Head of Security Operations

About Commercial Bank

Job Summary

Operational Leadership

• Oversee day-to-day security operations, including Security Operations Center (SOC), incident response, threat detection, and vulnerability management.
• Ensure timely triage, investigation, and resolution of security incidents.
• Maintain and optimize security monitoring tools, SIEM, and endpoint protection platforms.
• Develop and enforce operational runbooks, escalation procedures, and SLAs for incident handling.

Strategic Responsibilities

• Define and execute the Security Operations strategy aligned with organizational risk appetite and business objectives.
• Drive continuous improvement through automation, threat intelligence integration, and advanced analytics.
• Collaborate with architecture and engineering teams to design secure solutions for new business initiatives.
• Lead maturity assessments and roadmap development for SOC capabilities.

Business Alignment

• Act as a trusted advisor to business units, ensuring security controls support operational efficiency and customer trust.
• Translate technical risks into business impact for executive reporting.
• Collaborating with IT, legal, and business units to align security with organizational objectives.

Key Competencies

• Strategic Leadership
• Ability to define and execute a long-term security operations vision to combat existing and future threats.
• Risk Management
• Expertise in identifying, assessing, and mitigating cyber risks.
• Strong understanding of regulatory and compliance frameworks (ISO 27001, NIST, QCB and NCSA)
• Technical Acumen
• Deep knowledge of security operations cybersecurity technologies
• Familiarity with emerging threats and security innovations.

• Incident Response & Crisis Management

• Capability to lead during security breaches and ransomware attacks.

• Communication & Stakeholder Engagement

• Ability to translate technical risks into business language for executives and regulators.
• Strong presentation and negotiation skills.

• Governance & Compliance

• Experience in implementing security policies, audits, and regulatory reporting.
• Liaison with regulators and external auditors.
• People Leadership
• Build and lead high-performing security teams.
• Drive a culture of security awareness across the organization.

• Analytical & Decision-Making Skills

• Data-driven approach to security investments and risk prioritization.
• Ability to make quick, informed decisions under pressure.

Qualifications & Expereince

• Bachelor’s degree in Information Security, Computer Science, or related field; advanced degree (Master’s or MBA) preferred.
• 15+ years in cybersecurity, with at least 5 years in senior leadership roles driving enterprise-wide security initiatives.
• Certifications: CISSP, CISM, CISA, CRISC, CCSP, or equivalent industry-recognized credentials.
• Extensive experience managing SOC operations and large-scale incident response, including crisis management and executive-level communications.
• Proven track record in developing and implementing enterprise security strategies, aligning technical controls with business risk and regulatory requirements (PCI DSS, ISO27001, NIST, GDPR).
• Expertise in governance, risk, and compliance (GRC) frameworks, including policy development, audit readiness, and regulatory engagement.
• Strong background in cloud security (Azure, AWS, GCP), identity management, and data protection, with hands-on experience in Microsoft security tools (Purview, Entra ID, Defender).
• Leadership in building and mentoring high-performing security teams, fostering collaboration across IT, risk, and business units.
• Experience in vendor and third-party risk management, ensuring secure supply chain practices and resilience.
• Skilled in workflow automation and orchestration (e.g., SOAR) to optimize detection, response, and compliance processes.
• Adept at executive and board-level communication, translating complex technical risks into clear business impacts and strategic recommendations.
• Demonstrated success in driving digital transformation securely, balancing innovation with robust risk management and regulatory oversight.

Why Commercial Bank

• Best Performing Bank in Qatar in The Banker’s prestigious Top 1000 World Banks Rankings 2025.
• Best Digital Bank in the Middle East 2024 by World Finance and Best Mobile Banking App in the Middle East 2024 by Global Finance.
• An Innovation-Driven, Digital-First Environment where employees work with the latest tools and technologies to redefine banking
• Opportunities for Global Partnerships & International Exposure, connecting employees with global networks and perspectives.
• A focus on Employee Well-being & Work-Life Balance, ensuring a healthy and supportive environment for all team members
• Competitive Compensation & Benefits that ensure our employees are rewarded for their dedication and performance
• A strong Commitment to Diversity, Equity & Inclusion, fostering a culture that values every individual’s unique perspective
• At Commercial Bank, we don’t just offer careers, We shape futures by pioneering
• digital transformation
• in Qatar’s banking sector,
• blending digital-first
• approach to redefine banking through
• innovative solutions.

Disclaimer