الملخص
تبحث Malomatia عن مستشار أمن سيبراني للعمل في الدوحة، قطر، لدعم مبادرات إدارة المخاطر الأمنية والهندسة الأمنية وحماية البيانات والمرونة. تشمل المهام إجراء تقييمات المخاطر، ومراجعة التصاميم الأمنية، ودعم حماية البيانات والتعافي من الكوارث والاستجابة للحوادث وأنشطة الحوكمة والمخاطر والامتثال. كما يساند المستشار أعمال التدقيق وتقييم المخاطر السيبرانية لدى المورّدين والشركاء. يُشترط مؤهل جامعي في أمن المعلومات أو تقنية المعلومات أو مجال ذي صلة، أو خبرة معادلة، وخبرة من سنتين إلى 3 سنوات في الاستشارات أو التدقيق السيبراني، وإجادة الإنجليزية، وشهادتا ISO/IEC 27001 وISO/IEC 22301.
نص الإعلان
كما نُشر على malomatia.com. نقلناه من موقع صاحب العمل كما كتبه.
We are seeking a Cybersecurity Consultant with analytical, technical, and communication skills to support corporate cybersecurity initiatives across multiple domains, including risk, architecture, data security, and resilience. The role is designed for a well-rounded professional who can operate in dynamic environments and bridge the gap between technical teams, business stakeholders, and security governance functions.
Responsibilities
- Cybersecurity Risk & Advisory: Perform and support risk assessments across IT systems, cloud environments, applications, and third-party services. Contribute to maintaining the risk register and support the definition of mitigation strategies and security improvements
- Security Architecture Support: Assist in the design and review of secure architectures across on-premise and cloud environments. Provide input on security controls, identity & access management, network segmentation, and secure system design principles.
- Data Security & Privacy: Support the implementation and assessment of data protection measures, including classification, encryption, data lifecycle management, and compliance with privacy and regulatory requirements.
- Disaster Recovery (DR) Planning: Participate in disaster recovery planning and testing activities,
supporting the validation and continuous improvement of recovery capabilities.
- Cyber Incident & Crisis Support: Collaborate with security operations and incident response teams to ensure effective integration of incident scenarios into crisis management and resilience processes.
- Governance, Risk & Compliance (GRC) support: Provide support in aligning cybersecurity practices with relevant frameworks and standards (e.g., ISO 27001, NIST, QSF, NIA). Assist in audits, control assessments, and evidence collection activities.
- Third-Party security risk management: Evaluate and monitor cybersecurity risks related to vendors and partners, supporting due diligence activities and tracking remediation actions.
- Continuous Improvement: Support ongoing enhancement of cybersecurity risk and resilience practices by incorporating lessons learned, regulatory updates, and evolving business needs.
Qualifications
- Bachelor’s in Information Security, IT, or related field (or equivalent experience).
- Experience: 2-3 years in cybersecurity consulting or audit
- Languages: Strong English required
- Certifications:
- ISO/IEC 27001
- ISO/IEC 22301