Chief Information Security Officer

Role Objective

The Chief Information Security Officer will be responsible for developing, implementing and maintaining the Bank's information security policy(s) and program to oversee effective and efficient management of Information Security Governance, coordinated locally and internationally. The incumbent is also responsible for the design, implementation and management of the information security management system program (ISMS), as part of the Bank's Information Security Governance.

Detailed Roles and Responsibilities

STRATEGIC
• Contribute towards the formulation of strategy, annual business plans, policies and procedures of the section to support department and organizational business strategy.
• Ensure that the Information Security processes within Doha Bank are operating effectively and efficiently towards achieving high operating standards.
• Coordinate with the Bank Information Technology team and vendors for the various IT systems in use across the Bank to ensure the consistent implementation of information security standards across Bank systems.
• Develop a security architecture that is In line with the overall Business strategy of Doha Bank.
• Oversee the development and maintenance of a department level recovery strategy that addresses business recovery and emergency response management.

OPERATIONAL
• Perform the Risk assessment which would include identification, assessment, monitoring and reporting of key information security risks and the mitigating controls.
• Ensure the development and implementation of the Bank's information security policies and procedures and ensure their timely update in light of changing circumstances/ best practices/ regulatory directives.
• Assist the Department Head - Operational Risk and Information Security in coordinating and driving compliance in all information security streams.
• Present the information security program and related framework to the Bank's management, conduct periodic information security forum in relevant Bank committees, and frequently report on the effectiveness of the control and security environment.
• Manage Information Security reviews and submit assessment reports on adequacy of control in accordance with policies, standards, procedures to safeguard Bank's assets.
• Oversee incident response planning as well as the investigation of security breaches, and assist with disciplinary and legal matters associated with such breaches, as necessary.
• Co-ordinate with all departments for continuous assessment, mitigation and control of information security related risks.

Education, Experience & Skills required
• University graduate with a degree in Computer Science, Computer Engineering or any other related discipline.
• Master’s degree in Management any other related discipline will be an added advantage.
• About 10 - 13 years of related experience in a similar position.
• Experience in Information security in banking industry.
• Knowledge of QCB/Regulatory/Governance framework/guidelines
• Professional certification/ qualification such as CISSP, CISM, CISA, CRiSe, CCI SO, ISO 27001, ITIL, CoblT would be desirable