Head of Information Security - Qatari National

Job Description

Responsibilities

• Understand business objectives, the operating environment, and critical information assets.
• Define the information security strategy and align it with corporate objectives.
• Establish and maintain the security governance framework.
• Define and oversee security policies and strategic security initiatives.
• Ensure security risks are identified, assessed, and managed appropriately.
• Promote security awareness and a culture of accountability.
• Provide executive oversight during significant security incidents and crisis situations.
• Ensure compliance with regulations, standards, and governance requirements.
• Assess security capabilities and improvement initiatives.
• Define executive metrics for security effectiveness and risk exposure.
• Report security posture, key risks, and strategic priorities to executive leadership.
• Coordinate with business leaders and stakeholders, oversee third-party security risks, manage the security budget, and chair or sponsor the security governance committee.

Qualifications and Experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field from a recognized university.
• A relevant Master's degree is advantageous.
• Minimum 10 years of relevant experience in information security, cyber risk management, or related leadership roles.
• Minimum 3 to 5 years of experience leading an information security or cybersecurity function or advising at executive level.
• Experience defining information security strategy aligned with business objectives and managing security risks and threats end to end.
• Experience with Qatar's regulatory frameworks, including NCSA, NIA, CIIP, and PDPPL.
• Ability to engage and influence executive management, boards, and key stakeholders.
• Experience leading multidisciplinary teams and managing complex, high-pressure situations and incidents.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalent are desirable.

Technical and Behavioral Skills

• Security strategy and governance.
• Risk and threat management.
• Regulatory compliance involving NCSA, NIA, CIIP, and PDPPL.
• Security architecture and resilience.
• Incident and crisis management.
• Third-party and vendor security governance.
• Strategic and critical thinking.
• Executive influence and stakeholder management.
• Leadership and team management.
• Result orientation, excellent communication, integrity, and discretion.