Lead, Risk and Information Protection Job at Lobellia (Doha)

Information Security Officer

TUI Group is the world’s number one integrated tourism business. The Security Do...

Location

Portugal , Lisbon; Oporto

Salary:

Not provided

TUI

Expiration Date

Until further notice

Requirements

An experienced authentic leader with a good understanding of technology and managing Information Security risks in the enterprise
Passionate about Information Security, delivering business value and driving continuous improvement
Strong people leadership skills and experience in building a positive enabling security culture based on trust, quality and pragmatic risk management
Great communicator and influencer comfortable working across hierarchical, organisational, cultural and market boundaries
Experience of managing teams, mentoring and developing security talent from different cultural backgrounds
Professionally qualified holding a recognised security accreditation (CISSP/CISM/CISA etc.,) or equivalent experience with demonstrable Continuous Professional Development
Maintain a good understanding of latest security threats and the mitigating strategies
Ability to provide advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards
Experience of the implementation, operation and maintenance of an Information Security Management framework such as ISO27001 or NIST CSF
Good understanding of integrating security into software or product development lifecycle and cloud security

Job Responsibility

Promote and inspire a security first culture at TUI
Direct the development, implementation, delivery and support of an enterprise Information Security strategy aligned to the strategic requirements of the business
Lead the provision of Information Security resources expertise, guidance and systems necessary to execute strategic and operational plans across all of the organisation’s information systems
Ensure that each Domain is motivated and empowered to deliver the prioritised roadmap
Protect the TUI brand and its customers
Detect and respond to incidents, strengthen our defences, reduce the attack surface and secure our behaviours
Drive adoption of and adherence to security policies, standards and controls through the provision of expert advice and guidance
Protect our most critical assets and ensure appropriate assurance and rigorous testing is in place
Ensure security incidents are managed effectively through engagement with the security operations team, and that lessons learned and audit findings are remediated
Ensure effective security operations (e.g. vulnerability scanning, patching)

What we offer

Attractive remuneration
Bonus opportunity
Exclusive travel perks & discounts
Extensive health & wellbeing support
Flexible working
Opportunities to upskill, reskill and grow your career
Access the TUI Tech Learning Hub
Participate in tech communities and collaborate on global projects and teams
Get involved with local charity and sustainability initiatives like the TUI Care Foundation and the Sustainable Tech Community

Fulltime

VP, Information Security Officer (ISO), Markets, Taiwan

The Chief Information Security Office (CISO) is home to deeply talented colleagu...

Location

Taiwan , Taipei

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

10+ years of relevant experience in Information & Cybersecurity space or related domains such as risk management, auditing, consulting & advisory services
One or more of IS/Cybersecurity industry standard certifications (e.g. CISA, CISSP, CISM, SANS GIAC, CEH, CRISC, CCSP,SSCP, CompTIA Security+ etc.) are mandatory
Strong understanding of Information security domains with hands on experience of performing application security risk assessments covering controls such as Identity & Access Management, API Security, Cloud/SaaS Security, Cryptography, Sensitive Data protection, Audit Logging/Monitoring, Secure SDLC controls
Sound knowledge of Network Security controls (including Firewalls, IDS/IPS) and Application Vulnerability Assessments/Source code & component vulnerability scanning related controls
Good understanding of Markets Business and Applications such as such as trading platforms, order management systems, risk management systems, pricing engines etc. is an advantage
Hold relevant professional certificates recognized by local authorities
Sound knowledge of IS/Cybersecurity related local regulatory, and compliance requirements in the financial services industry and Securities & Futures Markets
Understanding of policy compliance and how it relates to risk
Extensive knowledge of information security risk assessment methodologies/industry standards
Demonstrated ability to take ownership and follow up on issues

Job Responsibility

Act as a Trusted Security Advisor to business and technology teams, guiding them on IS/Cyber risks
Appropriately assess risks when business decisions are made, demonstrating consideration for the firm's reputation and safeguarding Citigroup, its clients and assets
Drive compliance with applicable Information & Cybersecurity laws, rules and regulations, adhering to relevant Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency
Serve as the local point of contact of all information security matters, including management, governance, compliance, and third-party risk management
Manage local audit and regulatory engagements impacting CISO
Drive country-specific control implementations or special programs, where deemed necessary based on risk assessments or local regulatory requirements
Work with business & technology management to drive the information security program and govern risk management activities including CSRA (Cybersecurity Risk Appetite) reporting
Work with the internal Applications Development function to facilitate improvements in both architectural and application security posture
Provide strategic risk guidance for business and technology projects, including the evaluation and recommendation of security controls and corrective actions to mitigate/remediate risks
Manage security incidents and events to protect corporate IT assets, including intellectual property, regulated data and the company's reputation

What we offer

Extensive on-the-job training and exposure to senior leaders
Access to telehealth options, health advocates, confidential counseling
Expanded Paid Parental Leave Policy
Access to an array of learning and development resources
Generous paid time off packages
Resources and tools to volunteer in the communities

Fulltime

Information Security Officer

The Information Security Officer is a senior leadership role responsible for ove...

