Summary
Malomatia is seeking a Cybersecurity Consultant in Doha, Qatar, to support cybersecurity risk, architecture, data security, and resilience initiatives. The role involves risk assessments, secure architecture reviews, data protection, disaster recovery planning, incident and crisis support, and GRC activities. The consultant will also support audits and assess cybersecurity risks from vendors and partners. Applicants should have a bachelor’s degree in information security, IT, or a related field, or equivalent experience, 2–3 years of cybersecurity consulting or audit experience, strong English, and ISO/IEC 27001 and ISO/IEC 22301 certifications.
The posting
As published on malomatia.com. Pulled from the employer's site and shown as they wrote it.
We are seeking a Cybersecurity Consultant with analytical, technical, and communication skills to support corporate cybersecurity initiatives across multiple domains, including risk, architecture, data security, and resilience. The role is designed for a well-rounded professional who can operate in dynamic environments and bridge the gap between technical teams, business stakeholders, and security governance functions.
Responsibilities
- Cybersecurity Risk & Advisory: Perform and support risk assessments across IT systems, cloud environments, applications, and third-party services. Contribute to maintaining the risk register and support the definition of mitigation strategies and security improvements
- Security Architecture Support: Assist in the design and review of secure architectures across on-premise and cloud environments. Provide input on security controls, identity & access management, network segmentation, and secure system design principles.
- Data Security & Privacy: Support the implementation and assessment of data protection measures, including classification, encryption, data lifecycle management, and compliance with privacy and regulatory requirements.
- Disaster Recovery (DR) Planning: Participate in disaster recovery planning and testing activities,
supporting the validation and continuous improvement of recovery capabilities.
- Cyber Incident & Crisis Support: Collaborate with security operations and incident response teams to ensure effective integration of incident scenarios into crisis management and resilience processes.
- Governance, Risk & Compliance (GRC) support: Provide support in aligning cybersecurity practices with relevant frameworks and standards (e.g., ISO 27001, NIST, QSF, NIA). Assist in audits, control assessments, and evidence collection activities.
- Third-Party security risk management: Evaluate and monitor cybersecurity risks related to vendors and partners, supporting due diligence activities and tracking remediation actions.
- Continuous Improvement: Support ongoing enhancement of cybersecurity risk and resilience practices by incorporating lessons learned, regulatory updates, and evolving business needs.
Qualifications
- Bachelor’s in Information Security, IT, or related field (or equivalent experience).
- Experience: 2-3 years in cybersecurity consulting or audit
- Languages: Strong English required
- Certifications:
- ISO/IEC 27001
- ISO/IEC 22301