Security inspector Jobs in Qatar 2026

Full Time

CSEA Contractor

On-site - Qatar - Doha 28 July 2026

Human Resources

The CSEA Contractor is expected to provide hands-on support to the Cyber Security Engineering and Architecture section by contributing to security architecture activities, technical security reviews, control implementation, risk assessments and advisory services across enterprise systems, infrastructure, cloud environments and applications. The Contractor Is Expected To Have Hands-on experience with Enterprise Security Architecture methodologies and modern security technologies, including IAM, SIEM, EDR/XDR, WAF, SASE, Zero Trust, cloud security, and security automation tools. Strong knowledge of IT infrastructure security, including network security, cloud security, endpoint security, identity security, and secure architecture design principles. Strong knowledge of application security, including secure SDLC, Dev Sec Ops, API security, secure coding practices, and application threat modeling. Experience implementing, validating, and reviewing security controls across IT infrastructure, cloud platforms such as AWS, Azure, and GCP, and enterprise applications. Experience developing, maintaining, and enhancing security control libraries, security patterns, baselines, and architecture standards, while ensuring their integration into security architecture and engineering activities. Strong understanding of cybersecurity standards, laws, and frameworks, including NIST, ISO/IEC 27001, CIS Controls, GDPR, PCI-DSS, and other relevant regulatory or compliance requirements. Strong understanding of cybersecurity best practices, including secure network architecture, endpoint protection, identity and access management, cloud security, Dev Sec Ops, and defense-in-depth design. Experience conducting security design reviews, architecture assessments, threat modeling, technical risk assessments, and security gap assessments. Ability to support business units, project teams, IT teams, and security stakeholders in selecting, designing, and implementing secure information systems and technology solutions. Experience with security automation and scripting using tools and languages such as Python, Power Shell, Bash, Terraform, Ansible, or similar technologies. Ability to support security investigations, incident response activities, forensic analysis, root cause analysis, and post-incident improvement recommendations when required. Experience providing technical consultation and advisory support on CSEA-related projects, initiatives, and engagements as requested by the CSEA Section Head. Excellent ability to translate technical cybersecurity concepts, risks, and recommendations into clear business language for both technical and non-technical stakeholders. Experience participating in cybersecurity committees, technical working groups, architecture review boards, project meetings, and cross-functional security discussions. Strong problem-solving, analytical, and decision-support skills, with the ability to assess complex technical environments and recommend practical security solutions. Ability to work independently while also collaborating effectively with security architects, SOC analysts, IT teams, application teams, project managers, and business stakeholders. Excellent verbal and written communication skills, with the ability to document security findings, architecture recommendations, risks, and remediation actions clearly and professionally. Ability to mentor and support CSEA team members as needed by transferring knowledge, sharing technical expertise, and contributing to the development of internal cybersecurity engineering and architecture capabilities. Key Deliverables The contractor may be expected to support or deliver: Security architecture reviews Security design review reports Threat models and risk assessments Security control mapping and recommendations Architecture patterns, baselines, and standards Technical security advisory reports Secure design recommendations for infrastructure, cloud, and applications Security improvement roadmaps Support for incident response, investigations, and technical analysis Knowledge transfer sessions for CSEA members Requirements Education: Bachelor’s degree in a technology-related field, such as Cybersecurity, Computer Science, Computer Engineering, Information Security, Information Technology, or a related discipline. A higher degree or relevant professional certifications are preferred. Experience Minimum of 10 years relevant experience in cybersecurity, information security, security engineering, or IT infrastructure security, with at least 3 years of hands-on experience in cybersecurity architecture, security engineering, or enterprise security architecture. Preferred Certifications CISSP, CISM, SABSA, or TOGAF certifications preferred. Cloud security certifications such as CCSP, Azure Security Engineer, or AWS Security Specialty preferred. Cybersecurity certifications such as GCIH, GCIA, GSEC, or Security+ preferred. Other relevant cybersecurity, cloud security, or architecture certifications considered.

Full Time

CSEA Contractor

On-site - Qatar - Doha 28 July 2026

Administration

The CSEA Contractor is expected to provide hands-on support to the Cyber Security Engineering and Architecture section by contributing to security architecture activities, technical security reviews, control implementation, risk assessments and advisory services across enterprise systems, infrastructure, cloud environments and applications. The Contractor Is Expected To Have Hands-on experience with Enterprise Security Architecture methodologies and modern security technologies, including IAM, SIEM, EDR/XDR, WAF, SASE, Zero Trust, cloud security, and security automation tools. Strong knowledge of IT infrastructure security, including network security, cloud security, endpoint security, identity security, and secure architecture design principles. Strong knowledge of application security, including secure SDLC, Dev Sec Ops, API security, secure coding practices, and application threat modeling. Experience implementing, validating, and reviewing security controls across IT infrastructure, cloud platforms such as AWS, Azure, and GCP, and enterprise applications. Experience developing, maintaining, and enhancing security control libraries, security patterns, baselines, and architecture standards, while ensuring their integration into security architecture and engineering activities. Strong understanding of cybersecurity standards, laws, and frameworks, including NIST, ISO/IEC 27001, CIS Controls, GDPR, PCI-DSS, and other relevant regulatory or compliance requirements. Strong understanding of cybersecurity best practices, including secure network architecture, endpoint protection, identity and access management, cloud security, Dev Sec Ops, and defense-in-depth design. Experience conducting security design reviews, architecture assessments, threat modeling, technical risk assessments, and security gap assessments. Ability to support business units, project teams, IT teams, and security stakeholders in selecting, designing, and implementing secure information systems and technology solutions. Experience with security automation and scripting using tools and languages such as Python, Power Shell, Bash, Terraform, Ansible, or similar technologies. Ability to support security investigations, incident response activities, forensic analysis, root cause analysis, and post-incident improvement recommendations when required. Experience providing technical consultation and advisory support on CSEA-related projects, initiatives, and engagements as requested by the CSEA Section Head. Excellent ability to translate technical cybersecurity concepts, risks, and recommendations into clear business language for both technical and non-technical stakeholders. Experience participating in cybersecurity committees, technical working groups, architecture review boards, project meetings, and cross-functional security discussions. Strong problem-solving, analytical, and decision-support skills, with the ability to assess complex technical environments and recommend practical security solutions. Ability to work independently while also collaborating effectively with security architects, SOC analysts, IT teams, application teams, project managers, and business stakeholders. Excellent verbal and written communication skills, with the ability to document security findings, architecture recommendations, risks, and remediation actions clearly and professionally. Ability to mentor and support CSEA team members as needed by transferring knowledge, sharing technical expertise, and contributing to the development of internal cybersecurity engineering and architecture capabilities. Key Deliverables The Contractor May Be Expected To Support Or Deliver Security architecture reviews Security design review reports Threat models and risk assessments Security control mapping and recommendations Architecture patterns, baselines, and standards Technical security advisory reports Secure design recommendations for infrastructure, cloud, and applications Security improvement roadmaps Support for incident response, investigations, and technical analysis Knowledge transfer sessions for CSEA members Requirements Education: Bachelor’s degree in a technology-related field, such as Cybersecurity, Computer Science, Computer Engineering, Information Security, Information Technology, or a related discipline. A higher degree or relevant professional certifications are preferred. Experience Minimum of 10 years relevant experience in cybersecurity, information security, security engineering, or IT infrastructure security, with at least 3 years of hands-on experience in cybersecurity architecture, security engineering, or enterprise security architecture. Preferred Certifications CISSP, CISM, SABSA, or TOGAF certifications preferred. Cloud security certifications such as CCSP, Azure Security Engineer, or AWS Security Specialty preferred. Cybersecurity certifications such as GCIH, GCIA, GSEC, or Security+ preferred. Other relevant cybersecurity, cloud security, or architecture certifications considered. Proficiency in English & Arabic is required.

Full Time LinkedIn

Technology Risk Associate

On-site - Qatar - Doha 19 August 2026

Accounting, Finance & Banking

Full Time Doha, Qatar Posted 18 hours ago Website Lesha Bank LLC (Public) Lesha Bank LLC (Public) Lesha Bank is searching for the greatest talent and brightest minds to contribute to the current growth phase at our bank. We are looking for top-tier individuals who are passionate and hungry to add value from day one. Every day at Lesha is different, presenting a new challenge with the opportunity to contribute and grow. We are looking for an Job Summary We are seeking an experienced Technology Risk Associate to strengthen and enhance Lesha Group’s cybersecurity risk management and assurance capabilities across its business entities and technology environments. The role will be responsible for conducting and overseeing cybersecurity risk assessments, evaluating the effectiveness of security controls, performing cybersecurity assurance and compliance reviews, monitoring technology and cyber risk exposure, and supporting the remediation of identified vulnerabilities, control deficiencies, and emerging threats. The position will also contribute to the ongoing enhancement of the Group’s cybersecurity governance, risk management, and regulatory compliance framework. The successful candidate will possess a strong blend of cybersecurity risk management, security assurance, and technical security expertise, with the ability to assess complex technology environments and engage effectively with business stakeholders, technology teams, project managers, third-party service providers, auditors, and regulatory authorities to strengthen the Group’s overall cyber resilience and risk posture. Key Responsibilities Security Architecture & Technology Risk Conduct security reviews of enterprise infrastructure, applications, cloud environments, networks, databases, middleware, and security solutions. Review proposed technology solutions and architectures to ensure security requirements are incorporated by design. Perform threat modelling and security risk assessments for new technologies and business initiatives. Define and assess security baselines and configuration standards. Provide security recommendations for enterprise architecture and technology transformation initiatives. Cloud, AI & Emerging Technology Security Assess and strengthen security controls across Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure environments. Conduct cloud security assessments covering identity, network security, workloads, containers, data protection, logging, and monitoring. Support security governance for container environments. Conduct security and risk assessments of AI, Generative AI, Machine Learning, and emerging technology solutions. Assess security controls and compliance requirements for AI-powered applications and third-party AI service providers. Establish appropriate security controls for cloud-native, AI-enabled, and emerging technology environments. Application Security & Dev Sec Ops Lead application security assessments throughout the software development lifecycle. Establish and enhance secure SDLC and Dev Sec Ops practices. Integrate security testing and controls into CI/CD pipelines. Oversee SAST, DAST, SCA, penetration testing, and application security reviews. Work closely with development teams to identify and remediate application security vulnerabilities. Promote security-by-design principles across application development and technology projects. Vulnerability & Security Testing Oversee enterprise vulnerability management and risk-based vulnerability remediation. Manage penetration testing activities for applications, infrastructure, and external-facing systems. Coordinate internal and external penetration testing engagements and track remediation. Establish vulnerability management KPIs, KRIs, risk acceptance processes, and remediation timelines. Chair or facilitate vulnerability remediation governance forums where required. Identify recurring vulnerabilities and drive improvements to the organization’s overall security posture. Security Operations & Incident Management Provide governance and oversight of security monitoring and incident response capabilities. Work with SOC and security operations teams to improve detection, response, and remediation processes. Review SIEM use cases, security monitoring requirements, and incident management processes. Support major cybersecurity incident investigations and post-incident improvement activities. Ensure lessons learned from incidents are incorporated into security controls and risk management processes. Cybersecurity Governance, Risk & Compliance Support Act as a deputy to the Information Security Officer when required, ensuring business continuity and ongoing execution of cybersecurity governance, risk management, compliance, and assurance activities. Provide analytical and administrative support to cybersecurity governance forums, risk committees, and management review meetings, including the preparation of presentations, reports, and action tracking. Support internal, external, and regulatory audits through evidence collection, stakeholder coordination, tracking of findings, and monitoring of remediation activities. Prepare and maintain cybersecurity metrics, dashboards, risk reports, KPIs, KRIs, and management reporting materials for governance and oversight purposes. Perform cybersecurity assurance activities and control effectiveness reviews to support the evaluation of the Group’s cybersecurity maturity and control environment. Preferred Certifications OSCP – Offensive Security Certified Professional CEH – Certified Ethical Hacker CHFI – Computer Hacking Forensic Investigator CISSP – Certified Information Systems Security Professional CISM – Certified Information Security Manager Educational Qualifications Required Bachelor or Master degree in Computer or IT or any related fields Experience Requirements More than 10 years of experience in Cybersecurity / Technology Risk Assessment and Assurance Experience supporting compliance with recognized frameworks and regulations such as ISO 27001, NIST, NIA, QCSF, PCI DSS, GDPR, PDPL, or similar standards. Hands-on experience conducting cybersecurity risk assessments, control reviews, and security assurance activities. Skilled in enterprise security architecture reviews, cloud, AI, emerging technologies security reviews, application security reviews, Dev Sec Ops, vulnerability assessment, penetration testing, security operations and information security incident management. Technical And Professional Skills Required Enterprise Security Architecture Cybersecurity Risk Assessments Cloud Security AI Security Application Security Dev Sec Ops Vulnerability Management Penetration Testing Threat Modelling Security Operations & Incident Response SIEM and Security Monitoring Executive Reporting and Stakeholder Management Key Competencies Strong analytical and risk-based decision-making capability. Ability to translate technical cybersecurity issues into business risks. Strong understanding of regulatory and compliance requirements. Ability to lead cybersecurity initiatives across multiple business and technology functions. Excellent stakeholder and executive communication skills. Ability to balance governance requirements with practical technology and business needs. Strong leadership, influencing, and problem-solving capabilities. First Name Last Name (optional) Country (optional) Email address Message Upload CV Upload your CV/resume or any other relevant file. Max. file size: 256 MB. Lesha Bank is searching for the greatest talent and brightest minds to contribute to the current growth phase at our bank. We are looking for top-tier individuals who are passionate and hungry to add value from day one. Every day at Lesha is different, presenting a new challenge with the opportunity to contribute and grow. We are looking for an Key Responsibilities Security Architecture & Technology Risk Conduct security reviews of enterprise infrastructure, applications, cloud environments, networks, databases, middleware, and security solutions. Review proposed technology solutions and architectures to ensure security requirements are incorporated by design. Perform threat modelling and security risk assessments for new technologies and business initiatives. Define and assess security baselines and configuration standards. Provide security recommendations for enterprise architecture and technology transformation initiatives. Cloud, AI & Emerging Technology Security Assess and strengthen security controls across Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure environments. Conduct cloud security assessments covering identity, network security, workloads, containers, data protection, logging, and monitoring. Support security governance for container environments. Conduct security and risk assessments of AI, Generative AI, Machine Learning, and emerging technology solutions. Assess security controls and compliance requirements for AI-powered applications and third-party AI service providers. Establish appropriate security controls for cloud-native, AI-enabled, and emerging technology environments. Application Security & Dev Sec Ops Lead application security assessments throughout the software development lifecycle. Establish and enhance secure SDLC and Dev Sec Ops practices. Integrate security testing and controls into CI/CD pipelines. Oversee SAST, DAST, SCA, penetration testing, and application security reviews. Work closely with development teams to identify and remediate application security vulnerabilities. Promote security-by-design principles across application development and technology projects. Vulnerability & Security Testing Oversee enterprise vulnerability management and risk-based vulnerability remediation. Manage penetration testing activities for applications, infrastructure, and external-facing systems. Coordinate internal and external penetration testing engagements and track remediation. Establish vulnerability management KPIs, KRIs, risk acceptance processes, and remediation timelines. Chair or facilitate vulnerability remediation governance forums where required. Identify recurring vulnerabilities and drive improvements to the organization’s overall security posture. Security Operations & Incident Management Provide governance and oversight of security monitoring and incident response capabilities. Work with SOC and security operations teams to improve detection, response, and remediation processes. Review SIEM use cases, security monitoring requirements, and incident management processes. Support major cybersecurity incident investigations and post-incident improvement activities. Ensure lessons learned from incidents are incorporated into security controls and risk management processes. Cybersecurity Governance, Risk & Compliance Support Act as a deputy to the Information Security Officer when required, ensuring business continuity and ongoing execution of cybersecurity governance, risk management, compliance, and assurance activities. Provide analytical and administrative support to cybersecurity governance forums, risk committees, and management review meetings, including the preparation of presentations, reports, and action tracking. Support internal, external, and regulatory audits through evidence collection, stakeholder coordination, tracking of findings, and monitoring of remediation activities. Prepare and maintain cybersecurity metrics, dashboards, risk reports, KPIs, KRIs, and management reporting materials for governance and oversight purposes. Perform cybersecurity assurance activities and control effectiveness reviews to support the evaluation of the Group’s cybersecurity maturity and control environment. Preferred Certifications OSCP – Offensive Security Certified Professional CEH – Certified Ethical Hacker CHFI – Computer Hacking Forensic Investigator CISSP – Certified Information Systems Security Professional CISM – Certified Information Security Manager Educational Qualifications Required Bachelor or Master degree in Computer or IT or any related fields Experience Requirements More than 10 years of experience in Cybersecurity / Technology Risk Assessment and Assurance Experience supporting compliance with recognized frameworks and regulations such as ISO 27001, NIST, NIA, QCSF, PCI DSS, GDPR, PDPL, or similar standards. Hands-on experience conducting cybersecurity risk assessments, control reviews, and security assurance activities. Skilled in enterprise security architecture reviews, cloud, AI, emerging technologies security reviews, application security reviews, Dev Sec Ops, vulnerability assessment, penetration testing, security operations and information security incident management. Technical And Professional Skills Required Enterprise Security Architecture Cybersecurity Risk Assessments Cloud Security AI Security Application Security Dev Sec Ops Vulnerability Management Penetration Testing Threat Modelling Security Operations & Incident Response SIEM and Security Monitoring Executive Reporting and Stakeholder Management Key Competencies Strong analytical and risk-based decision-making capability. Ability to translate technical cybersecurity issues into business risks. Strong understanding of regulatory and compliance requirements. Ability to lead cybersecurity initiatives across multiple business and technology functions. Excellent stakeholder and executive communication skills. Ability to balance governance requirements with practical technology and business needs. Strong leadership, influencing, and problem-solving capabilities.

