Cybersecurity Engineer

1. Develop and maintain the Company's information and cybersecurity framework, strategy, policies and procedures.Identify, assess and monitor information and cybersecurity risks, vulnerabilities and control gaps.
2. Maintain the cybersecurity risk register and follow up on remediation plans. Collaborate with IT to ensure that appropriate technical and security controls are implemented.
3. Oversee cybersecurity monitoring, incident response, investigation, recovery and escalation. Review security requirements for new systems, technology changes, cloud services and digital initiatives. Assess cybersecurity risks relating to vendors, outsourced services and other third parties.
4. Oversee information classification, data protection and the secure handling of sensitive company and customer information.
5. Develop cybersecurity awareness and training programs for employees. Report cybersecurity risks, incidents, control effectiveness and program status directly to the CEO and relevant committees.
6. Ensure alignment with applicable Qatar Central Bank requirements and other relevant regulatory obligations.

Desired Candidate Profile

• Develop and maintain the Company's information and cybersecurity framework, strategy, policies and procedures.
• Identify, assess and monitor information and cybersecurity risks, vulnerabilities and control gaps.
• Maintain the cybersecurity risk register and follow up on remediation plans.
• Collaborate with IT to ensure that appropriate technical and security controls are implemented.
• Oversee cybersecurity monitoring, incident response, investigation, recovery and escalation.
• Review security requirements for new systems, technology changes, cloud services and digital initiatives.
• Assess cybersecurity risks relating to vendors, outsourced services and other third parties.
• Oversee information classification, data protection and the secure handling of sensitive company and customer information.
• Develop cybersecurity awareness and training programs for employees.
• Report cybersecurity risks, incidents, control effectiveness and program status directly to the CEO and relevant committees.
• Ensure alignment with applicable Qatar Bank requirements and other relevant regulatory obligations.