Information Security Lead Engineer - Infrastructure & Network

About the role

The Cybersecurity Lead Engineer covers infrastructure and network security, maintaining information security management within the infrastructure and network and supporting the IT Information Security Lead. The role works with infrastructure, network and service operations teams, vendors and the governance and risk management function to keep the SJC IT environment secure.

Key responsibilities

• Coordinate with vendors and run vulnerability assessments and penetration tests for infrastructure and network
• Work with governance and risk management to maintain security policies, procedures and risk management
• Help develop and manage enterprise information security processes and architecture standards such as ISO 27001, NIA, cyber security law, privacy law and Qatar 2022 requirements
• Evaluate suspected breaches, follow incident management and response plans, and take part in incident response planning and execution
• Assist Risk Management, Internal Audit and IT in assessing applications and technology against security standards, and in reviewing environments during development or acquisition
• Review information security KPIs against objectives and maintain infrastructure and network security policies
• Conduct security assessments, improve SOC monitoring, and work with the Head of Information Security on MOI security shield, NCSOC onboarding and Qatar 2022 implementation
• Report daily, weekly and monthly on infrastructure and network changes, incidents, problems and services

Required profile

• University degree in Information Technology; MSc in Information Security/Cybersecurity from a recognized university is a plus
• Certifications such as CISM, CISA, CRISC, CISSP, CBCP, GIAC, ISO27001LA, CCNA-Security, MCSE-Security, CEH and CHFI are a plus
• Minimum 5-8 years of experience, of which at least 5 years in a similar position

Required skills

• Deep knowledge of information security standards, processes and risk management
• Maintaining ISO 27001:2013 and other compliance requirements (NIA, Qatar 2022, NCSOC, Q-cert, Cyber Crime Law, Privacy Law)
• Managing a Security Operations Center (SOC) and using current security tools
• Defining and validating information security KPIs and benchmarking