Full Time 10 to 25 years Naukri Gulf

Contractor

On-site - Qatar - Doha 29 July 2026

Information Technology

The CSEA Contractor is expected to provide hands-on support to the Cyber Security Engineering and Architecture section by contributing to security architecture activities, technical security reviews, control implementation, risk assessments and advisory services across enterprise systems, infrastructure, cloud environments and applications.Desired Candidate Profile<ul><li>Hands-on experience with Enterprise Security Architecture methodologies and modern security technologies, including IAM, SIEM, EDR/XDR, WAF, SASE, Zero Trust, cloud security, and security automation tools.</li><li>Strong knowledge of IT infrastructure security, including network security, cloud security, endpoint security, identity security, and secure architecture design principles.</li><li>Strong knowledge of application security, including secure SDLC, DevSecOps, API security, secure coding practices, and application threat modeling.</li><li>Experience implementing, validating, and reviewing security controls across IT infrastructure, cloud platforms such as AWS, Azure, and GCP, and enterprise applications.</li><li>Experience developing, maintaining, and enhancing security control libraries, security patterns, baselines, and architecture standards, while ensuring their integration into security architecture and engineering activities.</li><li>Strong understanding of cybersecurity standards, laws, and frameworks, including NIST, ISO/IEC 27001, CIS Controls, GDPR, PCI-DSS, and other relevant regulatory or compliance requirements.</li><li>Strong understanding of cybersecurity best practices, including secure network architecture, endpoint protection, identity and access management, cloud security, DevSecOps, and defense-in-depth design.</li><li>Experience conducting security design reviews, architecture assessments, threat modeling, technical risk assessments, and security gap assessments.</li><li>Ability to support business units, project teams, IT teams, and security stakeholders in selecting, designing, and implementing secure information systems and technology solutions.</li><li>Experience with security automation and scripting using tools and languages such as Python, PowerShell, Bash, Terraform, Ansible, or similar technologies.</li><li>Ability to support security investigations, incident response activities, forensic analysis, root cause analysis, and post-incident improvement recommendations when required.</li><li>Experience providing technical consultation and advisory support on CSEA-related projects, initiatives, and engagements as requested by the CSEA Section Head.</li><li>Excellent ability to translate technical cybersecurity concepts, risks, and recommendations into clear business language for both technical and non-technical stakeholders.</li><li>Experience participating in cybersecurity committees, technical working groups, architecture review boards, project meetings, and cross-functional security discussions.</li><li>Strong problem-solving, analytical, and decision-support skills, with the ability to assess complex technical environments and recommend practical security solutions.</li><li>Ability to work independently while also collaborating effectively with security architects, SOC analysts, IT teams, application teams, project managers, and business stakeholders.</li><li>Excellent verbal and written communication skills, with the ability to document security findings, architecture recommendations, risks, and remediation actions clearly and professionally.</li><li>Ability to mentor and support CSEA team members as needed by transferring knowledge, sharing technical expertise, and contributing to the development of internal cybersecurity engineering and architecture capabilities.</li><li>Key Deliverables: The contractor may be expected to support or deliver: Security architecture reviews, Security design review reports, Threat models and risk assessments, Security control mapping and recommendations, Architecture patterns, baselines, and standards, Technical security advisory reports, Secure design recommendations for infrastructure, cloud, and applications, Security improvement roadmaps, Support for incident response, investigations, and technical analysis, Knowledge transfer sessions for CSEA members</li><li>Requirements</li><li>Education: Bachelor s degree in a technology-related field, such as Cybersecurity, Computer Science, Computer Engineering, Information Security, Information Technology, or a related discipline. A higher degree or relevant professional certifications are preferred.</li><li>Experience: Minimum of 10 years relevant experience in cybersecurity, information security, security engineering, or IT infrastructure security, with at least 3 years of hands-on experience in cybersecurity architecture, security engineering, or enterprise security architecture.</li><li>Preferred Certifications: CISSP, CISM, SABSA, or TOGAF certifications preferred. Cloud security certifications such as CCSP, Azure Security Engineer, or AWS Security Specialty preferred. Cybersecurity certifications such as GCIH, GCIA, GSEC, or Security+ preferred. Other relevant cybersecurity, cloud security, or architecture certifications considered.</li><li>Proficiency in English & Arabic is required.</li></ul>

من المتوقع أن يوفر مقاول CSEA دعمًا عمليًا لقسم هندسة وعمارة الأمن السيبراني من خلال المساهمة في أنشطة عمارة الأمن، المراجعات الأمنية الفنية، تنفيذ الضوابط، تقييمات المخاطر وخدمات الاستشارات عبر أنظمة المؤسسة والبُنى التحتية وبيئات السحابة والتطبيقات.المرشح المطلوب<ul><li>خبرة عملية مع منهجيات هندسة الأمن المؤسسي والتقنيات الأمنية الحديثة، بما في ذلك IAM و SIEM و EDR/XDR و WAF و SASE و Zero Trust وأمن السحابة وأدوات أتمتة الأمن.</li><li>معرفة قوية بأمن بنية IT التحتية، بما في ذلك أمان الشبكات وأمان السحابة وأمان نقاط النهاية وأمان الهوية ومبادئ تصميم العمارة الآمنة.</li><li>معرفة قوية بأمن التطبيقات، بما في ذلك SDLC الآمن وDevSecOps وأمان API وممارسات الترميز الآمن ونمذجة تهديدات التطبيقات.</li><li>خبرة في تنفيذ والتحقق من الضوابط الأمنية ومراجعتها عبر بنية IT التحتية ومنصات السحابة مثل AWS وAzure وGCP وتطبيقات المؤسسة.</li><li>خبرة في تطوير وصيانة وتعزيز مكتبات الضوابط الأمنية والأنماط الأمنية والمعايير الأساسية والعمارة، مع ضمان تكاملها في أنشطة عمارة وهندسة الأمن.</li><li>فهم قوي لمعايير الأمن السيبراني والقوانين والأطر، بما في ذلك NIST وISO/IEC 27001 وCIS Controls وGDPR وPCI-DSS ومتطلبات الامتثال التنظيمية الأخرى المعنية.</li><li>فهم قوي لأفضل ممارسات الأمن السيبراني، بما في ذلك عمارة الشبكات الآمنة، حماية نقاط النهاية، إدارة الهوية والوصول، أمان السحابة، DevSecOps، وتصميم الدفاع من العمق.</li><li>خبرة في إجراء مراجعات تصميم الأمان وتقييمات العمارة ونمذجة التهديدات وتقييمات المخاطر الفنية وتقييم فجوات الأمن.</li><li>القدرة على دعم وحدات الأعمال وفرق المشاريع وفرق تكنولوجيا المعلومات وأصحاب المصلحة الأمنيين في اختيار وتصميم وتنفيذ أنظمة معلومات وتكنولوجيات آمنة.</li><li>خبرة في أتمتة الأمن والبرمجة باستخدام أدوات ولغات مثل Python وPowerShell وBash وTerraform وAnsible أو تقنيات مماثلة.</li><li>القدرة على دعم إجراءات التحقيق الأمني وأنشطة الاستجابة للحوادث والتحليل الجنائي وتحليل السبب الجذري وتوصيات التحسين بعد الحوادث عند الحاجة.</li><li>خبرة في تقديم الاستشارات الفنية والدعم الاستشاري في المشاريع والمبادرات والجهود المتعلقة بـ CSEA كما يطلب رئيس قسم CSEA.</li><li>قدرة ممتازة على ترجمة مفاهيم الأمن السيبراني والتكاليف والمخاطر إلى لغة أعمال واضحة لكلا من أصحاب المصلحة الفنيين وغير الفنيين.</li><li>خبرة في المشاركة في لجان الأمن السيبراني، ومجموعات العمل الفنية، ولجان مراجعة العمارة، واجتماعات المشاريع، ومناقشات الأمن عبر الأقسام.</li><li>مهارات حل المشكلات وتحليلية واتخاذ القرار القوية، مع القدرة على تقييم بيئات تقنية معقدة وتوصية حلول أمنية عملية.</li><li>القدرة على العمل بشكل مستقل مع التعاون الفعّال مع مهندسي الأمن المعماريين ومحللي SOC وفرق IT وفرق التطبيقات ومديري المشاريع وأصحاب المصلحة في العمل التجاري.</li><li>مهارات اتصال شفهية وكتابية ممتازة، مع القدرة على توثيق النتائج الأمنية وتوصيات العمارة والمخاطر والإجراءات التصحيحية بشكل واضح ومهني.</li><li>القدرة على توجيه ودعم أعضاء فريق CSEA عند الحاجة من خلال نقل المعرفة ومشاركة الخبرة الفنية والمساهمة في تطوير قدرات الهندسة الأمنية السيبرانية والعمارة داخل المؤسسة.</li><li>المخرجات الأساسية: قد يُطلب من المقاول دعم أو تقديم: مراجعات عمارة الأمن، تقارير مراجعة تصميم الأمن، نماذج التهديد وتقييمات المخاطر، ربط وتوصيات ضوابط الأمن، أنماط العمارة والمعايير الأساسية، تقارير الاستشارة الفنية الأمنية، توصيات تصميم آمن للبنية التحتية والسحابة والتطبيقات، خرائط طريق تحسين الأمن، دعم الاستجابة للحوادث والتحقيقات والتحليل الفني، جلسات نقل المعرفة لأعضاء CSEA</li><li>المتطلبات</li><li>التعليم: درجة البكالوريوس في مجال تقني مثل الأمن السيبراني أو علوم الحاسوب أو الهندسة الحاسوبية أو أمن المعلومات أو تكنولوجيا المعلومات أو تخصص ذي صلة. يفضل الحصول على درجة أعلى أو شهادات مهنية ذات صلة.</li><li>الخبرة: خبرة لا تقل عن 10 سنوات ذات صلة في الأمن السيبراني أو أمن المعلومات أو هندسة الأمن أو أمان بنية تكنولوجيا المعلومات، مع ثلاث سنوات على الأقل من الخبرة العملية في عمارة الأمن السيبراني أو هندسة الأمن أو عمارة الأمن المؤسسي.</li><li>الشهادات المفضلة: يُفضل CISSP وCISM وSABSA أو TOGAF. شهادات أمان سحابة مثل CCSP وAzure Security Engineer أو AWS Security Specialty مفضلة. شهادات الأمن السيبراني مثل GCIH وGCIA وGSEC أو Security+ مفضلة. شهادات أخرى ذات صلة بالأمن السيبراني وأمن السحابة أو العمارة قد تعتبر.</li><li>المهارة في الإنجليزية والعربية مطلوبة.</li></ul>

Full Time 3 to 8 years Naukri Gulf

Aircraft Mechanic A&P UC-35 Citation Qatar-Al Udeid

On-site - Qatar - Doha 10 August 2026

Engineering

Maintain launch/recover UC-35 Cessna Citation aircraft. Troubleshoot malfunctions in aircraft structure, landing gear, flight surfaces and controls, anti-icing, pneudraulic, engines, auxiliary power unit, and ventilation and heating systems.Principal Accountabilities:<ul><li>Operationally checks repaired or modified systems for proper operation.</li><li>Performs quality maintenance on assigned aircraft in accordance with federal aviation regulations, original equipment manufacturers, or military technical orders as specified in the statement of work instructions.</li><li>Repair and replace aircraft structures, such as wings and fuselage, and functional components including rigging, surface controls, and plumbing and hydraulic units, using hand tools, power tools, machines, and associated equipment.</li><li>Read and interpret manufacturers' and maintenance manuals, service bulletins, and other specifications to determine feasibility and method of repairing or replacing malfunctioning or damaged components.</li><li>Examine engines for oil leaks, and listens to operating engine to detect and diagnose malfunctions.</li><li>Inspect turbine blades to detect cracks or breaks.</li><li>Test engine operation, using troubleshooting procedures and diagnostic test equipment, to identify source of malfunction.</li><li>Replace or repair worn or damaged components using hand tools, gauges, and test equipment.</li><li>Remove and install engine from aircraft.</li><li>Disassemble and inspect parts for wear, warping, or other defects.</li><li>Repair or replace defective engine parts and reassembles and installs engine in aircraft.</li><li>Perform miscellaneous duties to service aircraft, including flushing crankcase, cleaning screens, greasing moving parts, and checking brakes.</li><li>May service engines and airframe components at line station making repairs, short of overhaul, required to keep aircraft in safe operating condition.</li><li>May specialize in work, repair and modification of structural, precision, and functional spare parts and assemblies.</li><li>May specialize in engine repair.</li><li>Perform other qualified duties as assigned.</li></ul>Knowledge & Skills<ul><li>Knowledge of aircraft sub-systems, including maintenance parameter, systems operation, limitations, and technical orders.</li><li>Ability to become qualified and perform engine runs for the aircraft type they are assigned to support.</li><li>Ability to read, write, and interpret technical duties is required.</li><li>Ability to communicate effectively with all levels of employees throughout the organization.</li><li>Proven track record demonstrating adaptability to change and the ability to respond to challenges in a changing environment.</li></ul>Minimum Qualifications:<ul><li>Valid FAA A&P Certificate Required.</li><li>All mechanics assigned to perform maintenance on FAA certified aircraft must meet FAA requirements.</li><li>Recent full-time experience in aviation maintenance with the assigned aircraft during the past 12 months.</li><li>Three (3) or more years aircraft mechanic experience as an aircraft mechanic on assigned aircraft required, five (5) years preferred.</li><li>Six (6) months of flight line and overhaul & inspection experience</li><li>Completion of formal maintenance training on assigned aircraft is desired.</li><li>Qualified by the appropriate USG armed forces aircraft mechanic maintenance course or civilian equivalent training.</li><li>High school diploma or equivalent.</li><li>Tools are provided by Amentum.</li></ul>Security Clearance Requirements:<ul><li>Must be able to obtain and maintain a US Govt DoW Secret Security Clearance. Must be able to obtain and maintain facility credentials and authorization. US Citizenship is Required to hold a US Govt Secret Clearance, and facility credentials and authorization to work at this facility.</li></ul>Physical Requirements/Working Environment<ul><li>Must be able to walk and stand on level and/or inclined surfaces for extended periods throughout the day.</li><li>Must be able to climb stairs, ramps, ladders and work stands.</li><li>Must be able to crouch, crawl, grasp or handle objects, use finger dexterity, bend elbow/knee and reach above/below shoulders.</li><li>May be required to carry, push or pull up to and may exceed 50 pounds.</li><li>May be required to lift up to 50 pounds to height of four feet and be required to lift up to 35 pounds to height of 7 feet.</li><li>May be required to see aircraft in flight, read dials/gauges, identify small objects and hand tools.</li><li>Must be able to type using a standard keyboard to communicate through e-mail and various software applications.</li><li>Must be able to see imperfections, micrometer readings and other small scales.</li><li>Must be able to read and interpret newspaper and typewritten print.</li><li>Must be able to communicate by voice and detect sounds by ear over telephone.</li><li>Must be able to distinguish color and judge three dimensional depths.</li><li>May be required to operate power vehicles, machinery, hand tools, ground support equipment, fork lift, APU, etc.</li><li>Must have minimum 20/100 near and far vision, correctable to 20/20.</li><li>Must be capable of living and working in a potentially hostile environment for an extended period.</li><li>May be required to respond to a wide variety of operational circumstances, including extreme weather conditions and rudimentary infrastructure.</li><li>May be exposed to extreme noise from turbine and jet engine aircraft.</li><li>May be exposed to fumes or airborne particles. May be exposed to electrical shock hazards or work near moving mechanical parts, vehicles, or aircraft.</li><li>Must be able to travel internationally to and between remote locations in austere and/or hostile environments.</li></ul>Desired Candidate Profile<ul><li>Valid FAA A&P Certificate Required.</li><li>All mechanics assigned to perform maintenance on FAA certified aircraft must meet FAA requirements.</li><li>Recent full-time experience in aviation maintenance with the assigned aircraft during the past 12 months.</li><li>Three (3) or more years aircraft mechanic experience as an aircraft mechanic on assigned aircraft required, five (5) years preferred.</li><li>Six (6) months of flight line and overhaul & inspection experience</li><li>Completion of formal maintenance training on assigned aircraft is desired.</li><li>Qualified by the appropriate USG armed forces aircraft mechanic maintenance course or civilian equivalent training.</li><li>High school diploma or equivalent.</li><li>Tools are provided by Amentum.</li><li>Must be able to obtain and maintain a US Govt DoW Secret Security Clearance. Must be able to obtain and maintain facility credentials and authorization. US Citizenship is Required to hold a US Govt Secret Clearance, and facility credentials and authorization to work at this facility.</li><li>Must be able to walk and stand on level and/or inclined surfaces for extended periods throughout the day.</li><li>Must be able to climb stairs, ramps, ladders and work stands.</li><li>Must be able to crouch, crawl, grasp or handle objects, use finger dexterity, bend elbow/knee and reach above/below shoulders.</li><li>May be required to carry, push or pull up to and may exceed 50 pounds.</li><li>May be required to lift up to 50 pounds to height of four feet and be required to lift up to 35 pounds to height of 7 feet.</li><li>May be required to see aircraft in flight, read dials/gauges, identify small objects and hand tools.</li><li>Must be able to type using a standard keyboard to communicate through e-mail and various software applications.</li><li>Must be able to see imperfections, micrometer readings and other small scales.</li><li>Must be able to read and interpret newspaper and typewritten print.</li><li>Must be able to communicate by voice and detect sounds by ear over telephone.</li><li>Must be able to distinguish color and judge three dimensional depths.</li><li>May be required to operate power vehicles, machinery, hand tools, ground support equipment, fork lift, APU, etc.</li><li>Must have minimum 20/100 near and far vision, correctable to 20/20.</li><li>Must be capable of living and working in a potentially hostile environment for an extended period.</li><li>May be required to respond to a wide variety of operational circumstances, including extreme weather conditions and rudimentary infrastructure.</li><li>May be exposed to extreme noise from turbine and jet engine aircraft.</li><li>May be exposed to fumes or airborne particles. May be exposed to electrical shock hazards or work near moving mechanical parts, vehicles, or aircraft.</li><li>Must be able to travel internationally to and between remote locations in austere and/or hostile environments.</li></ul>

