وظائف هندسة النظم - الدوحة قطر

Full Time Doha, Qatar Posted 16 hours ago<br><br>Lesha Bank LLC (Public)<br><br>Job Summary<br><br>We are seeking an experienced Technology Risk Vice President to strengthen and enhance Lesha Group’s cybersecurity risk management and assurance capabilities across its business entities and technology environments.<br><br>The role will be responsible for conducting and overseeing cybersecurity risk assessments, evaluating the effectiveness of security controls, performing cybersecurity assurance and compliance reviews, monitoring technology and cyber risk exposure, and supporting the remediation of identified vulnerabilities, control deficiencies, and emerging threats. The position will also contribute to the ongoing enhancement of the Group’s cybersecurity governance, risk management, and regulatory compliance framework.<br><br>The successful candidate will possess a strong blend of cybersecurity risk management, security assurance, and technical security expertise, with the ability to assess complex technology environments and engage effectively with business stakeholders, technology teams, project managers, third-party service providers, auditors, and regulatory authorities to strengthen the Group’s overall cyber resilience and risk posture.<br><br>Key Responsibilities<br><br>Security Architecture & Technology Risk<br><br>Conduct security reviews of enterprise infrastructure, applications, cloud environments, networks, databases, middleware, and security solutions. Review proposed technology solutions and architectures to ensure security requirements are incorporated by design. Perform threat modelling and security risk assessments for new technologies and business initiatives. Define and assess security baselines and configuration standards. Provide security recommendations for enterprise architecture and technology transformation initiatives.<br><br>Cloud, AI & Emerging Technology Security<br><br>Assess and strengthen security controls across Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure environments. Conduct cloud security assessments covering identity, network security, workloads, containers, data protection, logging, and monitoring. Support security governance for container environments. Conduct security and risk assessments of AI, Generative AI, Machine Learning, and emerging technology solutions. Assess security controls and compliance requirements for AI-powered applications and third-party AI service providers. Establish appropriate security controls for cloud-native, AI-enabled, and emerging technology environments.<br><br>Application Security & Dev Sec Ops<br><br>Lead application security assessments throughout the software development lifecycle. Establish and enhance secure SDLC and Dev Sec Ops practices. Integrate security testing and controls into CI/CD pipelines. Oversee SAST, DAST, SCA, penetration testing, and application security reviews. Work closely with development teams to identify and remediate application security vulnerabilities. Promote security-by-design principles across application development and technology projects.<br><br>Vulnerability & Security Testing<br><br>Oversee enterprise vulnerability management and risk-based vulnerability remediation. Manage penetration testing activities for applications, infrastructure, and external-facing systems. Coordinate internal and external penetration testing engagements and track remediation. Establish vulnerability management KPIs, KRIs, risk acceptance processes, and remediation timelines. Chair or facilitate vulnerability remediation governance forums where required. Identify recurring vulnerabilities and drive improvements to the organization’s overall security posture.<br><br>Security Operations & Incident Management<br><br>Provide governance and oversight of security monitoring and incident response capabilities. Work with SOC and security operations teams to improve detection, response, and remediation processes. Review SIEM use cases, security monitoring requirements, and incident management processes. Support major cybersecurity incident investigations and post-incident improvement activities. Ensure lessons learned from incidents are incorporated into security controls and risk management processes.<br><br>Cybersecurity Governance, Risk & Compliance Support<br><br>Act as a deputy to the Information Security Officer when required, ensuring business continuity and ongoing execution of cybersecurity governance, risk management, compliance, and assurance activities. Provide analytical and administrative support to cybersecurity governance forums, risk committees, and management review meetings, including the preparation of presentations, reports, and action tracking. Support internal, external, and regulatory audits through evidence collection, stakeholder coordination, tracking of findings, and monitoring of remediation activities. Prepare and maintain cybersecurity metrics, dashboards, risk reports, KPIs, KRIs, and management reporting materials for governance and oversight purposes. Perform cybersecurity assurance activities and control effectiveness reviews to support the evaluation of the Group’s cybersecurity maturity and control environment.