Location

Portugal , Lisbon; Oporto; Madrid; Barcelona

Salary:

Not provided

TUI

Expiration Date

Until further notice

Requirements

Experienced authentic leader with a good understanding of technology and managing Information Security risks in the enterprise
Passionate about Information Security, delivering business value and driving continuous improvement
Strong people leadership skills and experience in building a positive enabling security culture based on trust, quality and pragmatic risk management
Great communicator and influencer comfortable working across hierarchical, organisational, cultural and market boundaries
Experience of managing teams, mentoring and developing security talent from different cultural backgrounds
Professionally qualified holding a recognised security accreditation (CISSP/CISM/CISA etc.,) or equivalent experience with demonstrable Continuous Professional Development
Maintain a good understanding of latest security threats and the mitigating strategies
Ability to provide advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards
Experience of the implementation, operation and maintenance of an Information Security Management framework such as ISO27001 or NIST CSF
Good understanding of integrating security into software or product development lifecycle and cloud security

Job Responsibility

Promote and inspire a security first culture at TUI
Direct the development, implementation, delivery and support of an enterprise Information Security strategy aligned to the strategic requirements of the business
Lead the provision of Information Security resources expertise, guidance and systems necessary to execute strategic and operational plans across all of the organisation’s information systems
Ensure that each Domain is motivated and empowered to deliver the prioritised roadmap
Protect the TUI brand and its customers, detect and respond to incidents, strengthen defences, reduce the attack surface and secure behaviours
Drive adoption of and adherence to security policies, standards and controls through the provision of expert advice and guidance
Protect our most critical assets and ensure appropriate assurance and rigorous testing is in place
Ensure security incidents are managed effectively through engagement with the security operations team, and that lessons learned and audit findings are remediated
Ensure effective security operations (e.g. vulnerability scanning, patching)
Protect the integrity, availability, authenticity, non-repudiation and confidentiality of information and data in storage and in transit

What we offer

Attractive remuneration, bonus opportunity, exclusive travel perks & discounts, extensive health & wellbeing support
Flexible working: hybrid or remote working models
Opportunities to upskill, reskill and grow your career
Access the TUI Tech Learning Hub to level-up and reach your ambitions
Participate in our tech communities and collaborate on global projects and teams
Get involved with incredible local charity and sustainability initiatives like the TUI Care Foundation and the Sustainable Tech Community

Fulltime

Data Protection Adviser

As the Data Protection Adviser, you will support the GDPR Compliance Lead to cha...

Location

United Kingdom

Salary:

Not provided

Perspective Financial Group Ltd

Expiration Date

Until further notice

Requirements

Three or more years of experience in data protection compliance, information governance or related field
A degree, relevant certifications (e.g., CISSP, CISM, ISO 27001) or equivalent work-related attainment or experience
Strong leadership and decision-making skills, with the ability to manage and mitigate organisational risk
Excellent communication skills, capable of translating complex security concepts for technical and non-technical audiences
Experience of implementing DPIAs, LIAs, Data Processing and Sharing Agreements
Proven experience in developing and implementing policy and strategy in data protection and information governance
Expertise in information assurance, risk management, audit, and stakeholder engagement
Experience of using Data Security and Protection applications such as Microsoft Purview
Excellent verbal and written communication skills, with strong attention to detail

Job Responsibility

Support the business for staff members on matters related to information governance and data protection
Support the creation and maintenance of company policies that enable compliance with UK GDPR and information governance best practice
Regular evaluation of the existing data protection information governance framework to identify areas of no or partial compliance, and rectify any issues, and continuous improvement
Develop training and provide advice to staff members on information governance and data protection
Promote a culture of data protection compliance and information governance best practice across all areas of the business
Carry out day to day UK GDPR and information governance activities
Manage and support the response to UK GDPR Data Subject Rights Requests in a timely and compliant manner
Support the timely management of data breach incidents and information governance incidents, including carrying out investigations, route cause analysis, MI and managing external reporting where required
Monitor and develop training for information governance and data protection
Maintain the organisation’s Record of Processing Activities (RoPA), Statement of Applicability (SOA), Retention Schedule and regulatory requirements

What we offer

25 days holiday (rising with length of service) plus Bank Holidays
Birthday Leave
Holiday Purchase Scheme
Life Assurance
Pension
Corporate Eyecare
Extras Discount shopping discounts
Cyclescheme
Employee Referral Scheme
Learning & Development Programme (Perspective Academy)

Fulltime

Chief Information Security Officer

The Chief Information Security Officer (CISO) is responsible for establishing an...