صيانة إطلاق/استرجاع طائرة UC-35 Cessna Citation. استكشاف العطل في هياكل الطائرة، عجلات الهبوط، الأسطح والتحكمات، مضاد التجمد، الأنابيب الهوائية الهيدروليكية، المحركات، وحدة الطاقة المساعدة، وأنظمة التهوية والتدفئة.المسؤوليات الأساسية:<ul><li>إجراء فحوص تشغيلية على الأنظمة المُصلَحة أو المعدَّلة للتأكد من عملها بشكل صحيح.</li><li>أداء صيانة عالية الجودة على الطائرة المعينة وفقاً للوائح الطيران الفيدرالية، أو مصنعي المعدات الأصلية، أو الأوامر الفنية العسكرية كما هو موضح في تعليمات بيان العمل.</li><li>إصلاح واستبدال هياكل الطائرة، مثل الأجنحة والهيكل السفلي، والمكونات الوظيفية بما في ذلك الربط، والتحكمات السطحية، ووحدات السباكة والهيدروليك، باستخدام اليدوية وأدوات القوة والآلات والمعدات المرتبطة.</li><li>قراءة وتفسير كتيبات المصنعين والصيانة، ونشرات الخدمة، والمواصفات الأخرى لتحديد جدوى وطرق إصلاح أو استبدال المكونات المعطلة أو التالفة.</li><li>فحص محركات الطائرة للكشف عن تسربات الزيت، والاستماع إلى تشغيل المحرك لاكتشاف العطل وتشخيصه.</li><li>فحص ريش التوربين لاكتشاف وجود تشققات أو كسر.</li><li>اختبار تشغيل المحرك باستخدام إجراءات استكشاف العطل ومعدات الاختبار التشخيصية لتحديد مصدر العطل.</li><li>استبدال أو إصلاح المكونات البالية أو التالفة باستخدام أدوات يدوية، مقاييس، ومعدات اختبار.</li><li>إزالة وتثبيت المحرك من الطائرة.</li><li>تفكيك وفحص الأجزاء للارتداء، الالتواء، أو عيوب أخرى.</li><li>إصلاح أو استبدال أجزاء المحرك المعطوبة وإعادة تجميع وتثبيت المحرك في الطائرة.</li><li>أداء مهام خدمة طائرات متفرقة، بما في ذلك تفريغ علبة الكرنك، تنظيف الفلاتر، تشحيم الأجزاء المتحركة، وفحص المكابح.</li><li>قد يخدم المحركات ومكونات الهيكل في محطة الخط لإجراء الإصلاحات اللازمة للحفاظ على سلامة تشغيل الطائرة دون أن تكون إعادة بناء كاملة.</li><li>قد التخصص في أعمال، إصلاح وتعديل الأجزاء الاحتياطية والهياكل والدقة والتجميعات الوظيفية.</li><li>قد التخصص في إصلاح المحرك.</li><li>أداء واجبات أخرى مؤهلة كُلِّف بها.</li></ul>المعرفة والمهارات<ul><li>معرفة بأنظمة الطائرة الفرعية، بما في ذلك معايير الصيانة، تشغيل الأنظمة، القيود، والأوامر الفنية.</li><li>القدرة على أن يصبح مؤهلاً وأداء تشغيل المحرك للطراز الذي يتم دعمها.</li><li>القدرة على القراءة والكتابة وتفسير الواجبات الفنية مطلوبة.</li><li>القدرة على التواصل بفعالية مع جميع مستويات الموظفين في المنظمة.</li><li>سجل حافل يثبت القدرة على التكيف مع التغيير والقدرة على الاستجابة للتحديات في بيئة متغيرة.</li></ul>المؤهلات الدنيا:<ul><li>شهادة FAA A&P صالحة مطلوبة.</li><li>يجب على جميع الفنيين المكلَّفين بالصيانة على طائرة معتمدة من FAA أن يستوفوا متطلبات FAA.</li><li>خبرة حديثة بدوام كامل في صيانة الطيران مع الطائرة المعينة خلال آخر 12 شهراً.</li><li>ثلاث (3) سنوات أو أكثر من خبرة فني طيران كفني طيران على الطائرة المعينة مطلوبة، يفضل خمس (5) سنوات.</li><li>ستة (6) أشهر من خبرة صف الطيران والصيانة والفحص.</li><li>إتمام تدريب صيانة رسمي على الطائرة المعينة مرغوب فيه.</li><li>مؤهل من الدورة التدريبية لصيانة فني طيران من القوات العسكرية الأمريكية أو تدريب مدني مكافئ.</li><li>شهادة الثانوية العامة أو ما يعادلها.</li><li>الأدوات مقدمة من Amentum.</li></ul>متطلبات الأمن:<ul><li>يجب أن يكون قادرًا على الحصول والحفاظ على تصريح أمني سري من حكومة الولايات المتحدة DoW. يجب أن يكون قادرًا على الحصول والحفاظ على اعتماديات وموافقة المنشأة. الجنسية الأمريكية مطلوبة لحيازة تصريح سري حكومي أمريكي، واعتماديات وموافقة المنشأة للعمل في هذه المنشأة.</li></ul>المتطلبات البدنية/بيئة العمل<ul><li>يجب أن يكون قادرًا على المشي والوقوف على أسطح مستوية و/أو مائلة لفترات طويلة طوال اليوم.</li><li>يجب أن يكون قادرًا على صعود الدرج والمنحدرات والسلال ومواقف العمل.</li><li>يجب أن يكون قادرًا على الانحناء والانحناء والتقاط أو معالجة الأشياء، واستخدام مرونة الأصابع، وثني المرفق/الركبة والوصول فوق/تحت الكتفين.</li><li>قد يحتاج إلى حمل، دفع أو سحب حتى 50 رطلاً أو أكثر.</li><li>قد يحتاج إلى رفع يصل إلى 50 رطلاً إلى ارتفاع أربعة أقدام وما يصل إلى 35 رطلاً إلى ارتفاع سبعة أقدام.</li><li>قد يحتاج إلى رؤية الطائرة أثناء الطيران، قراءة العقارب/المقياس، التعرف على أشياء صغيرة وأدوات يدوية.</li><li>يجب أن يكون قادرًا على الكتابة باستخدام لوحة مفاتيح قياسية للتواصل عبر البريد الإلكتروني وتطبيقات البرمجيات المختلفة.</li><li>يجب أن يكون قادرًا على رؤية العيوب، قراءات الميكرومتر وغيرها من المقاييس الصغيرة.</li><li>يجب أن يكون قادرًا على قراءة وتفسير مطبوعات الصحف والنص المكتوب آلياً.</li><li>يجب أن يكون قادرًا على التواصل بالصوت واكتشاف الأصوات بالأذن عبر الهاتف.</li><li>يجب أن يكون قادرًا على تمييز اللون وتقدير العمق ثلاثي الأبعاد.</li><li>قد يلزم تشغيل مركبات آلية وأدوات محرك ومعدات دعم الأرض ولوحة ارفع وAPU، وغيرها.</li><li>يجب أن تكون الرؤية القريبة والبعيدة 20/100 على الأقل، قابلة للتصحيح إلى 20/20.</li><li>يجب أن يكون قادرًا على العيش والعمل في بيئة قد تكون عدائية لفترة طويلة.</li><li>قد يحتاج إلى الاستجابة لظروف تشغيلية متنوعة، بما فيها الأحوال الجوية القاسية وبنية تحتية rudimentary.</li><li>قد يتعرض لارتفاع صوت شديد من طائرات التوربين والمحرك النفاث.</li><li>قد يتعرض للدخان أو الجزيئات المحمولة جواً. قد يتعرض لصدمة كهربائية أو العمل بالقرب من أجزاء ميكانيكية متحركة، مركبات، أو طائرات.</li><li>يجب أن يكون قادرًا على السفر دولياً إلى مواقع نائية في بيئات شديدة وقاسية.</li></ul>الملف المرشح المرغوب فيه<ul><li>شهادة FAA A&P صالحة مطلوبة.</li><li>يجب على جميع الفنيين المكلَّفين بالصيانة على طائرة معتمدة من FAA أن يستوفوا متطلبات FAA.</li><li>خبرة حديثة بدوام كامل في صيانة الطيران مع الطائرة المعينة خلال آخر 12 شهراً.</li><li>ثلاث (3) سنوات أو أكثر من خبرة فني طيران كفني طيران على الطائرة المعينة مطلوبة، يفضل خمس (5) سنوات.</li><li>ستة (6) أشهر من خبرة خط الطيران والصيانة والفحص</li><li>إتمام تدريب صيانة رسمي على الطائرة المعينة مرغوب فيه.</li><li>مؤهل من الدورة التدريبية لصيانة فني طيران من القوات العسكرية الأمريكية أو تدريب مدني مكافئ.</li><li>شهادة الثانوية العامة أو ما يعادلها.</li><li>الأدوات مقدمة من Amentum.</li><li>يجب أن يكون قادرًا على الحصول والحفاظ على تصريح أمني سري من حكومة الولايات المتحدة DoW. يجب أن يكون قادرًا على الحصول والحفاظ على اعتماديات وموافقة المنشأة. الجنسية الأمريكية مطلوبة لحيازة تصريح سري حكومي أمريكي، واعتماديات وموافقة المنشأة للعمل في هذه المنشأة.</li><li>يجب أن يكون قادرًا على المشي والوقوف على أسطح مستوية و/أو مائلة طوال اليوم.</li><li>يجب أن يكون قادرًا على صعود الدرج والمنحدرات والسلال ومواقف العمل.</li><li>يجب أن يكون قادرًا على الانحناء والانحناء والتقاط أو معالجة الأشياء، واستخدام مرونة الأصابع، وثني المرفق/الركبة والوصول فوق/تحت الكتفين.</li><li>قد يحتاج إلى حمل، دفع أو سحب حتى 50 رطلاً أو أكثر.</li><li>قد يحتاج إلى رفع يصل إلى 50 رطلاً إلى ارتفاع أربعة أقدام وما يصل إلى 35 رطلاً إلى ارتفاع سبعة أقدام.</li><li>قد يحتاج إلى رؤية الطائرة أثناء الطيران، قراءة العقارب/المقياس، التعرف على أشياء صغيرة وأدوات يدوية.</li><li>يجب أن يكون قادرًا على الكتابة باستخدام لوحة مفاتيح قياسية للتواصل عبر البريد الإلكتروني وتطبيقات البرمجيات المختلفة.</li><li>يجب أن يكون قادرًا على رؤية العيوب، قراءات الميكرومتر وغيرها من المقاييس الصغيرة.</li><li>يجب أن يكون قادرًا على قراءة وتفسير مطبوعات الصحف والنص المكتوب آلياً.</li><li>يجب أن يكون قادرًا على التواصل بالصوت واكتشاف الأصوات بالأذن عبر الهاتف.</li><li>يجب أن يكون قادرًا على تمييز اللون وتقدير العمق ثلاثي الأبعاد.</li><li>قد يلزم تشغيل مركبات آلية وأدوات محرك ومعدات دعم الأرض ولوحة ارفع وAPU، وغيرها.</li><li>يجب أن تكون الرؤية القريبة والبعيدة 20/100 على الأقل، قابلة للتصحيح إلى 20/20.</li><li>يجب أن يكون قادرًا على العيش والعمل في بيئة قد تكون عدائية لفترة طويلة.</li><li>قد يحتاج إلى الاستجابة لظروف تشغيلية متنوعة، بما فيها الأحوال الجوية القاسية وبنية تحتية rudimentary.</li><li>قد يتعرض لارتفاع صوت شديد من طائرات التوربين والمحرك النفاث.</li><li>قد يتعرض للدخان أو الجزيئات المحمولة جواً. قد يتعرض لصدمة كهربائية أو العمل بالقرب من أجزاء ميكانيكية متحركة، مركبات، أو طائرات.</li><li>يجب أن يكون قادرًا على السفر دولياً إلى مواقع نائية في بيئات شديدة وقاسية.</li></ul>

Full Time 3 to 8 years Naukri Gulf

Security Architect

On-site - Qatar - Doha 23 September 2026

Information Technology

The Role Capco is looking for a Security Architect to help our clients design and deliver secure, resilient cloud environments. You ll work across business, security, architecture, engineering, risk, and technology teams to embed security into cloud transformation programmes from the outset. This is an opportunity to tackle complex security challenges within financial services, helping clients adopt cloud technologies confidently while maintaining strong governance, regulatory compliance, and security controls. What You ll Do Designing and implementing cloud security strategies and policies that meet an organisation's specific needs. Design secure architectures and security patterns across public, private, and hybrid cloud environments. Define and implement cloud security controls, standards, guardrails, and architecture principles aligned with business and regulatory requirements. Work with engineering and platform teams to embed security throughout cloud infrastructure, applications, and delivery pipelines. Conducting regular security assessments and audits to identify vulnerabilities and develop plans to address them. Assess cloud security risks, identify control gaps, and provide practical recommendations that balance security, resilience, and business requirements. Collaborate with security, risk, architecture, and technology stakeholders to support secure cloud adoption and transformation.Desired Candidate ProfileWhat We re Looking For Strong experience in cloud security architecture, cybersecurity architecture, or cloud infrastructure security. Practical knowledge of security architecture principles, identity and access management, encryption, network security, logging, monitoring, and cloud-native security controls. Experience designing security solutions across major cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform. Strong understanding of security frameworks, governance, risk management, regulatory requirements, and security-by-design principles. Knowledge of recognised cybersecurity frameworks and industry security standards. Experience with DevSecOps, infrastructure as code, container security, Kubernetes, or cloud security posture management.Clear communication and stakeholder management skills, with the ability to translate complex security requirements into practical architecture and engineering outcomes. Bonus Points For Experience delivering cloud security solutions within banking, financial services, or another regulated environment. Relevant cloud or security certifications. Exposure to large-scale cloud migration, modernisation, cybersecurity, or technology transformation programmes.