<br><br>Preferred Certifications<br><br>OSCP – Offensive Security Certified Professional CEH – Certified Ethical Hacker CHFI – Computer Hacking Forensic Investigator CISSP – Certified Information Systems Security Professional CISM – Certified Information Security Manager<br><br>Educational Qualifications Required<br><br>Bachelor or Master degree in Computer or IT or any related fields<br><br>Experience Requirements<br><br>More than 10 years of experience in Cybersecurity / Technology Risk Assessment and Assurance Experience supporting compliance with recognized frameworks and regulations such as ISO 27001, NIST, NIA, QCSF, PCI DSS, GDPR, PDPL, or similar standards. Hands-on experience conducting cybersecurity risk assessments, control reviews, and security assurance activities. Skilled in enterprise security architecture reviews, cloud, AI, emerging technologies security reviews, application security reviews, Dev Sec Ops, vulnerability assessment, penetration testing, security operations and information security incident management.<br><br>Technical And Professional Skills Required<br><br>Enterprise Security Architecture Cybersecurity Risk Assessments Cloud Security AI Security Application Security Dev Sec Ops Vulnerability Management Penetration Testing Threat Modelling Security Operations & Incident Response SIEM and Security Monitoring Executive Reporting and Stakeholder Management<br><br>Key Competencies<br><br>Strong analytical and risk-based decision-making capability. Ability to translate technical cybersecurity issues into business risks. Strong understanding of regulatory and compliance requirements. Ability to lead cybersecurity initiatives across multiple business and technology functions. Excellent stakeholder and executive communication skills. Ability to balance governance requirements with practical technology and business needs. Strong leadership, influencing, and problem-solving capabilities.<br><br>First Name<br><br>Last Name (optional)<br><br>Country (optional)<br><br>Email address<br><br>Message<br><br>Upload CV<br><br>Upload your CV/resume or any other relevant file. Max. file size: 256 MB.<br><br>Key Responsibilities<br><br>Security Architecture & Technology Risk<br><br>Conduct security reviews of enterprise infrastructure, applications, cloud environments, networks, databases, middleware, and security solutions. Review proposed technology solutions and architectures to ensure security requirements are incorporated by design. Perform threat modelling and security risk assessments for new technologies and business initiatives. Define and assess security baselines and configuration standards. Provide security recommendations for enterprise architecture and technology transformation initiatives.<br><br>Cloud, AI & Emerging Technology Security<br><br>Assess and strengthen security controls across Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure environments. Conduct cloud security assessments covering identity, network security, workloads, containers, data protection, logging, and monitoring. Support security governance for container environments. Conduct security and risk assessments of AI, Generative AI, Machine Learning, and emerging technology solutions. Assess security controls and compliance requirements for AI-powered applications and third-party AI service providers. Establish appropriate security controls for cloud-native, AI-enabled, and emerging technology environments.<br><br>Application Security & Dev Sec Ops<br><br>Lead application security assessments throughout the software development lifecycle. Establish and enhance secure SDLC and Dev Sec Ops practices. Integrate security testing and controls into CI/CD pipelines. Oversee SAST, DAST, SCA, penetration testing, and application security reviews. Work closely with development teams to identify and remediate application security vulnerabilities. Promote security-by-design principles across application development and technology projects.<br><br>Vulnerability & Security Testing<br><br>Oversee enterprise vulnerability management and risk-based vulnerability remediation. Manage penetration testing activities for applications, infrastructure, and external-facing systems. Coordinate internal and external penetration testing engagements and track remediation. Establish vulnerability management KPIs, KRIs, risk acceptance processes, and remediation timelines. Chair or facilitate vulnerability remediation governance forums where required. Identify recurring vulnerabilities and drive improvements to the organization’s overall security posture.<br><br>Security Operations & Incident Management<br><br>Provide governance and oversight of security monitoring and incident response capabilities. Work with SOC and security operations teams to improve detection, response, and remediation processes. Review SIEM use cases, security monitoring requirements, and incident management processes. Support major cybersecurity incident investigations and post-incident improvement activities. Ensure lessons learned from incidents are incorporated into security controls and risk management processes.