Lead, Risk and Information Protection (4/2/2026) Doha, Qatar

We are looking for a Lead, Risk and Information Protection for one of our clients with the following details:

Start date: May 2026

End date Oct 2026

Location: Doha, Qatar

Work Scheme: Residential, Single

Qualification and Experience required:

  • Graduate and/or master’s degree qualifications in either Computer Science, Information Technology, or a related discipline.
  • 10+ years’ experience in a similar role, in large enterprise environments (>1000 users), with multiple geographic locations.
  • Oil and Gas experience (or manufacturing industries) is preferred.
  • Professional certifications in Information Security and/or Information technology – CISSP and/or CISM at minimum is required.
  • Proficiency in performing risk, business impact, control, and vulnerability assessments, and in defining treatment strategies.
  • Knowledge of and experience in managing, developing and documenting security programs and plans, including strategic, tactical, and operational plans.
  • Strong analytical skills to analyse security requirements and relate them to appropriate security controls.
  • Strong communication skills, including written, oral and presentation skills. Must be fluent in English.
  • Knowledge and experience in Enterprise IT/OT security technologies, services, and processes:
  • Information Security models and frameworks (NIST, ISO 27001) and best practices
  • Risk Assessment: Operating Systems (Windows, Linux), Network technologies and protocols, Information protection
  • Security technologies, tools & controls, including Antivirus, Antimalware, proxies, web filtering and firewalls, XDR, SIEM, IDS/IPS...
  • Incident Response processes and tools
  • Patch and Vulnerability management processes and tools
  • Risk Assessment, Change Management Processes
  • Information Classification, Information Protection
  • Disaster Recovery, Business Continuity
  • Professional certification in Industrial Cybersecurity e.g., GICSP or similar) is desirable.
  • Knowledge of Industrial Cybersecurity standards is desirable.
  • Exposure to program and project management is desirable.
  • Vendor management skills and ability to define and negotiate effective SLAs and service KPIs with vendors.
  • Extensive technological domain knowledge to understand integration of digital products with IT systems & architecture.
  • Good knowledge of the business to understand business requirements and implications on organization operations.

If you are interested, kindly apply!