الدور نحن في Capco نبحث عن معماري أمني للمساعدة في تصميم وتقديم بيئات سحابية آمنة ومرنة لعملائنا. ستعمل عبر فرق الأعمال والأمن والهندسة والمخاطر والتكنولوجيا لدمج الأمن في برامج التحول السحابي منذ البداية. هذه فرصة لمواجهة تحديات أمنية معقدة في قطاع الخدمات المالية، ومساعدة العملاء على تبني تقنيات السحابة بثقة مع الحفاظ على الحوكمة القوية والامتثال التنظيمي وضوابط الأمن.ماذا ستفعلتصميم وتنفيذ استراتيجيات وسياسات أمن السحابة التي تلبي الاحتياجات المحددة للمنظمة. تصميم هياكل أمنية وأنماط أمنية عبر بيئات السحابة العامة والخاصة والهجينة. تحديد وتنفيذ ضوابط ومعايير وأطر عمل أمن السحابة ومبادئ الهندسة المعمارية بما يتوافق مع متطلبات الأعمال والتنظيم. العمل مع فرق الهندسة والمنصة لدمج الأمن في البنية التحتية السحابية والتطبيقات وعمليات التوصيل. إجراء تقييمات وتدقيقات أمنية منتظمة لتحديد الثغرات ووضع خطط لمعالجتها. تقييم مخاطر أمن السحابة، وتحديد فجوات الضوابط، وتقديم توصيات عملية توازن بين الأمن والمرونة ومتطلبات الأعمال. التعاون مع أصحاب المصلحة في الأمن والمخاطر والهندسة والتكنولوجيا لدعم اعتماد وتحويل السحابة بشكل آمن.الملف الشخصي المرغوب فيهما نبحث عنهخبرة قوية في هندسة أمن السحابة أو هندسة الأمن السيبراني أو أمن البنية التحتية السحابية. معرفة عملية بمبادئ هندسة الأمن، وإدارة الهوية والوصول، والتشفير، وأمن الشبكات، والتسجيل، والمراقبة، وضوابط الأمن الأصلية للسحابة. خبرة في تصميم حلول أمنية عبر منصات السحابة الرئيسية مثل AWS أو Microsoft Azure أو Google Cloud Platform. فهم قوي لإطارات الأمن، والحوكمة، وإدارة المخاطر، والمتطلبات التنظيمية، ومبادئ التصميم الأمني. معرفة بإطارات الأمن السيبراني المعترف بها ومعايير الأمن الصناعية. خبرة في DevSecOps، والبنية التحتية كرمز، وأمن الحاويات، وKubernetes، أو إدارة وضع أمن السحابة. مهارات اتصال قوية وإدارة أصحاب المصلحة، مع القدرة على ترجمة المتطلبات الأمنية المعقدة إلى نتائج هندسية وهندسية عملية. نقاط إضافية لخبرة تقديم حلول أمن السحابة في قطاع المصارف أو الخدمات المالية أو بيئة منظمة أخرى. شهادات سحابية أو أمنية ذات صلة. التعرض لبرامج هجرة أو تحولات تكنولوجية واسعة النطاق للسحابة أو الأمن السيبراني أو التحديث التكنولوجي.

Full Time LinkedIn

Cybersecurity Manager

Remote - Qatar - Doha 20 August 2026

Information Technology

???? Welcome to Your Next Adventure! The Cybersecurity Manager is responsible for the day-to-day management and execution of Snoonu's cybersecurity operations, translating the strategy, policies, and priorities set by the Head of Cybersecurity into consistent, well-run security capabilities across security operations, vulnerability management, incident response, application and cloud security oversight, identity security, and governance execution. The role operates as the operational backbone of the cybersecurity function, managing security engineers, analysts, and specialists on a day-to-day basis, ensuring controls are implemented correctly, risks are tracked and remediated on schedule, and security processes run reliably and efficiently. Working closely with the Head of Cybersecurity, and in regular contact with Technology, Product, IT, Data, and business stakeholders, the Cybersecurity Manager ensures that security initiatives are delivered on time, that operational risk is visible and managed, and that the team executes against the priorities defined by cybersecurity leadership. The role combines hands-on technical oversight with team leadership, acting as the primary point of escalation for operational security matters and freeing the Head of Cybersecurity to focus on strategy, governance, and executive-level risk management.???? What You’ll Get Your Hands OnOperational Leadership & Program Execution Translate the cybersecurity strategy and roadmap set by the Head of Cybersecurity into operational plans, priorities, and day-to-day execution schedules. Coordinate execution across security operations, vulnerability management, application security, cloud security, and identity security workstreams. Track progress of security initiatives, projects, and remediation activities, and escalate delays, resourcing gaps, or emerging risks to the Head of Cybersecurity. Ensure security processes, runbooks, and procedures are documented, current, and consistently followed by the team. Support planning and reporting on cybersecurity capacity, workload, and resourcing needs. Security Operations & Incident Response Manage day-to-day security monitoring and detection activities, ensuring alerts are triaged, investigated, and resolved within agreed timelines. Act as the operational incident commander for security incidents, coordinating containment, investigation, and remediation, and escalating significant or high-severity incidents to the Head of Cybersecurity promptly. Ensure incident documentation, timelines, and lessons-learned reports are completed for all incidents. Coordinate and participate in incident-response tabletop exercises and technical simulations. Vulnerability & Exposure Management Manage the day-to-day vulnerability management program across applications, infrastructure, cloud, and endpoints. Ensure vulnerabilities are triaged, prioritized, assigned, and tracked to remediation against agreed SLAs. Coordinate with engineering, infrastructure, and platform teams to drive timely remediation of critical and high-risk findings. Monitor overdue items, recurring weaknesses, and exceptions, and escalate material or stalled risks to the Head of Cybersecurity. Support coordination of penetration tests, scans, and security assessments, and track resulting findings to closure. Application, Cloud & Dev Sec Ops Security Oversight Oversee day-to-day implementation of application security and Dev Sec Ops practices, including code scanning, dependency checks, and secure release gates. Monitor cloud security posture and coordinate remediation of misconfigurations, excessive permissions, and exposed assets with infrastructure and platform teams. Support engineering and product teams with practical security guidance during design and development, escalating architecture-level or higher-risk decisions to the Head of Cybersecurity. Track adoption and effectiveness of security tooling embedded in CI/CD pipelines and development workflows Identity, Access & Data Security Oversee operational execution of access reviews, joiner/mover/leaver processes, and privileged-access controls. Monitor for dormant accounts, excessive privileges, and access-control weaknesses, and drive remediation with system and application owners. Support implementation of data-security controls, including access control, encryption, and data-loss-prevention monitoring. Support investigation of suspected data-exposure or unauthorized-access incidents. Governance, Compliance & Third-Party Security Execution Support execution of the security governance framework, ensuring policies, standards, and procedures defined by the Head of Cybersecurity are implemented and followed operationally. Coordinate evidence collection, audits, and assessments related to ISO/IEC 27001, PCI DSS, and other applicable frameworks. Track findings from audits and assessments through to remediation, and maintain accurate compliance records. Coordinate day-to-day third-party security assessments and monitor remediation of vendor-related risks. Security Awareness & Reporting Coordinate delivery of security awareness training, phishing simulations, and role-specific enablement programs. Track behavioral metrics and awareness-program effectiveness, and report trends to the Head of Cybersecurity. Prepare regular operational reporting on security metrics, KPIs, incidents, vulnerabilities, and remediation status for the Head of Cybersecurity and relevant stakeholders. Team Leadership & Development Directly manage and coach a team of security analysts, engineers, and specialists across security operations, vulnerability management, and related functions. Set clear day-to-day expectations, priorities, and performance objectives for the team, aligned with direction from the Head of Cybersecurity. Conduct performance reviews, identify development needs, and support career growth for team members. Support hiring, onboarding, and knowledge continuity within the team. Foster a culture of ownership, technical excellence, and collaboration within the operational security team.???? ♂️ The Magic You Bring Bachelor's / Master’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent relevant professional experience.4-7 years of experience in the cybersecurity field, including prior experience leading or coordinating a team or workstream. Hands-on experience across several security domains such as security operations, vulnerability management, incident response, application security, cloud security, or identity and access management. Practical experience managing security tools, processes, and day-to-day operations in a technology-driven organization. Working knowledge of cloud environments, modern software-development practices, CI/CD, and enterprise application architectures. Experience supporting security governance, audits, or compliance activities. Strong organizational, coordination, and problem-solving skills, with the ability to manage multiple priorities under time pressure. Good communication skills, with the ability to work effectively with technical teams and non-technical stakeholders. Technical & Functional Competencies Security operations and incident response management. Vulnerability and exposure management. Application, cloud, and Dev Sec Ops security oversight. Identity and privileged-access security. Data security and data-loss prevention. Security governance, audit, and compliance support (ISO 27001, PCI DSS). Third-party security assessment coordination. Security awareness program management. Security metrics, reporting, and KPI tracking. Team leadership and operational management.

Full Time 10 to 30 years Naukri Gulf

Technology Risk Vice President

On-site - Qatar - Doha 17 September 2026

Information Technology

<h3>Job Summary</h3>We are seeking an experienced Technology Risk Vice President to strengthen and enhance Lesha Group s cybersecurity risk management and assurance capabilities across its business entities and technology environments. The role will be responsible for conducting and overseeing cybersecurity risk assessments, evaluating the effectiveness of security controls, performing cybersecurity assurance and compliance reviews, monitoring technology and cyber risk exposure, and supporting the remediation of identified vulnerabilities, control deficiencies, and emerging threats. The position will also contribute to the ongoing enhancement of the Group s cybersecurity governance, risk management, and regulatory compliance framework. The successful candidate will possess a strong blend of cybersecurity risk management, security assurance, and technical security expertise, with the ability to assess complex technology environments and engage effectively with business stakeholders, technology teams, project managers, third-party service providers, auditors, and regulatory authorities to strengthen the Group s overall cyber resilience and risk posture. <h3>Key Responsibilities</h3>Security Architecture & Technology Risk Conduct security reviews of enterprise infrastructure, applications, cloud environments, networks, databases, middleware, and security solutions. Review proposed technology solutions and architectures to ensure security requirements are incorporated by design. Perform threat modelling and security risk assessments for new technologies and business initiatives. Define and assess security baselines and configuration standards. Provide security recommendations for enterprise architecture and technology transformation initiatives. Cloud, AI & Emerging Technology Security Assess and strengthen security controls across Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure environments. Conduct cloud security assessments covering identity, network security, workloads, containers, data protection, logging, and monitoring. Support security governance for container environments. Conduct security and risk assessments of AI, Generative AI, Machine Learning, and emerging technology solutions. Assess security controls and compliance requirements for AI-powered applications and third-party AI service providers. Establish appropriate security controls for cloud-native, AI-enabled, and emerging technology environments. Application Security & DevSecOps Lead application security assessments throughout the software development lifecycle. Establish and enhance secure SDLC and DevSecOps practices. Integrate security testing and controls into CI/CD pipelines. Oversee SAST, DAST, SCA, penetration testing, and application security reviews. Work closely with development teams to identify and remediate application security vulnerabilities. Promote security-by-design principles across application development and technology projects. Vulnerability & Security Testing Oversee enterprise vulnerability management and risk-based vulnerability remediation. Manage penetration testing activities for applications, infrastructure, and external-facing systems. Coordinate internal and external penetration testing engagements and track remediation. Establish vulnerability management KPIs, KRIs, risk acceptance processes, and remediation timelines. Chair or facilitate vulnerability remediation governance forums where required. Identify recurring vulnerabilities and drive improvements to the organization s overall security posture. Security Operations & Incident Management Provide governance and oversight of security monitoring and incident response capabilities. Work with SOC and security operations teams to improve detection, response, and remediation processes. Review SIEM use cases, security monitoring requirements, and incident management processes. Support major cybersecurity incident investigations and post-incident improvement activities. Ensure lessons learned from incidents are incorporated into security controls and risk management processes. Cybersecurity Governance, Risk & Compliance Support Act as a deputy to the Information Security Officer when required, ensuring business continuity and ongoing execution of cybersecurity governance, risk management, compliance, and assurance activities. Provide analytical and administrative support to cybersecurity governance forums, risk committees, and management review meetings, including the preparation of presentations, reports, and action tracking. Support internal, external, and regulatory audits through evidence collection, stakeholder coordination, tracking of findings, and monitoring of remediation activities. Prepare and maintain cybersecurity metrics, dashboards, risk reports, KPIs, KRIs, and management reporting materials for governance and oversight purposes. Perform cybersecurity assurance activities and control effectiveness reviews to support the evaluation of the Group s cybersecurity maturity and control environment. Preferred Certifications OSCP Offensive Security Certified Professional CEH Certified Ethical Hacker CHFI Computer Hacking Forensic Investigator CISSP Certified Information Systems Security Professional CISM Certified Information Security Manager Technical and Professional Skills Required Enterprise Security Architecture Cybersecurity Risk Assessments Cloud Security AI Security Application Security DevSecOps Vulnerability Management Penetration Testing Threat Modelling Security Operations & Incident Response SIEM and Security Monitoring Executive Reporting and Stakeholder Management Key Competencies Strong analytical and risk-based decision-making capability. Ability to translate technical cybersecurity issues into business risks. Strong understanding of regulatory and compliance requirements. Ability to lead cybersecurity initiatives across multiple business and technology functions. Excellent stakeholder and executive communication skills. Ability to balance governance requirements with practical technology and business needs. Strong leadership, influencing, and problem-solving capabilities.Desired Candidate Profile<h3>Educational Qualifications Required</h3>Bachelor or Master degree in Computer or IT or any related fields <h3>Experience Requirements</h3>More than 10 years of experience in Cybersecurity / Technology Risk Assessment and Assurance Experience supporting compliance with recognized frameworks and regulations such as ISO 27001, NIST, NIA, QCSF, PCI DSS, GDPR, PDPL, or similar standards. Hands-on experience conducting cybersecurity risk assessments, control reviews, and security assurance activities. Skilled in enterprise security architecture reviews, cloud, AI, emerging technologies security reviews, application security reviews, DevSecOps, vulnerability assessment, penetration testing, security operations and information security incident management.