<br><br>Cybersecurity Governance, Risk & Compliance Support<br><br>Act as a deputy to the Information Security Officer when required, ensuring business continuity and ongoing execution of cybersecurity governance, risk management, compliance, and assurance activities. Provide analytical and administrative support to cybersecurity governance forums, risk committees, and management review meetings, including the preparation of presentations, reports, and action tracking. Support internal, external, and regulatory audits through evidence collection, stakeholder coordination, tracking of findings, and monitoring of remediation activities. Prepare and maintain cybersecurity metrics, dashboards, risk reports, KPIs, KRIs, and management reporting materials for governance and oversight purposes. Perform cybersecurity assurance activities and control effectiveness reviews to support the evaluation of the Group’s cybersecurity maturity and control environment.<br><br>Preferred Certifications<br><br>OSCP – Offensive Security Certified Professional CEH – Certified Ethical Hacker CHFI – Computer Hacking Forensic Investigator CISSP – Certified Information Systems Security Professional CISM – Certified Information Security Manager<br><br>Educational Qualifications Required<br><br>Bachelor or Master degree in Computer or IT or any related fields<br><br>Experience Requirements<br><br>More than 10 years of experience in Cybersecurity / Technology Risk Assessment and Assurance Experience supporting compliance with recognized frameworks and regulations such as ISO 27001, NIST, NIA, QCSF, PCI DSS, GDPR, PDPL, or similar standards. Hands-on experience conducting cybersecurity risk assessments, control reviews, and security assurance activities. Skilled in enterprise security architecture reviews, cloud, AI, emerging technologies security reviews, application security reviews, Dev Sec Ops, vulnerability assessment, penetration testing, security operations and information security incident management.<br><br>Technical And Professional Skills Required<br><br>Enterprise Security Architecture Cybersecurity Risk Assessments Cloud Security AI Security Application Security Dev Sec Ops Vulnerability Management Penetration Testing Threat Modelling Security Operations & Incident Response SIEM and Security Monitoring Executive Reporting and Stakeholder Management<br><br>Key Competencies<br><br>Strong analytical and risk-based decision-making capability. Ability to translate technical cybersecurity issues into business risks. Strong understanding of regulatory and compliance requirements. Ability to lead cybersecurity initiatives across multiple business and technology functions. Excellent stakeholder and executive communication skills. Ability to balance governance requirements with practical technology and business needs. Strong leadership, influencing, and problem-solving capabilities.

<p>Strategic Global FF&E & Finishes Sourcing • Should have strong exposure to international FF&E suppliers and the ability to develop and coordinate furniture design requirements in line with project needs. • Lead end-to-end procurement of FF&E and interior finishes including furniture, bespoke joinery, stone, timber, veneers, metals, glass, fabrics, wall finishes, flooring systems, and decorative lighting. • Source materials and FF&E from global markets (Europe, Asia, Middle East, and specialist manufacturing hubs). • Evaluate suppliers based on material quality, manufacturing capability, lead times, certifications, and cost competitiveness. • Ensure sourced items meet design intent, durability, fire ratings, sustainability requirements, and local authority approvals. Materials Expertise & Design Coordination • Demonstrate strong technical understanding of interior materials, finishes, and FF&E specifications. • Review drawings, specifications, BOQs, and material schedules to define accurate procurement strategies. • Work closely with designers and consultants to propose technically compliant, value engineered alternatives without compromising aesthetics. • Review and approve samples, mock-ups, technical submittals, and material boards. Procurement Planning, Budgeting & Commercial Control • Develop project-specific procurement plans aligned with budgets, schedules, and delivery milestones. • Lead commercial negotiations with international suppliers, including pricing structures, payment terms, warranties, and delivery commitments. • Monitor procurement budgets, cash flow, and cost performance in coordination with finance and commercial teams. • Support cost control, value engineering, and margin protection initiatives. Vendor, Logistics & Supply Chain Management • Establish and manage long-term strategic relationships with international suppliers and manufacturers. • Oversee logistics coordination