{"id":3586216,"url":"https://alion.io/job/malomatia-consultant-information-security","title":"Consultant - Information Security","company":{"id":1129,"name":"Malomatia","domain":"malomatia.com","url":"https://alion.io/company/malomatia","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":96,"open_postings":10,"ghost_share":0,"stale_share":0.1,"repost_share":0.1,"time_to_fill_p50_days":37,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Doha, Qatar"],"countries":["QA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":71000,"max_usd":164000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-11-01T09:54:01Z","employer_posted_date":"2026-11-01","last_verified_at":"2026-11-08T20:37:06Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Consultant - Information Security role is responsible to maintain information security management within the Infrastructure & Network and continue security controls to maintain adequate cyber security posture within the environment and support manage IT Information Security Lead.\n Working with Infrastructure, Network, and Service Operations teams to ensure the security of SJC IT infrastructure, networks, and service operations.\nCoordinate with vendors and conduct vulnerability assessments and penetration testing for infrastructure and networks.\nCoordinate with the Cybersecurity Engineer - Governance and Risk Management to maintain infrastructure and network security management policies, procedures, and risk management.\nAssist in developing, implementing, and managing the overall enterprise infrastructure processes for information security and associated architecture standards, such as ISO 27001, NIA, Cyber Security Law, Privacy Management Law, and Qatar 2022 Cyber Security Requirements.\nEvaluate suspected security breaches and recommend corrective actions, including incidents involving external vendors.\nFollow the cyber security incident management and incident response plan.\nServe as part of the security incident response planning and execution.\nAssist Risk Management, Internal Audit, and the IT department in developing appropriate criteria to assess the compliance levels of new and existing applications and/or technology infrastructure elements against enterprise security standards.\nAssist in reviewing infrastructure and/or technology environments during the development or acquisition process to (a) ensure compliance with corporate security policies and directions and (b) assist in the overall integration process with SJC IT’s existing technology environment.\nEvaluate information security KPIs based on the Information Security/Privacy Objectives and review those KPIs based on changes to the security objectives.\nMaintain infrastructure and networks to support the organization’s information security/privacy policies and procedures, and ensure their timely updates in light of changing circumstances, best practices, and regulatory directives.\nConduct security assessments to maintain an adequate security posture within the SJC IT environment.\nImprove Security Operations Center monitoring based on the evolving cyber security environment and emerging attacks.\nWork with the Head of Information Security to coordinate with the MOI Security Shield and maintain NCSOC onboarding and continuity of connectivity.\nWork with the Head of Information Security to coordinate with the MPTO team and maintain Qatar 2022 implementations based on the agreed roadmap.\nProvide daily, weekly, and monthly reports to the Information Security Lead related to infrastructure and network environment changes, incidents, problems, service operations, and critical areas.\nMandatory Actions -\nIT Security Team Meeting - Monthly Basis.\nRisk Register Validation - Monthly Basis (until the IT environment reaches a stable state).\nInformation Security KPI Validation - Monthly, Quarterly (Reporting), Bi-annual, and Annual.\nCompliance Management - NIA, Qatar 2022, NCSOC, Q-CERT, ISO 27001:2013, Cyber Crime Law, Privacy Law, and other applicable laws and regulations relevant to SJC IT.\n Competencies\nTechnical Competencies:\nORGANIZATION Values:\nDeep understanding and management experience of Information Security standards, processes and risk management.\nKnowledge of Department Priorities, Products, and the strategy\nInformation security landscape\nMaintain ISO27001:2013 certificate and other compliance requirements\nDeveloping the information security strategy\nInformation security KPI defining and validation\nBenchmarking\nRisk Management\nDesigning and Maintaining Information Security Management Policies and procedure \nKnowledge of government and regulatory requirements\nExperience is Managing Security Operations Center (SOC)\nExperience in current Security tools and solutions\nPersonal information privacy management\nAct as One\nOver deliver on our promises\nShare what matters \nAlways Challenge Assumptions\nBe pioneering\n4. Key Business InteractionsInternalExternalSJC IT Information Security Lead\nIT Department team and heads\nIT Security Team\nInternal Auditors\nVendors \nExternal Auditors\nRegulatory\n\n5. Qualifications & ExperienceRequired Qualifications:University Degree in Information Technology with Msc. in Information Security/ Cyber security from a recognized university is a plus. \nCertifications in Information security such as CISM, CISA, CRISC, CISSP, CBCP, GIAC, ISO27001LA, CCNA-security, MCSE-security\nOffensive security certifications CEH and CHFI is a plus\n Preferred Experience:Minimum 5-8 years of experience of which a minimum of 5 years should be in a similar position / responsibility.","description_format":"text","description_chars":4822,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","IT Consulting & Digital Transformation","Systems Integrators","Call Center Services"],"lifecycle":[{"event":"open","at":"2026-11-01T11:13:58Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":6,"expected_fill_days":37,"reasons":["conf:10","velocity","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/malomatia-consultant-information-security","json_url":"https://alion.io/job/malomatia-consultant-information-security.json","meta":{"generated_at":"2026-11-08T22:31:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":47040,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1129},"rest":"https://alion.io/mcp/rest/get_company?id=1129"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmalomatia-consultant-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmalomatia-consultant-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmalomatia-consultant-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/malomatia-consultant-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmalomatia-consultant-information-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3586216}},{"tool":"search_jobs","arguments":{"company":"malomatia.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3586216},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}