<h3>ملخص الوظيفة</h3>نحن نبحث عن نائب رئيس لمخاطر التكنولوجيا ذو خبرة لتعزيز وتطوير قدرات إدارة مخاطر الأمن السيبراني والضمان في مجموعة لشا عبر كيانات أعمالها وبيئاتها التكنولوجية. سيكون هذا الدور مسؤولاً عن إجراء والإشراف على تقييمات مخاطر الأمن السيبراني، وتقييم فعالية ضوابط الأمن، وإجراء مراجعات الضمان والامتثال للأمن السيبراني، ومراقبة التعرض للمخاطر التكنولوجية والسيبرانية، ودعم معالجة الثغرات الأمنية المحددة، ونقاط ضعف الضوابط، والتهديدات الناشئة. كما ستساهم هذه الوظيفة في التحسين المستمر لإطار حوكمة الأمن السيبراني، وإدارة المخاطر، والامتثال التنظيمي للمجموعة. وسيمتلك المرشح الناجح مزيجاً قوياً من الخبرة في إدارة مخاطر الأمن السيبراني، وضمان الأمن، والخبرة الأمنية التقنية، مع القدرة على تقييم البيئات التكنولوجية المعقدة والتفاعل بفعالية مع أصحاب المصلحة في الأعمال، وفرق التكنولوجيا، ومديري المشاريع، ومزودي الخدمات من الأطراف الخارجية، والمدققين، والجهات التنظيمية لتعزيز المرونة السيبرانية الإجمالية وموقف المخاطر للمجموعة. <h3>المسؤوليات الرئيسية</h3>هندسة الأمن & مخاطر التكنولوجيا إجراء مراجعات أمنية للبنية التحتية للمؤسسة، والتطبيقات، والبيئات السحابية، والشبكات، وقواعد البيانات، والبرامج الوسيطة، والحلول الأمنية. مراجعة الحلول والمهندسات التكنولوجية المقترحة لضمان دمج المتطلبات الأمنية منذ التصميم. إجراء نمذجة التهديدات وتقييمات المخاطر الأمنية للتكنولوجيات والمبادرات التجارية الجديدة. تحديد وتقييم القواعد الأمنية الأساسية ومعايير التهيئة. تقديم توصيات أمنية لهندسة المؤسسات ومبادرات التحول التكنولوجي. أمن السحابة والذكاء الاصطناعي & التكنولوجيات الناشئة تقييم وتدعيم ضوابط الأمن عبر بيئات Microsoft Azure وGoogle Cloud Platform وOracle Cloud Infrastructure. إجراء تقييمات أمن السحابة التي تغطي الهوية، وأمن الشبكات، وأحمال العمل، والحاويات، وحماية البيانات، وتسجيل الأحداث، والمراقبة. دعم حوكمة الأمن لبيئات الحاويات. إجراء تقييمات الأمن والمخاطر لحلول الذكاء الاصطناعي، والذكاء الاصطناعي التوليدي، وتعلم الآلة، والتكنولوجيات الناشئة. تقييم ضوابط الأمن ومتطلبات الامتثال للتطبيقات المدعومة بالذكاء الاصطناعي ومزودي خدمات الذكاء الاصطناعي من الأطراف الخارجية. إنشاء ضوابط أمنية مناسبة للبيئات السحابية الأصلية، والمدعومة بالذكاء الاصطناعي، والتكنولوجيات الناشئة. أمن التطبيقات & DevSecOps قيادة تقييمات أمن التطبيقات طوال دورة حياة تطوير البرمجيات. إنشاء وتعزيز ممارسات دورة حياة تطوير البرمجيات الآمنة (SDLC) وDevSecOps. دمج الاختبارات والضوابط الأمنية في أنابيب CI/CD. الإشراف على اختبارات SAST وDAST وSCA واختبارات الاختراق ومراجعات أمن التطبيقات. العمل عن كثب مع فرق التطوير لتحديد ومعالجة ثغرات أمن التطبيقات. تعزيز مبادئ الأمن بواسطة التصميم عبر مشاريع تطوير التطبيقات والتكنولوجيا. إدارة الثغرات & الاختبارات الأمنية الإشراف على إدارة الثغرات في المؤسسة ومعالجة الثغرات القائمة على المخاطر. إدارة أنشطة اختبار الاختراق للتطبيقات، والبنية التحتية، والأنظمة المواجهة للخارج. تنسيق مهام اختبار الاختراق الداخلية والخارجية ومتابعة المعالجة. إنشاء مؤشرات الأداء الرئيسية (KPIs)، ومؤشرات المخاطر الرئيسية (KRIs)، وعمليات قبول المخاطر، والجداول الزمنية للمعالجة لإدارة الثغرات. رئاسة أو تيسير منتديات حوكمة معالجة الثغرات عند الحاجة. تحديد الثغرات المتكررة والدفع بنحو تحسينات في الموقف الأمني الإجمالي للمؤسسة. العمليات الأمنية & إدارة الحوادث توفير الحوكمة والإشراف على قدرات المراقبة الأمنية والاستجابة للحوادث. العمل مع مركز العمليات الأمنية (SOC) وفرق العمليات الأمنية لتحسين عمليات الكشف والاستجابة والمعالجة. مراجعة حالات استخدام SIEM، ومتطلبات المراقبة الأمنية، وعمليات إدارة الحوادث. دعم التحقيقات في حوادث الأمن السيبراني الكبرى وأنشطة التحسين ما بعد الحادث. ضمان دمج الدروس المستفادة من الحوادث في ضوابط الأمن وعمليات إدارة المخاطر. دعم حوكمة الأمن السيبراني والمخاطر & الامتثال القيام بدور نائب مسؤول أمن المعلومات عند الحاجة، مما يضمن استمرارية الأعمال والتنفيذ المستمر لأنشطة حوكمة الأمن السيبراني، وإدارة المخاطر، والامتثال، والضمان. تقديم الدعم التحليلي والإداري لمنتديات حوكمة الأمن السيبراني، ولجان المخاطر، واجتماعات المراجعة الإدارية، بما في ذلك إعداد العروض التقديمية، والتقارير، ومتابعة الإجراءات. دعم عمليات التدقيق الداخلي والخارجي والتنظيمي من خلال جمع الأدلة، وتنسيق أصحاب المصلحة، ومتابعة النتائج، ومراقبة أنشطة المعالجة. إعداد وصيانة مقاييس الأمن السيبراني، ولوحات التحكم، وتقارير المخاطر، ومؤشرات الأداء الرئيسية (KPIs)، ومؤشرات المخاطر الرئيسية (KRIs)، ومواد التقارير الإدارية لأغراض الحوكمة والإشراف. إجراء أنشطة ضمان الأمن السيبراني ومراجعات فعالية الضوابط لدعم تقييم نضج الأمن السيبراني وبيئة الضوابط للمجموعة. الشهادات المفضلة OSCP - خبير أمن هجومي معتمد CEH - هكر أخلاقي معتمد CHFI - محقق جنائي في اختراق الكمبيوتر CISSP - خبير معتمد في أمن نظم المعلومات CISM - مدير أمن المعلومات المعتمد المهارات التقنية والمهنية المطلوبة هندسة الأمن للمؤسسات تقييمات مخاطر الأمن السيبراني أمن السحابة أمن الذكاء الاصطناعي أمن التطبيقات DevSecOps إدارة الثغرات اختبار الاختراق نمذجة التهديدات العمليات الأمنية والاستجابة للحوادث SIEM والمراقبة الأمنية التقارير التنفيذية وإدارة أصحاب المصلحة الكفاءات الرئيسية قدرة قوية على التحليل واتخاذ القرارات القائمة على المخاطر. القدرة على ترجمة مشكلات الأمن السيبراني التقنية إلى مخاطر تجارية. فهم قوي للمتطلبات التنظيمية ومتطلبات الامتثال. القدرة على قيادة مبادرات الأمن السيبراني عبر وظائف متعددة في الأعمال والتكنولوجيا. مهارات ممتازة في التواصل مع أصحاب المصلحة والإدارة التنفيذية. القدرة على الموازنة بين متطلبات الحوكمة والاحتياجات العملية للتكنولوجيا والأعمال. قدرات قوية في القيادة، والتأثير، وحل المشكلات.الملف الشخصي للمرشح المطلوب<h3>المؤهلات التعليمية المطلوبة</h3>درجة البكالوريوس أو الماجستير في علوم الحاسب أو تكنولوجيا المعلومات أو أي مجالات ذات صلة <h3>متطلبات الخبرة</h3>أكثر من 10 سنوات من الخبرة في الأمن السيبراني / تقييم وضمان مخاطر التكنولوجيا خبرة في دعم الامتثال للأطر والتنظيمات المعترف بها مثل ISO 27001، أو NIST، أو NIA، أو QCSF، أو PCI DSS، أو GDPR، أو PDPL، أو المعايير المماثلة. خبرة عملية في إجراء تقييمات مخاطر الأمن السيبراني، ومراجعات الضوابط، وأنشطة ضمان الأمن. مهارات عالية في مراجعات هندسة الأمن للمؤسسات، ومراجعات أمن السحابة والذكاء الاصطناعي والتكنولوجيات الناشئة، ومراجعات أمن التطبيقات، وDevSecOps، وتقييم الثغرات، واختبار الاختراق، والعمليات الأمنية وإدارة حوادث أمن المعلومات.

Full Time 10 to 25 years Naukri Gulf

Technology Risk Associate

On-site - Qatar - Doha 19 August 2026

Information Technology

Lesha Bank is searching for the greatest talent and brightest minds to contribute to the current growth phase at our bank. We are looking for top-tier individuals who are passionate and hungry to add value from day one. Every day at Lesha is different, presenting a new challenge with the opportunity to contribute and grow. We are looking for an Job Summary We are seeking an experienced Technology Risk Associate to strengthen and enhance Lesha Group s cybersecurity risk management and assurance capabilities across its business entities and technology environments. The role will be responsible for conducting and overseeing cybersecurity risk assessments, evaluating the effectiveness of security controls, performing cybersecurity assurance and compliance reviews, monitoring technology and cyber risk exposure, and supporting the remediation of identified vulnerabilities, control deficiencies, and emerging threats. The position will also contribute to the ongoing enhancement of the Group s cybersecurity governance, risk management, and regulatory compliance framework. The successful candidate will possess a strong blend of cybersecurity risk management, security assurance, and technical security expertise, with the ability to assess complex technology environments and engage effectively with business stakeholders, technology teams, project managers, third-party service providers, auditors, and regulatory authorities to strengthen the Group s overall cyber resilience and risk posture.Key Responsibilities<ul><li>Security Architecture & Technology Risk Conduct security reviews of enterprise infrastructure, applications, cloud environments, networks, databases, middleware, and security solutions. Review proposed technology solutions and architectures to ensure security requirements are incorporated by design. Perform threat modelling and security risk assessments for new technologies and business initiatives. Define and assess security baselines and configuration standards. Provide security recommendations for enterprise architecture and technology transformation initiatives.</li><li>Cloud, AI & Emerging Technology Security Assess and strengthen security controls across Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure environments. Conduct cloud security assessments covering identity, network security, workloads, containers, data protection, logging, and monitoring. Support security governance for container environments. Conduct security and risk assessments of AI, Generative AI, Machine Learning, and emerging technology solutions. Assess security controls and compliance requirements for AI-powered applications and third-party AI service providers. Establish appropriate security controls for cloud-native, AI-enabled, and emerging technology environments.</li><li>Application Security & DevSecOps Lead application security assessments throughout the software development lifecycle. Establish and enhance secure SDLC and DevSecOps practices. Integrate security testing and controls into CI/CD pipelines. Oversee SAST, DAST, SCA, penetration testing, and application security reviews. Work closely with development teams to identify and remediate application security vulnerabilities. Promote security-by-design principles across application development and technology projects.</li><li>Vulnerability & Security Testing Oversee enterprise vulnerability management and risk-based vulnerability remediation. Manage penetration testing activities for applications, infrastructure, and external-facing systems. Coordinate internal and external penetration testing engagements and track remediation. Establish vulnerability management KPIs, KRIs, risk acceptance processes, and remediation timelines. Chair or facilitate vulnerability remediation governance forums where required. Identify recurring vulnerabilities and drive improvements to the organization s overall security posture.</li><li>Security Operations & Incident Management Provide governance and oversight of security monitoring and incident response capabilities. Work with SOC and security operations teams to improve detection, response, and remediation processes. Review SIEM use cases, security monitoring requirements, and incident management processes. Support major cybersecurity incident investigations and post-incident improvement activities. Ensure lessons learned from incidents are incorporated into security controls and risk management processes.</li><li>Cybersecurity Governance, Risk & Compliance Support Act as a deputy to the Information Security Officer when required, ensuring business continuity and ongoing execution of cybersecurity governance, risk management, compliance, and assurance activities. Provide analytical and administrative support to cybersecurity governance forums, risk committees, and management review meetings, including the preparation of presentations, reports, and action tracking. Support internal, external, and regulatory audits through evidence collection, stakeholder coordination, tracking of findings, and monitoring of remediation activities. Prepare and maintain cybersecurity metrics, dashboards, risk reports, KPIs, KRIs, and management reporting materials for governance and oversight purposes. Perform cybersecurity assurance activities and control effectiveness reviews to support the evaluation of the Group s cybersecurity maturity and control environment.</li></ul>Desired Candidate Profile<ul><li>Preferred Certifications OSCP Offensive Security Certified Professional CEH Certified Ethical Hacker CHFI Computer Hacking Forensic Investigator CISSP Certified Information Systems Security Professional CISM Certified Information Security Manager</li><li>Educational Qualifications Required Bachelor or Master degree in Computer or IT or any related fields</li><li>Experience Requirements More than 10 years of experience in Cybersecurity / Technology Risk Assessment and Assurance Experience supporting compliance with recognized frameworks and regulations such as ISO 27001, NIST, NIA, QCSF, PCI DSS, GDPR, PDPL, or similar standards. Hands-on experience conducting cybersecurity risk assessments, control reviews, and security assurance activities. Skilled in enterprise security architecture reviews, cloud, AI, emerging technologies security reviews, application security reviews, DevSecOps, vulnerability assessment, penetration testing, security operations and information security incident management.</li><li>Technical and Professional Skills Required Enterprise Security Architecture Cybersecurity Risk Assessments Cloud Security AI Security Application Security DevSecOps Vulnerability Management Penetration Testing Threat Modelling Security Operations & Incident Response SIEM and Security Monitoring Executive Reporting and Stakeholder Management</li><li>Key Competencies Strong analytical and risk-based decision-making capability. Ability to translate technical cybersecurity issues into business risks. Strong understanding of regulatory and compliance requirements. Ability to lead cybersecurity initiatives across multiple business and technology functions. Excellent stakeholder and executive communication skills. Ability to balance governance requirements with practical technology and business needs. Strong leadership, influencing, and problem-solving capabilities.</li></ul>

تبحث ليشا بنك عن أعظم المواهب وأ brightest minds للمساهمة في مرحلة النمو الحالية في بنكنا. نحن نبحث عن أفراد من الطراز الأول، شغوفين وجائعين لإضافة قيمة من اليوم الأول. كل يوم في ليشا يختلف، فهو ي presenting a new challenge with the opportunity to contribute and grow. We are looking for an Job Summary We are seeking an experienced Technology Risk Associate to strengthen and enhance Lesha Group s cybersecurity risk management and assurance capabilities across its business entities and technology environments. The role will be responsible for conducting and overseeing cybersecurity risk assessments, evaluating the effectiveness of security controls, performing cybersecurity assurance and compliance reviews, monitoring technology and cyber risk exposure, and supporting the remediation of identified vulnerabilities, control deficiencies, and emerging threats. The position will also contribute to the ongoing enhancement of the Group s cybersecurity governance, risk management, and regulatory compliance framework. The successful candidate will possess a strong blend of cybersecurity risk management, security assurance, and technical security expertise, with the ability to assess complex technology environments and engage effectively with business stakeholders, technology teams, project managers, third-party service providers, auditors, and regulatory authorities to strengthen the Group s overall cyber resilience and risk posture.Key Responsibilities<ul><li>Security Architecture & Technology Risk Conduct security reviews of enterprise infrastructure, applications, cloud environments, networks, databases, middleware, and security solutions. Review proposed technology solutions and architectures to ensure security requirements are incorporated by design. Perform threat modelling and security risk assessments for new technologies and business initiatives. Define and assess security baselines and configuration standards. Provide security recommendations for enterprise architecture and technology transformation initiatives.</li><li>Cloud, AI & Emerging Technology Security Assess and strengthen security controls across Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure environments. Conduct cloud security assessments covering identity, network security, workloads, containers, data protection, logging, and monitoring. Support security governance for container environments. Conduct security and risk assessments of AI, Generative AI, Machine Learning, and emerging technology solutions. Assess security controls and compliance requirements for AI-powered applications and third-party AI service providers. Establish appropriate security controls for cloud-native, AI-enabled, and emerging technology environments.</li><li>Application Security & DevSecOps Lead application security assessments throughout the software development lifecycle. Establish and enhance secure SDLC and DevSecOps practices. Integrate security testing and controls into CI/CD pipelines. Oversee SAST, DAST, SCA, penetration testing, and application security reviews. Work closely with development teams to identify and remediate application security vulnerabilities. Promote security-by-design principles across application development and technology projects.</li><li>Vulnerability & Security Testing Oversee enterprise vulnerability management and risk-based vulnerability remediation. Manage penetration testing activities for applications, infrastructure, and external-facing systems. Coordinate internal and external penetration testing engagements and track remediation. Establish vulnerability management KPIs, KRIs, risk acceptance processes, and remediation timelines. Chair or facilitate vulnerability remediation governance forums where required. Identify recurring vulnerabilities and drive improvements to the organization s overall security posture.</li><li>Security Operations & Incident Management Provide governance and oversight of security monitoring and incident response capabilities. Work with SOC and security operations teams to improve detection, response, and remediation processes. Review SIEM use cases, security monitoring requirements, and incident management processes. Support major cybersecurity incident investigations and post-incident improvement activities. Ensure lessons learned from incidents are incorporated into security controls and risk management processes.</li><li>Cybersecurity Governance, Risk & Compliance Support Act as a deputy to the Information Security Officer when required, ensuring business continuity and ongoing execution of cybersecurity governance, risk management, compliance, and assurance activities. Provide analytical and administrative support to cybersecurity governance forums, risk committees, and management review meetings, including the preparation of presentations, reports, and action tracking. Support internal, external, and regulatory audits through evidence collection, stakeholder coordination, tracking of findings, and monitoring of remediation activities. Prepare and maintain cybersecurity metrics, dashboards, risk reports, KPIs, KRIs, and management reporting materials for governance and oversight purposes. Perform cybersecurity assurance activities and control effectiveness reviews to support the evaluation of the Group s cybersecurity maturity and control environment.</li></ul>Desired Candidate Profile<ul><li>Preferred Certifications OSCP Offensive Security Certified Professional CEH Certified Ethical Hacker CHFI Computer Hacking Forensic Investigator CISSP Certified Information Systems Security Professional CISM Certified Information Security Manager</li><li>Educational Qualifications Required Bachelor or Master degree in Computer or IT or any related fields</li><li>Experience Requirements More than 10 years of experience in Cybersecurity / Technology Risk Assessment and Assurance Experience supporting compliance with recognized frameworks and regulations such as ISO 27001, NIST, NIA, QCSF, PCI DSS, GDPR, PDPL, or similar standards. Hands-on experience conducting cybersecurity risk assessments, control reviews, and security assurance activities. Skilled in enterprise security architecture reviews, cloud, AI, emerging technologies security reviews, application security reviews, DevSecOps, vulnerability assessment, penetration testing, security operations and information security incident management.</li><li>Technical and Professional Skills Required Enterprise Security Architecture Cybersecurity Risk Assessments Cloud Security AI Security Application Security DevSecOps Vulnerability Management Penetration Testing Threat Modelling Security Operations & Incident Response SIEM and Security Monitoring Executive Reporting and Stakeholder Management</li><li>Key Competencies Strong analytical and risk-based decision-making capability. Ability to translate technical cybersecurity issues into business risks. Strong understanding of regulatory and compliance requirements. Ability to lead cybersecurity initiatives across multiple business and technology functions. Excellent stakeholder and executive communication skills. Ability to balance governance requirements with practical technology and business needs. Strong leadership, influencing, and problem-solving capabilities.</li></ul>

Full Time LinkedIn

Security Compliance Manager

On-site - Qatar - Doha Yesterday

Information Technology

A leading organization in Qatar is seeking a Manager – Security & Compliance to lead cybersecurity governance, information security, risk management, and regulatory compliance initiatives across the organization. The successful candidate will be responsible for strengthening security controls, ensuring compliance with applicable standards and regulations, managing security risks, overseeing audits and assessments, and fostering a strong security culture across the business. Key Responsibilities<ul><li>Lead the implementation and continuous improvement of information security and compliance frameworks.</li><li>Develop and maintain security policies, standards, procedures, and controls.</li><li>Conduct risk assessments and drive mitigation plans for identified security risks.</li><li>Manage internal and external security audits, assessments, and compliance reviews.</li><li>Oversee vulnerability management, security monitoring, and incident response activities.</li><li>Ensure third-party vendors meet security and compliance requirements.</li><li>Partner with business and technology teams to embed security and risk management practices.</li><li>Deliver security awareness and training initiatives across the organization.</li><li>Provide regular reporting to senior management on security risks, compliance status, and remediation activities.</li><li>Lead, mentor, and develop a high-performing security and compliance team.</li></ul> Requirements<ul><li>Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.</li><li>Minimum 8-10 years of experience in cybersecurity, information security, risk management, or compliance.</li><li>At least 3 years of leadership experience managing security or compliance functions.</li><li>Strong knowledge of information security frameworks, risk management, governance, and regulatory compliance.</li><li>Experience managing audits, security assessments, and third-party risk reviews.</li><li>Professional certifications such as CISSP, CISM, CRISC, CISA, CEH, Security+, or ISO 27001 are highly desirable.</li></ul> Interested candidates are encouraged to apply in confidence. All applications will be treated with strict confidentiality.