including shipping methods, lead times, customs documentation, and delivery sequencing. • Proactively identify and mitigate risks related to supply chain disruption, quality deviations, and delayed deliveries. • Maintain an approved global supplier database and procurement records. Reporting, Compliance & Governance • Prepare detailed procurement status reports for senior management and project teams. • Ensure compliance with internal procurement policies, contractual obligations, and ethical sourcing standards. • Maintain accurate documentation, approvals, and audit-ready procurement systems. Team Leadership & Collaboration • Provide leadership and guidance to procurement team members where applicable. • Foster strong collaboration between procurement, design, project, and finance teams. • Act as a trusted advisor on materials and sourcing decisions across multiple projects.</p><p>We are seeking a Sr. Procurement Executive with advanced expertise in global FF&E and interior finishing sourcing to lead procurement strategies and execution for high-end interior fit-out projects across commercial, residential, and hospitality sectors. This role requires a materials-driven professional with deep understanding of interior finishes, furniture, and bespoke elements, capable of sourcing from international markets while ensuring alignment with design intent, technical performance, cost efficiency, and project timelines. The position is strategic in nature and will act as a key decision-maker and advisor to senior management, designers, and project teams. Education • Diploma or Bachelor’s Degree in: o Furniture Design o Interior Design o Architecture o Joinery / Wood Technology o or related technical discipline Experience (Mandatory) • Minimum 10-15 years total professional experience in joinery drafting and bespoke furniture detailing. • At least 6+ years of direct, hands-on experience working within: o A furniture design & manufacturing firm OR o A joinery production facility / factory environment. • Proven experience preparing production-level drawings for high-end bespoke furniture and architectural joinery. Software & Technical Skills • Advanced proficiency in: o AutoCAD (mandatory) • Strong understanding of: o Joinery construction techniques o Wood, veneer, lacquer, metal, stone, glass integration o Hardware systems (hinges, runners, fixings, specialty fittings) • Ability to read and interpret architectural and interior drawings with precision. • Familiarity with CNC constraints and fabrication logic is a strong advantage. Skills & Competencies • Exceptional attention to detail. • Strong technical judgment and problem-solving ability. • Clear communicator with workshop teams and project stakeholders. • Highly organized and methodical. • Able to work independently with minimal supervision. • Comfortable working under tight production deadlines. Professional Attributes • Practical, production-oriented mindset. • Deep respect for craftsmanship and execution quality. • Calm and solution-driven under pressure. • Committed to drawing accuracy and accountability. • Continuous improvement mindset.</p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Job Description<br><p><strong>Nair Systems</strong> is currently looking <strong>Senior Active Directory &amp; Identity Security Consultant</strong> our <strong>Qatar</strong> operations.</p><br><p><strong>Required Skills &amp; Experience</strong></p><br><p>Experience</p><br><ul><li>10+ years of Active Directory administration experience.</li><li>5+ years of Active Directory security hardening experience.</li><li>Experience managing environments with:<ul><li>Multiple Forests</li><li>Multiple Domains</li><li>Complex Trust Relationships</li><li>Hybrid Identity Deployments</li></ul></li></ul><p><strong>Technical Skills</strong></p><br><ul><li>Expert-level knowledge of:</li><li>Active Directory Domain Services</li><li>Group Policy Design and Administration</li><li>Loopback Processing</li><li>DNS Architecture and Security</li><li>Windows Server 2016/2019/2022/2025</li><li>Kerberos Authentication</li><li>LDAP Security</li><li>AD Replication</li><li>AD Certificate Services</li><li>PKI Infrastructure</li><li>PowerShell Automation</li><li>Microsoft Entra ID</li><li>Identity Governance</li></ul><p><strong>Security Expertise</strong></p><br><ul><li>Hands-on experience with:</li><li>Active Directory Hardening</li><li>Identity Threat Detection</li><li>Identity Security Posture Management</li><li>PAM Solutions</li><li>Tier-0 Security</li><li>Zero Trust Architecture</li><li>Security Assessments</li><li>Attack Path Remediation</li></ul><p><strong>Preferred Certifications</strong></p><br><ul><li>Microsoft Certified: Identity and Access Administrator (SC-300)</li><li>Microsoft Certified: Cybersecurity Architect (SC-100)</li><li>Microsoft Security Operations Analyst (SC-200)</li><li>Microsoft Certified Windows Server Hybrid Administrator</li><li>CISSP</li><li>CISM</li></ul><p><strong>Joining time frame:</strong> 2 weeks (maximum 1 month)</p><br><br><br> </div>

