Head of Information Security - Qatari National

The Head of Information Security is the executive accountable for the client organization’s information security function. The role is responsible for protecting the organization’s information assets by defining the security strategy and ensuring effective management of the risks and threats that may impact the organization. The Head of Information Security provides leadership in establishing a secure and resilient operating environment, promotes a strong security culture, and ensures compliance with applicable regulatory and governance requirements. As a senior executive, the Head of Information Security advises executive management on security-related matters and ensures that security objectives remain aligned with business priorities and organizational goals.

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field from a recognized university. A relevant Master’s degree is an advantage.

• Minimum 10+ years of relevant experience in information security, cyber risk management, or related leadership roles.
• Minimum 3–5 years of experience managing similar work – leading an information security / cybersecurity function or advising at executive level.
• Experience defining an information security strategy aligned with business objectives, and managing security risks and threats end-to-end.
• Demonstrated experience with Qatar’s regulatory frameworks (NCSA, NIA, CIIP, PDPPL).
• Proven ability to engage and influence executive management, boards and key stakeholders.
• Experience leading multidisciplinary teams and managing complex, high-pressure situations and incidents.

• Information security risk management and security strategy definition
• Strong understanding of security, risk, governance and regulatory frameworks
• Ability to translate security requirements into business priorities and strategic initiatives
• Ability to promote and foster a security-aware culture across the organisation
• Security incident and crisis leadership

Technical

• Security strategy & governance
• Risk & threat management
• Regulatory & compliance (NCSA, NIA, CIIP, PDPPL)
• Security architecture & resilience
• Incident & crisis management
• Third-party / vendor security governance