تطلب مؤسسة رائدة في قطر مديراً – للأمن والامتثال لقيادة مبادرات حوكمة الأمن السيبراني، وأمن المعلومات، وإدارة المخاطر، والامتثال التنظيمي في جميع أنحاء المؤسسة. سيكون المرشح الناجح مسؤولاً عن تعزيز الضوابط الأمنية، وضمان الامتثال للمعايير واللوائح المعمول بها، وإدارة المخاطر الأمنية، والإشراف على عمليات التدقيق والتقييم، وتعزيز ثقافة أمنية قوية في جميع قطاعات العمل. المسؤوليات الرئيسية<ul><li>قيادة تطبيق والتحسين المستمر لأطر أمن المعلومات والامتثال.</li><li>تطوير وصيانة السياسات والمعايير والإجراءات والضوابط الأمنية.</li><li>إجراء تقييمات المخاطر وقيادة خطط التخفيف للمخاطر الأمنية المحددة.</li><li>إدارة عمليات التدقيق الأمني الداخلية والخارجية، والتقييمات، ومراجعات الامتثال.</li><li>الإشراف على إدارة الثغرات الأمنية، والمراقبة الأمنية، وأنشطة الاستجابة للحوادث.</li><li>ضمان تلبية الموردين من الأطراف الخارجية لمتطلبات الأمن والامتثال.</li><li>الشراكة مع فرق العمل والتكنولوجيا لدمج ممارسات الأمن وإدارة المخاطر.</li><li>تقديم مبادرات التوعية والتدريب الأمني في جميع أنحاء المؤسسة.</li><li>تقديم تقارير دورية للإدارة العليا حول المخاطر الأمنية وحالة الامتثال وأنشطة المعالجة.</li><li>قيادة وتوجيه وتطوير فريق أمن وامتثال عالي الأداء.</li></ul> المتطلبات<ul><li>درجة البكالوريوس في الأمن السيبراني، أو أمن المعلومات، أو علوم الحاسوب، أو تكنولوجيا المعلومات، أو مجال ذي صلة.</li><li>خبرة لا تقل عن 8-10 سنوات في الأمن السيبراني، أو أمن المعلومات، أو إدارة المخاطر، أو الامتثال.</li><li>خبرة قيادية لا تقل عن 3 سنوات في إدارة وظائف الأمن أو الامتثال.</li><li>معرفة قوية بأطر أمن المعلومات، وإدارة المخاطر، والحوكمة، والامتثال التنظيمي.</li><li>خبرة في إدارة عمليات التدقيق، والتقييمات الأمنية، ومراجعات مخاطر الأطراف الخارجية.</li><li>الشهادات المهنية مثل CISSP، CISM، CRISC، CISA، CEH، Security+، أو ISO 27001 مرغوبة بشدة.</li></ul> يُشجع المرشحون المهتمون على التقدم بثقة. ستتم معالجة جميع الطلبات بسرية تامة.

Full Time LinkedIn

Security Architect

On-site - Qatar - Doha Wednesday

Information Technology

Location: Doha | Practice Area: Technology & Engineering | Type: Permanent The Role Capco is looking for a Security Architect to help our clients design and deliver secure, resilient cloud environments. You’ll work across business, security, architecture, engineering, risk, and technology teams to embed security into cloud transformation programmes from the outset. This is an opportunity to tackle complex security challenges within financial services, helping clients adopt cloud technologies confidently while maintaining strong governance, regulatory compliance, and security controls. What You’ll Do <ul><li>Designing and implementing cloud security strategies and policies that meet an organisation's specific needs.</li><li>Design secure architectures and security patterns across public, private, and hybrid cloud environments.</li><li>Define and implement cloud security controls, standards, guardrails, and architecture principles aligned with business and regulatory requirements.</li><li>Work with engineering and platform teams to embed security throughout cloud infrastructure, applications, and delivery pipelines.</li><li>Conducting regular security assessments and audits to identify vulnerabilities and develop plans to address them.</li><li>Assess cloud security risks, identify control gaps, and provide practical recommendations that balance security, resilience, and business requirements.</li><li>Collaborate with security, risk, architecture, and technology stakeholders to support secure cloud adoption and transformation. </li></ul>What We’re Looking For <ul><li>Strong experience in cloud security architecture, cybersecurity architecture, or cloud infrastructure security.</li><li>Practical knowledge of security architecture principles, identity and access management, encryption, network security, logging, monitoring, and cloud-native security controls.</li><li>Experience designing security solutions across major cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform.</li><li>Strong understanding of security frameworks, governance, risk management, regulatory requirements, and security-by-design principles.</li><li>Knowledge of recognised cybersecurity frameworks and industry security standards.</li><li>Experience with DevSecOps, infrastructure as code, container security, Kubernetes, or cloud security posture management.Clear communication and stakeholder management skills, with the ability to translate complex security requirements into practical architecture and engineering outcomes. </li></ul>Bonus Points For <ul><li>Experience delivering cloud security solutions within banking, financial services, or another regulated environment.</li><li>Relevant cloud or security certifications.</li><li>Exposure to large-scale cloud migration, modernisation, cybersecurity, or technology transformation programmes. </li></ul>Why Join Capco <ul><li>Deliver high-impact technology solutions for Tier 1 financial institutions</li><li>Work in a collaborative, flat, and entrepreneurial consulting culture</li><li>Access continuous learning, training, and industry certifications</li><li>Be part of a team shaping the future of digital financial services</li><li>Help shape the future of digital transformation across FS & Energy. </li></ul>We offer a competitive, people-first benefits package designed to support every aspect of your life. Inclusion at Capco We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.

الموقع: الدوحة | مجال الممارسة: التكنولوجيا والهندسة | النوع: دائم المنصب تبحث Capco عن مهندس معماري أمني لمساعدة عملائنا في تصميم وتقديم بيئات سحابية آمنة ومرنة. ستعمل عبر فرق الأعمال والأمن والمهندسين المعماريين والهندسة والمخاطر والتكنولوجيا لدمج الأمن في برامج التحول السحابي منذ البداية. تعد هذه فرصة لمعالجة التحديات الأمنية المعقدة في قطاع الخدمات المالية، ومساعدة العملاء على تبني تقنيات السحابة بثقة مع الحفاظ على حوكمة قوية، وامتثال تنظيمي، وضوابط أمنية متينة. مهامك في هذا الدور <ul><li>تصميم وتطبيق استراتيجيات وسياسات أمن السحابة التي تلبي الاحتياجات الخاصة للمؤسسة.</li><li>تصميم بنيات هندسية آمنة وأنماط أمان عبر البيئات السحابية العامة والخاصة والهجينة.</li><li>تحديد وتطبيق ضوابط أمن السحابة، والمعايير، وإرشادات الحماية، ومبادئ المعمارية بما يتوافق مع متطلبات الأعمال والمتطلبات التنظيمية.</li><li>العمل مع فرق الهندسة والمنصات لدمج الأمان في جميع أجزاء البنية التحتية السحابية والتطبيقات وسلاسل التسليم.</li><li>إجراء تقييمات وعمليات تدقيق أمنية دورية لتحديد الثغرات الأمنية ووضع خطط لمعالجتها.</li><li>تقييم مخاطر أمن السحابة، وتحديد الفجوات في الضوابط، تقديم توصيات عملية توازن بين الأمن والصلابة ومتطلبات الأعمال.</li><li>التعاون مع أصحاب المصلحة في مجالات الأمن والمخاطر والهندسة المعمارية والتكنولوجيا لدعم التبني والتحول السحابي الآمن. </li></ul>ما نبحث عنه <ul><li>خبرة قوية في هندسة أمن السحابة، أو هندسة الأمن السيبراني، أو أمن البنية التحتية السحابية.</li><li>معرفة عملية بمبادئ الهندسة المعمارية الأمنية، وإدارة الهوية والوصول، والتشفير، وأمن الشبكات، وتسجيل الأنشطة، والمراقبة، وضوابط الأمان الخاصة بالسحابة الأصلية.</li><li>خبرة في تصميم الحلول الأمنية عبر منصات السحابة الرئيسية مثل AWS أو Microsoft Azure أو Google Cloud Platform.</li><li>فهم قوي لأطر الأمن، والحوكمة، وإدارة المخاطر، والمتطلبات التنظيمية، ومبادئ الأمن عبر التصميم (Security-by-Design).</li><li>دراية بأطر الأمن السيبراني المعترف بها والمعايير الأمنية المعتمدة في القطاع.</li><li>خبرة في DevSecOps، أو البنية التحتية كرمز، أو أمان الحاويات، أو Kubernetes، أو إدارة الوضع الأمني للسحابة. مهارات واضحة في التواصل وإدارة أصحاب المصلحة، مع القدرة على ترجمة المتطلبات الأمنية المعقدة إلى مخرجات هندسية ومعمارية عملية. </li></ul>ميزات إضافية تفضيلية <ul><li>خبرة في تقديم حلول أمن السحابة ضمن القطاع المصرفي أو الخدمات المالية أو بيئة تنظيمية أخرى.</li><li>شهادات معتمدة ذات صلة في مجال السحابة أو الأمن.</li><li>خبرة سابقة في مشاريع الانتقال السحابي واسعة النطاق، أو التحديث، أو الأمن السيبراني، أو برامج التحول التكنولوجي. </li></ul>لماذا تنضم إلى Capco <ul><li>تقديم حلول تكنولوجية عالية التأثير للمؤسسات المالية الكبرى (Tier 1)</li><li>العمل في ثقافة استشارية قائمة على التعاون والمرونة وروح الريادة</li><li>الحصول على فرص التعلم المستمر والتدريب والشهادات المعتمدة في القطاع</li><li>أن تكون جزءًا من فريق يساهم في تشكيل مستقبل الخدمات المالية الرقمية</li><li>المساعدة في صياغة مستقبل التحول الرقمي في قطاعي الخدمات المالية والطاقة. </li></ul>نقدم حزمة مزايا تنافسية تركز على العنصر البشري أولاً ومصممة لدعم جميع جوانب حياتك. الشمولية في Capco نحن ملتزمون بجعل عملية التوظيف لدينا ميسرة وواضحة للجميع. إذا كنت بحاجة إلى أي تعديلات في أي مرحلة، فقط أخبرنا – وسنكون سعداء بتقديم المساعدة. نحن نقدر المنظور الفريد والمساهمة الخاصة بكل شخص. في Capco، نؤمن بأن كونك على طبيعتك هو أقصى نقاط قوتك. تشجع ثقافتنا #BeYourselfAtWork على الفردية والتعاون – وهو نهج يشكل كيفية عملنا مع العملاء ومع بعضنا البعض كل يوم.

Full Time LinkedIn

Cloud Security Engineer

On-site - Qatar - Doha 24 September 2026

Information Technology

Job Description We are seeking an experienced Cloud Security Engineer to join our Cybersecurity Practice. In this role, you will work closely with our cloud, infrastructure, and security teams to design, implement, and maintain security controls that protect our clients’ cloud environments. Your responsibilities will include assessing cloud architectures, identifying security risks, implementing security best practices, and continuously monitoring cloud platforms to ensure confidentiality, integrity, and availability of systems and data. You will support secure adoption of cloud services across public, private, and hybrid environments, ensuring compliance with organizational policies, industry standards, and Qatari regulatory requirements. You will collaborate with cloud architects, DevOps teams, and application teams to embed security controls throughout the cloud lifecycle, including design, deployment, and operations. The role requires hands-on technical expertise, strong analytical skills, and the ability to translate security requirements into practical, scalable cloud security solutions. Responsibilities <ul><li>Cloud Security Architecture and Assessment:Assess cloud architectures and environments across public, private, and hybrid cloud platforms to identify security risks and design appropriate security controls. Conduct security reviews of cloud services, configurations, and deployments, including compute, storage, networking, identity, and platform services. Provide detailed assessment reports with clear, actionable remediation recommendations aligned with industry best practices.</li><li>Cloud Security Governance:Define, implement, and maintain cloud security governance frameworks, including security policies, standards, baselines, and control frameworks aligned with organizational and regulatory requirements. Establish clear roles and responsibilities through RACI models and support the development of cloud security operating procedures to ensure consistent, repeatable, and auditable security practices across cloud environments.</li><li>Security Monitoring and Threat Detection:Implement and support cloud security monitoring solutions to detect misconfigurations, vulnerabilities, and suspicious activities. Analyze security alerts and events, investigate potential incidents, and support timely remediation to maintain the confidentiality, integrity, and availability of cloud environments.</li><li>Identity and Access Management:Review and support secure implementation of identity and access controls, including role-based access control, least privilege, authentication, and authorization mechanisms across cloud platforms and services.</li><li>Cloud Security Compliance:Ensure cloud environments comply with organizational security policies, regulatory requirements, and applicable security standards. Support continuous compliance monitoring and remediation of configuration gaps and policy violations.</li><li>DevSecOps and Automation Support:Collaborate with DevOps and cloud engineering teams to integrate security controls into CI/CD pipelines and infrastructure-as-code workflows. Promote automation to improve security consistency, visibility, and scalability across cloud environments.</li><li>Security Tools and Technologies:Evaluate, implement, and manage Cloud-Native Application Protection Platform (CNAPP) solutions to enhance cloud security posture, visibility, and threat detection. This includes third-party platforms such as Palo Alto Prisma Cloud as well as native cloud security solutions such as Microsoft Defender, covering posture management, workload protection, identity security, and runtime threat detection.</li><li>Documentation and Reporting:Create and maintain comprehensive documentation related to cloud security architectures, assessments, controls, and operational procedures. Prepare security reports and dashboards for internal stakeholders and clients as required.</li><li>Training and Awareness:Support security awareness initiatives by providing guidance and knowledge-sharing sessions to cloud, infrastructure, and development teams on secure cloud practices and emerging cloud security threats. </li></ul>Qualifications <ul><li>Education: Bachelor’s / college degree in Computer Science, Information Security, or a related field.</li><li>Experience: At least 3 years of experience in cloud security, cloud infrastructure, cybersecurity operations, or a closely related role.</li><li>Certifications: Relevant professional certifications are highly desirable. These may include, but are not limited to:</li><ul><li>Oracle Cloud Infrastructure Security Professional (highly desirable)</li><li>Microsoft Azure Security Engineer Associate (AZ-500) (highly desirable)</li><li>Other Cloud Service Providers (AWS, GCP, etc.)</li><li>Vendor agnostic cloud security (CSA, GIAC, etc.).</li><li>General cybersecurity (CompTIA, ISC2, etc.).</li></ul><li>Technical Skills: Proficiency with cloud security and monitoring tools such as Microsoft Defender for Cloud, Azure Policy, Entra ID, and OCI Cloud Guard, including hands-on experience with IAM configuration, network security controls (NSGs/route controls/security lists), encryption & key management (Azure Key Vault / OCI Vault), and logging/monitoring (Azure Monitor/Log Analytics, OCI Logging). Familiarity with Infrastructure as Code (IaC) (e.g., Terraform, ARM/Bicep) and integrating security checks into automation and deployment workflows is preferred.</li><li>Knowledge: In-depth knowledge of cloud security principles and practices, including shared responsibility, identity governance, segmentation, hardening, vulnerability management, and incident response in cloud environments. Familiar with security frameworks and guidelines (e.g., CIS Benchmarks, NIST, ISO 27001, CSA Cloud Controls Matrix) and general compliance/security governance concepts. Familiarity with DevSecOps practices and CI/CD pipelines, Qatar National Information Assurance (NIA) is a plus. </li></ul>About Malomatia ABOUT US malomatia is a leading Qatar-based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end-to-end technology solutions that empower clients to achieve their strategic goals. Our mission Empowering Qatar’s businesses and governments to leap into the digital future with agile, knowledge-driven solutions. Our vision To become Qatar’s trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world-class tech ecosystem. Driving change that makes a real impact Since 2008, malomatia has been driving Qatar’s digital transformation through innovative, ISO-certified IT solutions. With expertise across key public and private sectors, we empower the nation’s vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar’s sustainable future. About The Team Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high-value digital solutions tailored to the unique needs of our clients. Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation. Join us in shaping the future of technology in Qatar