<p>The <strong>CSEA Contractor</strong> is expected to provide hands-on support to the Cyber Security Engineering and Architecture section by contributing to security architecture activities, technical security reviews, control implementation, risk assessments and advisory services across enterprise systems, infrastructure, cloud environments and applications.</p><p>The contractor is expected to have:</p><ul><li><p>Hands-on experience with Enterprise Security Architecture methodologies and modern security technologies, including IAM, SIEM, EDR/XDR, WAF, SASE, Zero Trust, cloud security, and security automation tools.</p></li><li><p>Strong knowledge of IT infrastructure security, including network security, cloud security, endpoint security, identity security, and secure architecture design principles.</p></li><li><p>Strong knowledge of application security, including secure SDLC, DevSecOps, API security, secure coding practices, and application threat modeling.</p></li><li><p>Experience implementing, validating, and reviewing security controls across IT infrastructure, cloud platforms such as AWS, Azure, and GCP, and enterprise applications.</p></li><li><p>Experience developing, maintaining, and enhancing security control libraries, security patterns, baselines, and architecture standards, while ensuring their integration into security architecture and engineering activities.</p></li><li><p>Strong understanding of cybersecurity standards, laws, and frameworks, including NIST, ISO/IEC 27001, CIS Controls, GDPR, PCI-DSS, and other relevant regulatory or compliance requirements.</p></li><li><p>Strong understanding of cybersecurity best practices, including secure network architecture, endpoint protection, identity and access management, cloud security, DevSecOps, and defense-in-depth design.</p></li><li><p>Experience conducting security design reviews, architecture assessments, threat modeling, technical risk assessments, and security gap assessments.</p></li><li><p>Ability to support business units, project teams, IT teams, and security stakeholders in selecting, designing, and implementing secure information systems and technology solutions.</p></li><li><p>Experience with security automation and scripting using tools and languages such as Python, PowerShell, Bash, Terraform, Ansible, or similar technologies.</p></li><li><p>Ability to support security investigations, incident response activities, forensic analysis, root cause analysis, and post-incident improvement recommendations when required.</p></li><li><p>Experience providing technical consultation and advisory support on CSEA-related projects, initiatives, and engagements as requested by the CSEA Section Head.</p></li><li><p>Excellent ability to translate technical cybersecurity concepts, risks, and recommendations into clear business language for both technical and non-technical stakeholders.</p></li><li><p>Experience participating in cybersecurity committees, technical working groups, architecture review boards, project meetings, and cross-functional security discussions.</p></li><li><p>Strong problem-solving, analytical, and decision-support skills, with the ability to assess complex technical environments and recommend practical security solutions.</p></li><li><p>Ability to work independently while also collaborating effectively with security architects, SOC analysts, IT teams, application teams, project managers, and business stakeholders.</p></li><li><p>Excellent verbal and written communication skills, with the ability to document security findings, architecture recommendations, risks, and remediation actions clearly and professionally.</p></li><li><p>Ability to mentor and support CSEA team members as needed by transferring knowledge, sharing technical expertise, and contributing to the development of internal cybersecurity engineering and architecture capabilities.</p></li></ul><p><strong>Key Deliverables:<br></strong></p><p>The contractor may be expected to support or deliver:</p><ul><li><p>Security architecture reviews</p></li><li><p>Security design review reports</p></li><li><p>Threat models and risk assessments</p></li><li><p>Security control mapping and recommendations</p></li><li><p>Architecture patterns, baselines, and standards</p></li><li><p>Technical security advisory reports</p></li><li><p>Secure design recommendations for infrastructure, cloud, and applications</p></li><li><p>Security improvement roadmaps</p></li><li><p>Support for incident response, investigations, and technical analysis</p></li><li><p>Knowledge transfer sessions for CSEA members</p></li></ul><p><br></p><p><strong>Desired Candidate Profile</strong></p><p><strong>Requirements</strong></p><p><strong>Education:<br></strong></p><ul><li><p>Bachelor’s degree in a technology-related field, such as Cybersecurity, Computer Science, Computer Engineering, Information Security, Information Technology, or a related discipline. A higher degree or relevant professional certifications are preferred.