act as a senior point of contact for application teams, business stakeholders, and Information Security on infrastructure and security requirements for projects and initiatives.<br>Continuous Improvement Proactively identify and implement opportunities to optimize infrastructure utilization and performance. Contribute to continual improvement of governance and process documentation, complying with organizational policy.<br>KEY PERFORMANCE INDICATORS (KPI) To measure and monitor the performance of the role in the context of the Section/Department's activities Infrastructure availability: uptime of core infrastructure and messaging services against defined targets DR support: timely completion of assigned DR testing and replication tasks Cybersecurity posture: timeliness of monitoring, alerting, and vulnerability remediation activity Change execution: quality and accuracy of infrastructure and security changes carried out Ticket/service management: timeliness and quality of help desk ticket resolution and escalation<br>Minimum Experience & Essential Knowledge12+ years of experience in systems, network, and infrastructure administration within mission-critical, high-availability environments, including significant experience operating with a high degree of autonomy Experience within a bank, investment firm, or other regulated financial services organization, operating at a senior level Extensive hands-on experience with enterprise Microsoft infrastructure (directory services, virtualization, email/messaging, database systems) and enterprise backup/storage Advanced, practitioner-level knowledge of cybersecurity fundamentals: threat monitoring, incident response, vulnerability management Experience with cloud platforms and hybrid infrastructure environments A proven self-starter, able to draw on deep technical experience to resolve issues independently and exercise sound judgment on when to escalate versus act. Bachelor's degree in Computer Science or a related discipline Relevant industry certification required, covering security and/or cloud infrastructure (e.g., Security+, CySA+, Microsoft/Azure infrastructure certification, or equivalent); advanced certification such as CISSP or CISM preferred<br>Core Competencies Infrastructure & Cloud Operations Cybersecurity Monitoring & Response Execution within Defined Standards Vendor & Asset Support Continuous Improvement Mindset