Job closed
Ref: RP840-05
Job description / Role
Reports to: Director of Risk Management
Functional Area: Risk Management
The Information Security Officer is responsible for identifying and assessing information security risks, policies, procedures and technical standards. The role is responsible for the design, planning and implementation of internal controls, particularly technical security.
KEY RESPONSIBILITIES
• Identify and assess IT and information security risks
• Develop and implement effective and comprehensive information security policies, procedures and technical standards
• Design, plan and implement internal controls, particularly technical security protocols
• Design, maintain and continuously review IT security frameworks and procedures
• Evaluate the security implications of specialized areas in technology or business strategy
• Review and improve IT risk monitoring and control procedures
• Investigate, report and follow up on security incidents
• Attain and maintain detailed knowledge of security legislation and regulations, security alerts and technology threats
• Develop, implement, test and maintain IT disaster recovery plans and strategies
• Test backup and recovery procedures and recommend improvements where necessary
Requirements
• Bachelor’s Degree, preferably in Information Technology or Computer Science
• CISSP, CISA or CISM certification
• Over 5 years of relevant experience
• In-depth knowledge and experience of information security standards like ISO17799, ITIL, COBIT
• Strong technical skills (Active Directory, proxy, antivirus, network security, encryption, vulnerability assessment/penetration testing, web services security, etc.)
• Strong analytical and reasoning skills
• English is required
Behavioral Competencies
• Adaptability – Intermediate
• Innovation – Intermediate
• Diligence – Proficient
• Collaboration – Intermediate
• Communication – Intermediate
• Customer Service – Proficient
• Commercial Awareness – Intermediate
• Client Relationships – Intermediate
Leadership Competencies
• Inspiring Others – Proficient
• Building and Managing Teams – Proficient
• Strategy & Planning – Proficient
• External Awareness – Proficient
• Entrepreneurship – Proficient
Technical Competencies
• Information technology – Mastery
• Information security principles - Mastery
• IT Security – Mastery
• Project management principles - Proficient
• Analysis and reporting - Proficient
About the Company
The Qatar Stock Exchange is the principal stock market of Qatar. The market was founded in 1997 and is located in the capital city of Doha. The Qatar Stock Exchange is a full member of the World Federation of Exchanges was recently upgraded by the MSCI and the S&P Dow Jones Indices.
The market currently has 43 listed companies, and was formerly known as the Doha Securities Market.
The primary aim of the Qatar Stock Exchange is to support Qatar's economy by providing a venue for capital raising for Qatari companies as part of their corporate strategy and giving investors a platform through which they can trade a variety of products in a transparent and efficient manner. The Qatar Stock Exchange also provides the public with access to market information and ensures correct disclosure of information.