</p></li></ul><p>Experience:</p><ul><li><p>Minimum&nbsp;of 10 years relevant experience in cybersecurity, information security, security engineering, or IT infrastructure security, with at least 3 years of hands-on experience in cybersecurity architecture, security engineering, or enterprise security architecture.</p></li></ul><p>Preferred Certifications:</p><ul><li><p>CISSP, CISM, SABSA, or TOGAF certifications preferred.</p></li><li><p>Cloud security certifications such as CCSP, Azure Security Engineer, or AWS Security Specialty preferred.</p></li><li><p>Cybersecurity certifications such as GCIH, GCIA, GSEC, or Security+ preferred.</p></li><li><p>Other relevant cybersecurity, cloud security, or architecture certifications considered.<br></p></li></ul><p><strong><em>Proficiency in English & Arabic is required.</em></strong></p><p><br></p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Job Description<br><p><strong>Nair Systems</strong> is currently looking <strong>Senior Active Directory &amp; Identity Security Consultant</strong> our <strong>Qatar</strong> operations.</p><br><p><strong>Required Skills &amp; Experience</strong></p><br><p>Experience</p><br><ul><li>10+ years of Active Directory administration experience.</li><li>5+ years of Active Directory security hardening experience.</li><li>Experience managing environments with:<ul><li>Multiple Forests</li><li>Multiple Domains</li><li>Complex Trust Relationships</li><li>Hybrid Identity Deployments</li></ul></li></ul><p><strong>Technical Skills</strong></p><br><ul><li>Expert-level knowledge of:</li><li>Active Directory Domain Services</li><li>Group Policy Design and Administration</li><li>Loopback Processing</li><li>DNS Architecture and Security</li><li>Windows Server 2016/2019/2022/2025</li><li>Kerberos Authentication</li><li>LDAP Security</li><li>AD Replication</li><li>AD Certificate Services</li><li>PKI Infrastructure</li><li>PowerShell Automation</li><li>Microsoft Entra ID</li><li>Identity Governance</li></ul><p><strong>Security Expertise</strong></p><br><ul><li>Hands-on experience with:</li><li>Active Directory Hardening</li><li>Identity Threat Detection</li><li>Identity Security Posture Management</li><li>PAM Solutions</li><li>Tier-0 Security</li><li>Zero Trust Architecture</li><li>Security Assessments</li><li>Attack Path Remediation</li></ul><p><strong>Preferred Certifications</strong></p><br><ul><li>Microsoft Certified: Identity and Access Administrator (SC-300)</li><li>Microsoft Certified: Cybersecurity Architect (SC-100)</li><li>Microsoft Security Operations Analyst (SC-200)</li><li>Microsoft Certified Windows Server Hybrid Administrator</li><li>CISSP</li><li>CISM</li></ul><p><strong>Joining time frame:</strong> 2 weeks (maximum 1 month)</p><br><br><br> </div>

<p>Partner with Account teams and Practice Customer Engineers (CEs) during technical evaluation phases to assess project feasibility, shape proposals for long-term adoption, and validate FDE engagement requests. Dive into code-level context to diagnose and resolve complex customer implementation issues, identify core product bugs, and test workarounds to clear execution roadblocks. Serve as the definitive liaison to core Product and Engineering teams, troubleshooting systemic deployment blockers and translating real-world field feedback into actionable feature requests. Steer implementation strategy through technical authority and architectural foresight while owning the technical reality of delivery alongside customer-facing teams.</p><p><strong>Desired Candidate Profile</strong></p><p>Minimum qualifications: Bachelor s degree or equivalent practical experience. 5 years of experience troubleshooting technical issues for internal/external partners or customers. Experience with technical delivery strategies and interfacing with product or engineering organizations. Experience in system design or orchestration frameworks (e.g., LangGraph, AutoGen, CrewAI). Experience with enterprise integrations (APIs, enterprise content management (ECMs), identity), Cloud infrastructure, or AI/ML model deployments. Preferred qualifications: Experience interfacing directly with core product/engineering organizations regarding infrastructure or AI/ML model deployments, managing technical delivery strategies, and debugging systems.</p>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>A GRC Senior Analyst / Specialist supports the governance, risk, and compliance framework to ensure alignment with national cyber regulations, security policies and government assurance standards. The role focuses on identifying, assessing and managing cyber and information security risks across systems and operations, while ensuring compliance with applicable regulatory frameworks, security controls and audit requirements. It involves maintaining risk registers, supporting security assessments and tracking remediation of vulnerabilities and control gaps. The position also works closely with security, IT, and government stakeholders to strengthen cybersecurity governance, support accreditation processes and ensure continuous compliance with national cybersecurity mandates. Core