Manager IT Security International (Qatarization)

About the role

QNB Group, the largest bank in the Middle East and Africa, is looking for a Manager IT Security International. The incumbent assists the Senior Vice President of IT Security International in providing oversight, guidance and governance to the Group's subsidiaries on all IT security matters. The role works closely with IT Security teams and stakeholders in subsidiaries and international branches to ensure a consistent approach to Group information security policies, standards and practices, and may carry out risk assessments.

Key responsibilities

• Shareholder and financial: support the implementation of the Group Information Security Framework (policies, procedures and standards); create a methodology and KPI/KRI list to monitor controls and assess security posture; provide inputs to the Information Security Strategy and present it to the GCRO; promote a strong control culture and implement KPIs and best practices.
• Customer (internal and external): build strong relationships with support departments, subsidiaries and international branches; provide timely information to auditors, compliance and financial control; embed the information security framework across the business; contribute to governance committee presentations; maintain SLAs with internal units and respond to customer queries.
• Processes, products and regulation: stay updated on information security best practices; evaluate systems, processes and infrastructure regularly; escalate reporting and issues as requested by IT Security managers; help deliver other projects as mandated.
• Legal, regulatory and risk: comply with Group compliance policies (AML & CTF, sanctions, data protection, fraud control, whistle blowing, conflict of interest); act under the Three Lines of Defence; support RCSA, KRI, incident reporting and remediation; complete mandatory training and attend seminars.
• Confidentiality and professional standards: protect commercially sensitive and customer information, and perform ad hoc duties requested by management.

Required profile

• Bachelor's degree, preferably in Marketing, Banking, Finance, Accounting, Economics, Business Administration or Information Technology.
• Understanding of business processes and controls in related operational areas.
• Superior knowledge of quantitative techniques for assessing, measuring and managing information security.
• Knowledge of relevant regulations and best practices, and of the latest technical developments in information security modelling.
• Proactive attitude toward professional development and keeping up with industry developments.