Full Time

Senior Consultant - Cybersecurity

On-site - Qatar - Doha 29 July 2026

Information Technology

Job Description We are seeking a skilled Senior Cybersecurity Consultant to join our Cybersecurity Practice. In this role, you will work closely with cloud, infrastructure, network, endpoint, and application teams to design, implement, and maintain enterprise security controls that protect our digital environments. Your responsibilities will span Identity & Access Management (IAM), Data Security, Cloud Security, Endpoint Security, and Network Security. You will support the implementation of security best practices, monitor security posture, identify risks, and contribute to improving the overall security architecture across hybrid IT environments. You will assist in assessing security architectures, identifying vulnerabilities, implementing security solutions, and supporting incident response activities to ensure confidentiality, integrity, and availability of systems and data. The role requires hands-on technical expertise, strong analytical capabilities, and the ability to translate security requirements into practical and scalable security solutions. Responsibilities Enterprise Security Architecture and Risk Assessment:Support the assessment of enterprise IT and cloud environments to identify security risks and recommend appropriate controls across identity, data, network, endpoint, and cloud domains. Conduct security reviews of infrastructure, configurations, and deployments and provide actionable remediation recommendations aligned with industry best practices. Identity and Access Management (IAM):Implement and support secure identity and access controls, including role-based access control (RBAC), least privilege, multi-factor authentication (MFA), privileged access management (PAM), and identity governance practices across enterprise and cloud environments. Data Security:Assist in implementing data protection controls including data classification, encryption at rest and in transit, key management, data loss prevention (DLP), and secure data handling practices to ensure regulatory and organizational compliance. Cloud Security:Support secure configuration and monitoring of public, private, and hybrid cloud platforms. Implement security controls related to IAM, network segmentation, workload protection, encryption, logging, and compliance monitoring. Contribute to cloud security posture management and vulnerability remediation efforts. Endpoint Security:Support deployment and management of endpoint protection solutions including EDR/XDR platforms, antivirus, device control, patch management, and hardening baselines. Monitor endpoint security alerts and assist in incident investigation and response. Security Technology Stack:Support the implementation and management of security platforms and monitoring tools to strengthen security posture, improve visibility, and enhance threat detection across enterprise and cloud environments. Documentation and Reporting:Prepare and maintain documentation related to security configurations, risk assessments, incident reports, and operational procedures. Provide regular security posture updates to internal stakeholders and clients as required. Qualifications Education: Bachelor’s / college degree in Computer Science, Information Security, or a related field. Experience: At least 8 years of experience in cloud security, cloud infrastructure, cybersecurity operations, or a closely related role. Certifications: Relevant professional certifications are highly desirable. These may include, but are not limited to:Microsoft Azure Security Engineer Associate (AZ-500) Comp TIA Security+, CySA+, or similar ISC2 (e.g., CC or SSCP) CSA or other cloud security certifications.). Technical Skills: Hands-on experience with security technologies including identity platforms (such as Entra ID and Active Directory), cloud-native security tools, endpoint protection solutions (EDR/XDR), network security technologies (firewalls, IDS/IPS, VPN), SIEM and log monitoring solutions, encryption and key management systems, and vulnerability management tools. Familiarity with integrating security controls across enterprise and cloud environments is preferred. Knowledge: Strong understanding of cybersecurity principles including defense-in-depth, zero trust, least privilege, segmentation, encryption, vulnerability management, and incident response. Familiarity with security frameworks and guidelines (e.g., CIS Benchmarks, NIST, ISO 27001) and general compliance/governance concepts. Knowledge of Qatar National Information Assurance (NIA) is a plus. About Malomatia ABOUT US malomatia is a leading Qatar-based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end-to-end technology solutions that empower clients to achieve their strategic goals. Our mission Empowering Qatar’s businesses and governments to leap into the digital future with agile, knowledge-driven solutions. Our vision To become Qatar’s trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world-class tech ecosystem. Driving change that makes a real impact Since 2008, malomatia has been driving Qatar’s digital transformation through innovative, ISO-certified IT solutions. With expertise across key public and private sectors, we empower the nation’s vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar’s sustainable future. About The Team Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high-value digital solutions tailored to the unique needs of our clients. Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation. Join us in shaping the future of technology in Qatar

Full Time Up to 5 years Naukri Gulf

AI Security Consultant

On-site - Qatar - Doha 24 September 2026

Information Technology

Location: Doha, Qatar | Practice Area : Technology & Engineering | Type: PermanentThe RoleCapco is looking for an AI Security Consultant to help our clients identify, assess, and manage security risks associated with AI technologies and AI-enabled solutions. You ll work across data, security, technology, risk, and business teams to embed appropriate security controls throughout the lifecycle of AI systems. This is an opportunity to work at the intersection of AI, data, and cybersecurity within financial services, helping clients adopt AI securely while protecting sensitive information, strengthening governance, and managing emerging security risks.What You ll Do<ul><li>Assess security risks associated with AI systems, models, data pipelines, and supporting technology environments.</li><li>Conduct AI security assessments and secure AI architecture reviews.</li><li>Define and implement security controls, standards, and guardrails across the AI lifecycle, from design and development through deployment and ongoing operation.</li><li>Identify and assess AI-specific threats and vulnerabilities, including risks relating to data exposure, model access, prompt manipulation, and misuse.</li><li>Deliver cybersecurity advisory services supporting enterprise AI adoption.</li><li>Support clients in securing AI-enabled products, platforms and data ecosystems.</li><li>Work with data, security, architecture, engineering, risk, and business teams to embed security-by-design into AI solutions and delivery processes.</li><li>Support AI security governance, risk assessments, control testing, monitoring, incident response, and remediation activities.</li></ul>Desired Candidate ProfileWhat We re Looking For<ul><li>Strong experience in cybersecurity, information security, AI security, data security, or related technology risk disciplines.</li><li>Practical understanding of AI and machine learning environments and the security risks associated with models, data, applications, and supporting infrastructure.</li><li>Experience applying security controls, threat modelling, risk assessment, identity and access management, data protection, and secure architecture principles.</li><li>Strong understanding of security governance, responsible AI, regulatory requirements, and security-by-design principles.</li><li>Clear communication and stakeholder management skills, with the ability to translate technical AI security risks into practical business and risk considerations.</li></ul>Bonus Points For<ul><li>Experience delivering AI, data, or cybersecurity initiatives within banking, financial services, or another regulated environment.</li><li>Knowledge of AI security threats, responsible AI frameworks, model security, Generative AI, or emerging AI security practices.</li><li>Experience with cloud-based AI and machine learning platforms and their associated security controls.</li><li>Relevant cybersecurity, cloud, data, AI, or information security certifications.</li><li>Exposure to large-scale AI, data, cybersecurity, regulatory, or technology transformation programmes.</li></ul>

Full Time

GRC Specialist

On-site - Qatar - Doha 6 July 2026

Information Technology

The IT Security Audit & Compliance Specialist is responsible for managing and overseeing information security audits, compliance programs, cybersecurity governance, and risk management initiatives across the organization. The role ensures compliance with security standards, regulatory requirements, data protection policies, and internal governance frameworks. The position supports the development of audit frameworks, conducts security assessments, monitors compliance maturity, identifies security risks and vulnerabilities, and collaborates with stakeholders to strengthen the organization’s cybersecurity posture. Key Responsibilities Security Audit & Compliance Management Develop and maintain comprehensive IT security audit and compliance programs Plan, coordinate, and execute information security audit activities Define audit scope, objectives, methodologies, and work plans Develop and implement audit test plans for systems, applications, infrastructure, and cloud environments Conduct security compliance audits for critical systems, networks, and applications Maintain audit schedules, documentation, evidence collection, and reporting processes Ensure timely closure of audit findings, non-compliance issues, and remediation activities Cybersecurity Governance & Risk Management Ensure compliance with organizational policies, regulatory requirements, contractual obligations, and security standards Monitor cybersecurity maturity and compliance posture across operational and technical environments Build and maintain controls matrices aligned with multiple security and compliance frameworks Identify security risks, vulnerabilities, and compliance gaps, and recommend corrective actions Conduct vulnerability and compliance assessments and coordinate remediation activities Support governance initiatives related to security standards, policies, and operating procedures Security Operations & Technical Oversight Monitor compliance and security controls related to cloud security environments, Identity and Access Management (IAM), Privileged Access Management (PAM), Data Loss Prevention (DLP), and enterprise productivity and collaboration platforms. Coordinate with IT operations and business teams to resolve identified vulnerabilities and compliance issues Support the development of technical hardening standards and security baseline documents Ensure compliance of critical infrastructure, systems, applications, and cloud services Reporting & Documentation Prepare audit reports, compliance reports, and status updates for management and stakeholders Communicate audit findings, recommendations, and remediation plans to leadership teams Maintain clear, accurate, and complete audit documentation and evidence records Track progress of remediation efforts and monitor implementation of previous audit recommendations Stakeholder Coordination & Support Liaise with internal and external audit teams to support audit activities and evidence collection Collaborate with business units, HR, finance, operations, and project teams during audit and compliance reviews Support key business initiatives by identifying cybersecurity and compliance-related risks Assist in developing and delivering security awareness and compliance initiatives Perform related duties and special projects as assigned Qualifications & Experience Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Security, Risk Management, or a related discipline.5–8 years of experience in Information Security Governance, Risk Management, Compliance, Internal Controls, Audit, or Cybersecurity. Hands-on experience in implementing, managing, or maintaining Information Security Management Systems (ISMS) based on ISO/IEC 27001. Experience in Qatar National Information Assurance (NIA) framework implementation, compliance monitoring, control assessment, and audit readiness activities Experience in PCI-DSS compliance and certification implementation, including control assessment, gap analysis, remediation tracking, and audit support. Knowledge of Data Privacy and Protection requirements, privacy risk assessments, personal data handling controls, and regulatory compliance. Proven experience conducting information security risk assessments, risk treatment planning, and maintaining risk registers. Experience supporting or coordinating ICOFR (Internal Controls over Financial Reporting) reviews, audits, control testing, and remediation activities. Experience coordinating internal audits, external audits, certification audits, and regulatory assessments. Knowledgeable in reviewing, validating, and assessing audit evidence generated from various technology platforms, security tools, infrastructure systems, cloud services, applications, and business systems to determine control effectiveness and compliance. Experience with governance, risk, and compliance (GRC) platforms, risk management tools, and compliance monitoring solutions is an advantage. Strong analytical, documentation, report writing, communication, presentation, and stakeholder management skills. Ability to prepare executive dashboards, compliance reports, risk reports, and management presentations. Technical Knowledge Strong understanding of information security frameworks and standards, cybersecurity governance and risk management, vulnerability management and security assessments, cloud security technologies and controls, and identity and access management concepts. Knowledge of industry frameworks and standards, including ISO 27001 / ISO 27002, NIST, and CIS Benchmarks. Mandatory hands-on knowledge of cloud security environments, IAM and PAM technologies, DLP solutions, and enterprise productivity and collaboration platforms. Preferred Certifications Certified Information Systems Auditor (CISA) Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Certified in Governance of Enterprise IT (CGEIT) Cloud security certifications (e.g., cloud security administration or governance certifications) ISO 27001 Lead Auditor or equivalent certifications Skills Strong analytical and problem-solving abilities Excellent audit, reporting, and documentation skills Strong stakeholder management and communication skills Ability to work effectively with cross-functional and multicultural teams Experience developing security policies, standards, and governance frameworks Strong understanding of security compliance and operational best practices

Full Time LinkedIn

Head of Security

On-site - Qatar - Doha Wednesday

Human Resources

We are looking for an experienced and proactive Head of Security to lead and oversee security operations across our properties. The successful candidate will be responsible for maintaining a safe and secure environment for employees, guests, clients, contractors, visitors, company assets, and properties. The role requires strong leadership, operational planning, risk management, incident handling, and the ability to manage both internal and outsourced security teams. Responsibilities<ul><li>Lead and oversee security operations across multiple properties and locations, including manpower deployment, shift planning, operational discipline, and performance monitoring.</li><li>Develop, implement, and maintain security policies, procedures, operational standards, and emergency response plans in line with company requirements and applicable Qatar regulations.</li><li>Manage and monitor outsourced security service providers, ensuring compliance with contractual requirements, service standards, manpower deployment, and performance expectations.</li><li>Conduct regular security, safety, hazard, and risk assessments, identify vulnerabilities, and implement corrective actions and continuous security improvements.</li><li>Monitor and lead the response to security incidents, accidents, losses, breaches, and emergencies, including investigations, reporting, crisis management, evacuation procedures, and coordination with relevant authorities.</li><li>Oversee CCTV, access control, alarm systems, electronic key systems, visitor management, patrol procedures, and other security equipment, ensuring regular inspection, testing, and maintenance.</li><li>Lead loss prevention, security training, emergency drills, special security arrangements, and stakeholder coordination, while preparing security reports, risk assessments, and management updates.</li></ul> Qualifications<ul><li>Minimum 7 years of relevant experience in security, safety, loss prevention, or a related field, including previous experience in a senior security management or supervisory role.</li><li>Proven experience managing security operations across multiple properties or locations, including outsourced security companies and large security teams.</li><li>Strong knowledge of security operations, risk assessment, loss prevention, incident investigation, emergency response, and crisis management.</li><li>Knowledge of CCTV, access control, alarm systems, and other electronic security systems, with an understanding of Qatar’s applicable security, safety, labour, and regulatory requirements.</li><li>Minimum High School Diploma or equivalent. Relevant certifications in Security, Safety, Occupational Health & Safety, First Aid, or Emergency Management will be an advantage.</li><li>Strong leadership, communication, decision-making, problem-solving, planning, organization, and people-management skills, with the ability to work under pressure and manage multiple priorities.</li><li>Strong report-writing and computer skills. Arabic and English language proficiency is preferred.</li></ul>

نحن نبحث عن رئيس قسم الأمن يتمتع بالخبرة والمبادرة لقيادة والإشراف على العمليات الأمنية عبر جميع منشآتنا. سيكون المرشح الناجح مسؤولاً عن الحفاظ على بيئة آمنة ومأمونة للموظفين والضيوف والعملاء والمقاولين والزوار وأصول الشركة وممتلكاتها. تتطلب هذه الوظيفة قيادة قوية، وتخطيطاً تشغيلياً، وإدارة للمخاطر، والتعامل مع الحوادث، والقدرة على إدارة فرق الأمن الداخلية والخارجية. المسؤوليات<ul><li>قيادة والإشراف على العمليات الأمنية عبر عدة عقارات ومواقع، بما في ذلك توزيع القوى العاملة، وتخطيط المناوبات، والانضباط التشغيلي، ومراقبة الأداء.</li><li>تطوير وتنفيذ وصيانة السياسات والإجراءات الأمنية، والمعايير التشغيلية، وخطط الاستجابة للطوارئ بما يتماشى مع متطلبات الشركة واللوائح المعمول بها في قطر.</li><li>إدارة ومراقبة مزودي الخدمات الأمنية الخارجية، وضمان الالتزام بالمتطلبات التعاقدية، ومعايير الخدمة، وتوزيع العمالة، وتوقعات الأداء.</li><li>إجراء تقييمات دورية للأمن والسلامة والمخاطر، وتحديد نقاط الضعف، وتنفيذ الإجراءات التصحيحية والتحسينات الأمنية المستمرة.</li><li>مراقبة وقيادة الاستجابة للحوادث الأمنية والخسائر والانتهاكات وحالات الطوارئ، بما في ذلك التحقيقات وإعداد التقارير وإدارة الأزمات وإجراءات الإخلاء والتنسيق مع الجهات المعنية.</li><li>الإشراف على كاميرات المراقبة (CCTV) وأنظمة التحكم بالدخول وأنظمة الإنذار وأنظمة المفاتيح الإلكترونية وإدارة الزوار وإجراءات دوريات الحراسة وغيرها من المعدات الأمنية، وضمان الفحص والتجربة والصيانة الدورية.</li><li>قيادة عمليات منع الخسائر والتدريب الأمني وتدريبات الطوارئ والترتيبات الأمنية الخاصة والتنسيق مع أصحاب المصلحة، مع إعداد التقارير الأمنية وتقييمات المخاطر وتحديثات الإدارة.</li></ul> المؤهلات<ul><li>خبرة لا تقل عن 7 سنوات في مجال الأمن أو السلامة أو منع الخسائر أو مجال ذات صلة، بما في ذلك خبرة سابقة في دور إشرافي أو إدارة أمنية عليا.</li><li>خبرة مثبتة في إدارة العمليات الأمنية عبر عقارات أو مواقع متعددة، بما في ذلك شركات الأمن الخارجية والفرق الأمنية الكبيرة.</li><li>معرفة قوية بالعمليات الأمنية وتقييم المخاطر ومنع الخسائر والتحقيق في الحوادث والاستجابة للطوارئ وإدارة الأزمات.</li><li>دراية بكاميرات المراقبة (CCTV) وأنظمة التحكم بالدخول وأنظمة الإنذار وغيرها من الأنظمة الأمنية الإلكترونية، مع فهم المتطلبات الأمنية والسلامة والعمالية والتنظيمية المطبقة في قطر.</li><li>شهادة الثانوية العامة كحد أدنى أو ما يعادلها. وتعتبر الشهادات ذات الصلة في مجالات الأمن أو السلامة أو الصحة والسلامة المهنية أو الإسعافات الأولية أو إدارة الطوارئ ميزة إضافية.</li><li>مهارات قوية في القيادة والتواصل واتخاذ القرارات وحل المشكلات والتخطيط والتنظيم وإدارة الأفراد، مع القدرة على العمل تحت الضغط وإدارة أولويات متعددة.</li><li>مهارات ممتازة في كتابة التقارير واستخدام الحاسوب. يُفضل إتقان اللغتين العربية والإنجليزية.</li></ul>