Activities: Provide expert consultation on Governance, Risk, and Compliance (GRC) matters. Review, assess, and enhance enterprise cybersecurity architecture. Conduct reviews of QCSF evidence and provide compliance recommendations. Deliver cybersecurity consultancy and practical security solutions to internal stakeholders. Identify cybersecurity risks and recommend mitigation strategies. Support the implementation of cybersecurity policies, standards, and best practices. Collaborate with business and technical teams to improve cybersecurity posture. Prepare reports, assessments, and recommendations for management. Stay updated with emerging cybersecurity threats, technologies, and regulatory requirements. Key Responsibilities: Act as a subject matter expert for cybersecurity governance, risk, and compliance. Review and improve enterprise cybersecurity architecture to ensure alignment with business and security objectives. Evaluate compliance against the Qatar Cyber Security Framework (QCSF) and recommend corrective actions. Provide strategic cybersecurity guidance to stakeholders across the organisation. Develop and recommend cybersecurity controls and solutions based on risk assessments. Support cybersecurity audits, assessments, and compliance activities. Ensure cybersecurity initiatives align with organisational policies and industry standards. Produce high-quality documentation, reports, and technical recommendations. Mentor stakeholders on cybersecurity best practices where required</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><p>Education: Bachelor s or Master s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline. Experience: Minimum of 10 years experience in cybersecurity, with strong expertise in Governance, Risk &amp; Compliance (GRC), enterprise cybersecurity architecture and regulatory compliance. Mandatory Certifications: CIIP (Certified Information Infrastructure Professional) CISM (Certified Information Security Manager) Preferred Certifications: GICSP (Global Industrial Cyber Security Professional) CCISO (Certified Chief Information Security Officer) Skills &amp; Competencies: Strong knowledge of Governance, Risk &amp; Compliance (GRC) frameworks. Extensive experience with Enterprise Cybersecurity Architecture. Thorough understanding of the Qatar Cyber Security Framework (QCSF). Strong cybersecurity consulting and advisory skills. Excellent analytical and problem-solving abilities. Ability to assess risks and recommend effective security solutions. Excellent communication, stakeholder management, and report-writing skills. Ability to work independently and collaboratively within multidisciplinary teams. Strong understanding of international cybersecurity standards and best practices. Language Proficiency: Proficiency in English &amp; Arabic is required.</p><p></p></section>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p>Communication<br>Internal Communication:<br>•&nbsp;&nbsp;&nbsp;&nbsp;Manager - IT Operations and Service Management&nbsp;<br>•&nbsp;&nbsp;&nbsp;&nbsp;IT Department<br>•&nbsp;&nbsp;&nbsp;&nbsp;Cyber Security Team<br>•&nbsp;&nbsp;&nbsp;&nbsp;All Business users<br>External Communication:<br>•&nbsp;&nbsp;&nbsp;&nbsp;IT Vendors</p><br><p>Occupational Health &amp; Safety and Environment<br>Accountability:<br>Are accountable for their acts and omissions.</p><br><p>Responsibility:<br>To follow agreed safe systems of work; to follow training and instructions; and to report accidents, incidents and near misses.<br>Authority:<br>To stop work if they think the work is unsafe.<br>&nbsp;</p><br><br>Responsibilities:<br><p>Key Roles &amp; Responsibilities<br>1.&nbsp;&nbsp;&nbsp;&nbsp;System Design and Implementation<br>•&nbsp;&nbsp;&nbsp;&nbsp;Plan, design, and implement IT systems, including servers, networks, storage, and related infrastructure components.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Ensure that system architectures meet performance, security, and scalability requirements.<br>2.&nbsp;&nbsp;&nbsp;&nbsp;Server and Network Management<br>•&nbsp;&nbsp;&nbsp;&nbsp;Administer and maintain servers, both physical and virtual, including operating system installations, updates, and patch management.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Manage network devices, ensuring smooth and secure data transmission.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Manage Satellite communication systems to maintain connectivity in remote maritime environment.<br>3.&nbsp;&nbsp;&nbsp;&nbsp;V-Sat Installation and Troubleshooting<br>•&nbsp;&nbsp;&nbsp;&nbsp;Install, configure, align, test, commission, and maintain VSAT terminals and satellite communication systems.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Configure and troubleshoot satellite modems, antennas, BUCs, LNBs, transceivers, IDU/ODU equipment, and associated RF components.<br>•&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;Diagnose RF and IP-related faults and determine the root cause of service interruptions.