Senior Cyber Security Assessment Specialist

About Commercial Bank of Qatar

Established in 1975 and headquartered in Doha, Commercial Bank plays a key role in Qatar's economic growth by providing a diverse portfolio of personal, business, government, international, and investment banking services. The bank is committed to empowering its employees by fostering opportunities for career advancement and professional development, promoting a culture of innovation, work-life balance, and enabling employees to reach their highest potential.

Job Overview

The role of Senior Cyber Security Assessment Specialist involves being a subject matter expert in security assessment encompassing architecture review, application security, penetration testing, ethical hacking, red teaming, and vulnerability evaluation. You will lead efforts to evaluate and enhance the bank's security posture considering current and emerging threat landscapes, attacker tactics, and compliance requirements. The ideal candidate is proactive, highly organized, driven, responsible, and excels at influencing within an organizational setting.

Key Responsibilities

• Develop and implement penetration testing methodologies and processes.
• Design and manage ethical hacking and red team programs aligned with evolving cyber threats and attacker methods.
• Select and integrate automated tools to support security assessment activities where applicable.
• Oversee application security procedures, including techniques like SAST, DAST, RASP, and IAST, integrating them into the software development lifecycle.
• Identify and analyze information security risks, vulnerabilities, and threats to existing systems.
• Evaluate current security technologies and recommend vendor solutions to address vulnerabilities.
• Support the configuration, optimization, and deployment of application security controls.
• Conduct security architecture reviews in collaboration with stakeholders and participate in risk management processes to ensure adherence to security policies.
• Design and execute routine internal and external vulnerability scans.
• Encourage continual improvement of policies, systems, and practices by applying international best practices, focusing on process efficiency, cost reductions, and productivity enhancements.
• Recommend procedural enhancements and oversee the implementation of departmental instructions to ensure compliance and quality service delivery.
• Ensure adherence to relevant quality, health, safety, and environmental standards within assigned areas.
• Prepare and submit accurate and timely management information system (MIS) reports according to departmental and bank standards.
• Perform additional duties as assigned.

Qualifications and Experience

• Bachelor’s degree in Cybersecurity or related field.
• 5 to 8 years of relevant experience in security assessment roles.
• Certifications related to security assessment are required.
• Proven skills in web application, infrastructure, and thick client penetration testing.
• Experience conducting code reviews and working collaboratively with developers on vulnerability remediation.
• Excellent communication and interpersonal skills.
• Strong computer proficiency.
• Ability to perform effectively under pressure and quickly adapt to shifting priorities.

Interactions

Internally, this role interacts with all business and IT support units across the bank, and externally liaises with system security vendors.

Why Choose Commercial Bank?

• Awarded Best Digital Bank and Best Mobile Banking App in the Middle East 2024.
• Work in an innovation-focused, digital-first environment equipped with cutting-edge technologies.
• Access global partnerships and gain international exposure.
• Emphasis on employee well-being and a balanced work-life culture.
• Competitive remuneration and benefits that reflect dedication and performance.
• A strong commitment to diversity, equity, and inclusion fostering a supportive culture.

Disclaimer

Applications are appreciated; however, only shortlisted candidates will be contacted. The bank reserves the right to modify or withdraw this vacancy without prior notice.