Full Time 10 to 15 years Naukri Gulf

Information Security Manager

On-site - Qatar - Doha 1 September 2026

Information Technology

Responsibilities<ul><li>Develop, implement, and maintain the organization's Information Security strategy, policies, procedures, and controls.</li><li>Establish and continuously improve the Information Security Management System (ISMS) in accordance with ISO/IEC 27001.</li><li>Ensure compliance with QCB regulations, NCSA requirements, NIST Cybersecurity Framework, PCI DSS, and other applicable regulatory standards.</li><li>Identify, assess, and manage information security and cybersecurity risks and maintain the Information Security Risk Register.</li><li>Conduct and oversee security risk assessments, vulnerability assessments, penetration testing, and control reviews.</li><li>Lead and manage information security incidents, including investigation, response, reporting, and post-incident corrective actions.</li><li>Oversee security monitoring, logging, and cybersecurity controls, including SIEM, EDR/XDR, IAM/PAM, DLP, firewalls, IDS/IPS, and WAF.</li><li>Develop and maintain information security policies, standards, procedures, and security KPIs.</li><li>Manage third-party and vendor security risks, including security assessments and compliance reviews.</li><li>Coordinate internal and external security audits and regulatory examinations.</li><li>Provide regular information security reports, risk updates, KPIs, and recommendations to senior management and the Board.</li><li>Develop and deliver information security awareness and training programs across the organization.</li><li>Ensure information security requirements are incorporated into Business Continuity and Disaster Recovery plans.</li><li>Stay updated on emerging cybersecurity threats, regulatory requirements, and industry best practices.</li></ul>Desired Candidate ProfileQualifications<ul><li>Bachelor's degree in information security, Cybersecurity, Computer Science, Information Technology, or a related field, master's degree is preferred.</li><li>10 15 years of experience in IT and Information Security, with 5 7 years in a senior or leadership security role.</li><li>Experience working within financial institutions, banking, or other highly regulated environments.</li><li>Strong knowledge and practical experience with QCB regulations, NCSA requirements, ISO/IEC 27001, PCI DSS, and NIST.</li><li>CISSP certification is mandatory or strongly preferred.</li><li>Additional certifications such as CISM, CISA, CRISC, ISO 27001 Lead Implementer/Lead Auditor, or PCI DSS certifications are an advantage.</li><li>Strong understanding of cybersecurity governance, risk management, compliance, and security controls.</li><li>Hands-on knowledge of enterprise security technologies, including SIEM, EDR/XDR, IAM/PAM, DLP, firewalls, IDS/IPS, and WAF.</li><li>Experience managing security incidents, audits, penetration testing, vulnerability assessments, and third-party security risks.</li><li>Strong leadership, communication, stakeholder management, and presentation skills.</li><li>Ability to communicate effectively with senior management and Board-level stakeholders.</li><li>High level of integrity, independence, analytical thinking, and professional judgment.</li></ul>

Full Time Bayt

Assistant Security Manager - Libya

On-site - Qatar - Doha Sunday

Security & Safety

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Job Summary The Assistant Security Manager is responsible to support the Security Manager in overseeing and managing security operations within an organization. This role involves assisting in the development and implementation of security policies, procedures, and protocols to safeguard personnel, assets, and facilities. Additionally, Assistant Security Managers may be responsible for supervising security staff, conducting security assessments and audits, and coordinating security training programs. They play a vital role in ensuring compliance with security regulations, addressing security breaches or incidents, and maintaining a safe and secure environment for employees, customers, and visitors. Job Responsibilities 1 Interact with Guests as well as individuals outside the Hotel including, but not limited to law Enforcement Agencies, Government Officials, other Chief Security Officers and members of the local community Direct and coordinate the activities of all security personnel Ensure that all Hotel areas and property are adequately secured at all times Coordinate outside police agencies in the investigation and handling of crimes, accidents, etc., involving the hotel, its colleagues, or guests Prepares daily incident reports, requisitions, and other inter office memos Ensure that all allegations of the crime and other incidents are investigated and recorded Prepare annual Security goals Liaise with department heads to ensure Hotel staff are adhering to established security procedures Become a member of the appropriate Hotel Security Officers Association Establishes comprehensive key controls Responsible for found property deposited with Security for safekeeping Job Responsibilities 2 Additional Responsibilities 3 Job Knowledge & Skills Comprehensive knowledge of security protocols, procedures, and best practices to effectively enforce safety and security measures. Proficiency in operating surveillance cameras, alarm systems, and access control technology to monitor and identify security threats. Ability to remain calm and take decisive action during emergencies, including medical incidents, fires, or security breaches, to ensure the safety of individuals and property. Strong verbal and written communication skills to interact effectively with visitors, employees, and law enforcement personnel, and to prepare accurate incident reports. Capacity to assess security risks, identify vulnerabilities, and implement appropriate solutions to mitigate threats and enhance overall security measures. Job Experience Minimum 8 year(s) working experience, 5 year(s) relevant working experience, 2 year (s) GCC is a plus Competencies Leadership_321977503 Resilience Quality_321977507 Safety Management L3 Guest Relations L3 Regulatory Compliance L3 Hotel Management Standards and Procedures L3 Security Management L3 Agility AI Fluency Education Diploma in any Related Technical Certificates </div>

<h2 class="h5">الوصف الوظيفي</h2> <div class="t-break" data-jb-field="description"> ملخص الوظيفة يتولى مساعد مدير الأمن مسؤولية دعم مدير الأمن في الإشراف على عمليات الأمن وإدارتها داخل المؤسسة. ويتضمن هذا الدور المساعدة في تطوير وتنفيذ السياسات والإجراءات والبروتوكولات الأمنية لحماية الأفراد والأصول والمرافق. بالإضافة إلى ذلك، قد يكون مساعدو مدير الأمن مسؤولين عن الإشراف على موظفي الأمن، وإجراء التقييمات والتدقيقات الأمنية، وتنسيق برامج التدريب على الأمن. كما يلعبون دوراً حيوياً في ضمان الامتثال للوائح الأمنية، والتعامل مع الخروقات أو الحوادث الأمنية، والحفاظ على بيئة آمنة وسليمة للموظفين والعملاء والزوار. المسؤوليات الوظيفية 1 التفاعل مع الضيوف وكذلك الأفراد من خارج الفندق، بما في ذلك على سبيل المثال لا الحصر أجهزة إنفاذ القانون، والمسؤولين الحكوميين، ورؤساء أجهزة الأمن الآخرين، وأفراد المجتمع المحلي توجيه وتنسيق أنشطة جميع أفراد الأمن ضمان تأمين جميع مناطق وممتلكات الفندق بشكل كافٍ في جميع الأوقات التنسيق مع أجهزة الشرطة الخارجية في التحقيق والتعامل مع الجرائم والحوادث وما إلى ذلك، التي تمس الفندق أو الموظفين أو الضيوف إعداد تقارير الحوادث اليومية والطلبات والمذكرات الداخلية الأخرى ضمان التحقيق في جميع ادعاءات الجرائم والحوادث الأخرى وتسجيلها إعداد الأهداف الأمنية السنوية التنسيق مع رؤساء الأقسام لضمان التزام موظفي الفندق بالإجراءات الأمنية المعتمدة الانضمام كعضو في جمعية مسؤولي أمن الفنادق المناسبة وضع نظام شامل للتحكم في المفاتيح المسؤولية عن الممتلكات المعثور عليها والمودعة لدى قسم الأمن للحفظ المسؤوليات الوظيفية 2 مسؤوليات إضافية 3 الخبرة والمهارات الوظيفية معرفة شاملة ببروتوكولات وإجراءات وأفضل ممارسات الأمن لتطبيق تدابير السلامة والأمان بفعالية. إتقان تشغيل كاميرات المراقبة وأنظمة الإنذار وتقنيات التحكم في الدخول لمراقبة التهديدات الأمنية وتحديدها. القدرة على الحفاظ على الهدوء واتخاذ إجراءات حاسمة أثناء حالات الطوارئ، بما في ذلك الحوادث الطبية أو الحرائق أو الخروقات الأمنية، لضمان سلامة الأفراد والممتلكات. مهارات اتصال شفهية والكتابية قوية للتفاعل بفعالية مع الزوار والموظفين وأفراد إنفاذ القانون، ولإعداد تقارير حوادث دقيقة. القدرة على تقييم المخاطر الأمنية، وتحديد نقاط الضعف، وتطبيق الحلول المناسبة للحد من التهديدات وتعزيز التدابير الأمنية العامة. الخبرة العملية خبرة عمل لا تقل عن 8 سنوات، مع 5 سنوات من الخبرة ذات الصلة، ويفضل وجود سنتين من الخبرة في دول مجلس التعاون الخليجي الكفاءات القيادة_321977503 المرونة وتحمل الضغوط الجودة_321977507 إدارة السلامة - المستوى 3 علاقات الضيوف - المستوى 3 الامتثال التنظيمي - المستوى 3 معايير وإجراءات إدارة الفنادق - المستوى 3 إدارة الأمن - المستوى 3 المرونة والسرعة إتقان الذكاء الاصطناعي المؤهل العلمي دبلوم في أي شهادات فنية ذات صلة </div>

Full Time Bayt

Assistant Security Manager

On-site - Qatar - Doha Saturday

Security & Safety

<h2 class="h5">الوصف الوظيفي</h2><div class="t-break" data-jb-field="description">ملخص الوظيفة يتولى مساعد مدير الأمن مسؤولية دعم مدير الأمن في الإشراف على عمليات الأمن وإدارتها داخل المؤسسة. ويتضمن هذا الدور المساعدة في تطوير وتنفيذ السياسات والإجراءات والبروتوكولات الأمنية لحماية الأفراد والأصول والمرافق. بالإضافة إلى ذلك، قد يكون مساعدو مدير الأمن مسؤولين عن الإشراف على موظفي الأمن، وإجراء التقييمات والتدقيقات الأمنية، وتنسيق برامج التدريب على الأمن. كما يلعبون دوراً حيوياً في ضمان الامتثال للوائح الأمنية، والتعامل مع الخروقات أو الحوادث الأمنية، والحفاظ على بيئة آمنة ومأمونة للموظفين والعملاء والزوار. المسؤوليات الوظيفية 1 التفاعل مع الضيوف والأفراد من خارج الفندق، بما في ذلك على سبيل المثال لا الحصر، أجهزة إنفاذ القانون، والمسؤولون الحكوميون، ورؤساء مسؤولي الأمن الآخرون، وأفراد المجتمع المحلي توجيه وتنسيق أنشطة جميع موظفي الأمن ضمان تأمين جميع مناطق وممتلكات الفندق بشكل كافٍ في جميع الأوقات التنسيق مع أجهزة الشرطة الخارجية في التحقيق في الجرائم والحوادث وما إلى ذلك والتعامل معها، والتي تشمل الفندق أو الموظفين أو الضيوف إعداد تقارير الحوادث اليومية والطلبات والمذكرات الداخلية الأخرى التحقق من أنه يتم التحقيق في جميع ادعاءات الجرائم والحوادث الأخرى وتسجيلها إعداد أهداف الأمن السنوية التنسيق مع رؤساء الأقسام لضمان التزام موظفي الفندق بإجراءات الأمن المعتمدة الانضمام كعضو في جمعية مسؤولي أمن الفنادق المناسبة وضع ضوابط شاملة لإدارة المفاتيح المسؤولية عن المفقودات التي يتم إيداعها لدى قسم الأمن للحفظ المسؤوليات الوظيفية 2 مسؤوليات إضافية 3 المعرفة والمهارات الوظيفية معرفة شاملة بالبروتوكولات والإجراءات الأمنية وأفضل الممارسات لتطبيق تدابير السلامة والأمن بفعالية. إتقان تشغيل كاميرات المراقبة، وأجهزة الإنذار، وتكنولوجيا التحكم في الدخول لمراقبة التهديدات الأمنية وتحديدها. القدرة على الحفاظ على الهدوء واتخاذ إجراءات حاسمة أثناء حالات الطوارئ، بما في ذلك الحوادث الطبية، أو الحرائق، أو الخروقات الأمنية، لضمان سلامة الأفراد والممتلكات. مهارات اتصال شفهية وكتابية قوية للتفاعل بفعالية مع الزوار والموظفين وأفراد إنفاذ القانون، وإعداد تقارير حوادث دقيقة. القدرة على تقييم المخاطر الأمنية، وتحديد نقاط الضعف، وتنفيذ الحلول المناسبة للحد من التهديدات وتعزيز التدابير الأمنية العامة. الخبرة العملية خبرة عملية لا تقل عن 8 سنوات، منها 5 سنوات في مجال ذي صلة، وتعتبر الخبرة لمدة سنتين في دول مجلس التعاون الخليجي ميزة إضافية الكفاءات القيادة_321977503 المرونة الجودة_321977507 إدارة السلامة المستوى 3 علاقات الضيوف المستوى 3 الامتثال التنظيمي المستوى 3 معايير وإجراءات إدارة الفنادق المستوى 3 إدارة الأمن المستوى 3 الرشاقة والسرعة إتقان الذكاء الاصطناعي التعليم دبلوم في أي شهادات فنية ذات صلة </div>

Full Time

Senior Platform Engineer

On-site - Qatar - Doha 16 July 2026

Administration

The Information Security Engineer will focus on ensuring the organization’s applications and data is secure and built according to best security standards. This role will be the subject matter expert on building secure code, application security, vulnerability testing, and providing security validation to the organization’s environments. Key Roles & Responsibilities Perform scheduled penetration testing of the company’s applications Perform white, gray and black box security assessments. Support the organization, JVs and Subsidiaries in implementing Secure Software development lifecycle. Perform Mobile Services security Assessments. Support the organizations’ environment monitoring by using available tools or help build internal tools to enable advanced threat detection and response. Conduct Security Vulnerability Assessments and impact assessment on company’s electronic assets. Perform Security Assessments on ERP and other on-premise solutions. Requirements Skills, Knowledge And Behaviors Ability to lead direct and indirect resources Ability to communicate technical challenges to non-technical audiences Ability to quantify risk and impact vectors Certified Ethical Hacker OCSP level of technical expertise Strong Scripting capability Strong ISO 27000 understanding Strong Application security background Strong Infrastructure security Background Strong experience in open source security tools Qualifications & Experience Security Certification focusing on offensive or defensive practices Bachelor’s degree in Information Security or Computer Engineering10 + years in cybersecurity field System, network and/or application background Preferred Experience Product development experience

Security inspector Jobs in Qatar

CSEA Contractor

CSEA Contractor

Technology Risk Associate

Contractor

Aircraft Mechanic A&P UC-35 Citation Qatar-Al Udeid

Security Architect

Cybersecurity Manager

Technology Risk Vice President

Technology Risk Associate

Security Compliance Manager

Security Architect

Cloud Security Engineer

Senior Consultant - Cybersecurity

AI Security Consultant

GRC Specialist

Head of Security

Information Security Manager

Assistant Security Manager - Libya

Assistant Security Manager

Senior Platform Engineer

Site Owners

Employers

Job Seekers

Security inspector Jobs in Qatar

Receive email alerts for Security inspector Jobs in Qatar jobs