<br>•&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;Perform preventive and corrective maintenance on VSAT systems.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Conduct site surveys and assess requirements for new VSAT installations.<br>4.&nbsp;&nbsp;&nbsp;&nbsp;Storage and Backup Solutions<br>•&nbsp;&nbsp;&nbsp;&nbsp;Implement and manage storage solutions, such as SANs (Storage Area Networks) and NAS (Network Attached Storage).<br>•&nbsp;&nbsp;&nbsp;&nbsp;Set up and maintain backup and disaster recovery systems.<br>5.&nbsp;&nbsp;&nbsp;&nbsp;Software and Application Support<br>•&nbsp;&nbsp;&nbsp;&nbsp;Install, configure, and support various software and applications used within the organization.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Collaborate with application developers to ensure seamless integration.<br>6.&nbsp;&nbsp;&nbsp;&nbsp;Security and Compliance<br>•&nbsp;&nbsp;&nbsp;&nbsp;Implement security measures to protect systems and data, including firewall configurations, intrusion detection, and access controls.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Ensure compliance with security standards and regulations.<br>7.&nbsp;&nbsp;&nbsp;&nbsp;Performance Monitoring and Optimization<br>•&nbsp;&nbsp;&nbsp;&nbsp;Monitor system performance and proactively optimize resources to maintain efficiency.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Troubleshoot and resolve system and network performance issues.<br>8.&nbsp;&nbsp;&nbsp;&nbsp;Documentation<br>•&nbsp;&nbsp;&nbsp;&nbsp;Create and maintain system documentation, including configuration, processes, and procedures.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Ensure that documentation is kept up to date.</p><br><br>Qualifications:<br><p>Education &amp; Professional Qualification:<br>•&nbsp;&nbsp;&nbsp;&nbsp;Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent relevant experience.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Relevant industry certifications such as Microsoft, Cisco, CompTIA, ITIL, or equivalent are preferred.</p><br><p>Professional Experience:<br>•&nbsp;&nbsp;&nbsp;&nbsp;Minimum 4 years of relevant experience as an IT/System Engineer, preferably in the maritime or offshore industry.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Experience managing Windows, cloud, virtualization, networking, and modern workplace environments.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Hands-on experience with enterprise IT infrastructure, including identity, endpoint, and infrastructure management.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Experience with VSAT and satellite communication systems; maritime VSAT experience is preferred.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Experience implementing IT security policies, procedures, and operational standards.</p><br><p><br>Geographic Experience:<br>N/A<br>Computer Skills:<br>•&nbsp;&nbsp;&nbsp;&nbsp;Cloud Computing: Strong understanding of IaaS, PaaS, and SaaS models, as well as public, private, and hybrid cloud architectures.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Networking: Strong understanding of TCP/IP, routing, VLANs, LAN/WAN, DNS, DHCP, VPNs, and network security principles.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Virtualization: Ability to configure and manage virtual machines, virtual networks, storage, and associated virtualization infrastructure.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Security: Ability to implement and maintain security controls across cloud, on-premises, network, endpoint, and modern workplace environments.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Automation: Ability to use PowerShell, Python, Ansible, or similar tools to automate infrastructure deployment, configuration, administration, and routine operational tasks.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Modern Workplace: Experience supporting endpoint management, identity and access management, collaboration platforms, and enterprise Windows environments.</p><br><p>Language Skills:<br>Business fluent English<br>Arabic Language is an advantage<br>Market/Industry/Functional Knowledge:<br>•&nbsp;&nbsp;&nbsp;&nbsp;Strong knowledge of cloud, Windows, modern workplace, virtualization, and enterprise IT infrastructure.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Good understanding of networking, cybersecurity, ITIL practices, and relevant compliance requirements.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Strong understanding of VSAT, RF and satellite communication principles, including link performance and frequency concepts.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Familiarity with major VSAT platforms and maritime stabilized antenna systems; maritime/offshore experience is an advantage.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Knowledge of enterprise technologies including Active Directory, Azure AD, DNS, DHCP, GPO, Endpoint Manager, SCCM, Hyper-V, and AVD.<br>•&nbsp;&nbsp;&nbsp;&nbsp;Familiarity with project management methodologies such as Agile and Waterfall.</p><br> </div>