Location

Romania , Bucharest

Salary:

Not provided

Inetum

Expiration Date

Until further notice

Requirements

Minimum of 10 years of experience in a combination of risk management, information security, and IT or operational development functions (at least five years in a senior management leadership role)
Proven experience in a senior information security role
Strong understanding of cybersecurity frameworks and best practices
Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate information security and risk-related concepts to technical and nontechnical audiences at various hierarchical levels, ranging from board members to technical specialists
Ability to lead and motivate the information security team to achieve tactical and strategic goals, even when only 'dotted line' reporting lines exist
Ability to set up and develop a network
Relevant certifications (e.g., CISSP, CISM) are a plus
Proficient in English

Job Responsibility

Establish and maintain the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected
Lead the development and implementation of a comprehensive cybersecurity program, manage IT risk, and ensure compliance with regulatory requirements
Foster a collaborative environment and ensure effective communication across teams
Provide strong leadership and manage multiple missions simultaneously
Involve in strategic planning and make informed decisions to support the organization's goals
Define and promote the entity's cybersecurity governance, including cyber fraud, according to the group framework
Emphasize IT risk management and ensure the security of IT production
Work closely with the other teams to conduct entity-wide cybersecurity projects and provide expertise
Assist and manage cyber crises to minimize impact on the organization
Report on the entity's cybersecurity and IT risks to senior management and stakeholders

What we offer

Full access to foreign language learning platform
Personalized access to tech learning platforms
Tailored workshops and trainings to sustain your growth
Medical subscription
Meal tickets
Monthly budget to allocate on flexible benefit platform
Access to 7 Card services
Wellbeing activities and gatherings

Fulltime

Information Security Manager

Cogoport is on a mission to bridge the $3.4 trillion Trade Knowledge and Executi...

Location

India , Mumbai

Salary:

Not provided

Cogoport

Expiration Date

Until further notice

Requirements

7+ years of experience in cybersecurity, risk management, and information security leadership
Bachelor's/master’s degree in computer science, Information Security, or a related field
Certifications: CISSP, CISM, CEH, or equivalent cybersecurity certifications (preferred)
Expertise in risk assessment, penetration testing, and vulnerability management
Hands-on experience with security tools such as SIEM (Splunk, IBM QRadar), endpoint protection, and cloud security solutions
Strong knowledge of zero-trust security models, identity and access management (IAM), and security operations (SOC)
Ability to effectively communicate security risks and strategies to both technical and non-technical stakeholders

Job Responsibility

Develop and implement a comprehensive cybersecurity strategy aligned with Cogoport’s business objectives
Collaborating with senior leadership as the primary authority for all security-related matters
Oversee security governance and continuous security improvements across all business units
Identify, assess, and mitigate cybersecurity risks across applications, cloud infrastructure, and corporate systems
Conduct periodic security audits, risk assessments, and penetration testing to proactively address vulnerabilities
Ensure compliance with ISO 27001, GDPR, SOC 2, NIST, and other industry security frameworks
Develop, document, and maintain an incident response plan to manage and mitigate security breaches
Oversee the implementation and management of security technologies, including firewalls, IDS/IPS, SIEM, and endpoint protection
Monitor network traffic for anomalies and cyber threats, taking immediate action against security incidents
Lead incident detection, investigation, and response processes while minimizing business impact

Fulltime

Global Data Privacy Counsel

We are looking for a senior attorney with extensive experience in global data pr...

Location

United States , Atlanta

Salary:

Not provided

Arrive

Expiration Date

Until further notice

Requirements

Juris Doctor degree from a reputable, accredited U.S. law school
Active license in good standing with one or more U.S. state bars (Georgia preferred)
10+ years of progressive experience in data privacy and cybersecurity legal matters, with significant in-house experience at a high-growth, technology-driven company
Deep expertise and knowledge of and hands-on experience with U.S. and international data privacy, cybersecurity, and compliance laws and frameworks (including GDPR, CCPA/CPRA, PCI-DSS, ISO certifications, and other relevant global standards) and leading-edge AI regulations and frameworks
Demonstrated success in providing strategic legal counsel that balances risk management with enabling innovation and business growth, particularly in payments and data-driven initiatives
Proven experience leading global privacy and data protection programs, including managing privacy and data protection risk frameworks and governance
Experience managing external counsel, auditors, and regulators
Proven ability to lead, develop, and inspire diverse, global teams, including direct leadership experience with Data Protection Officers and other privacy professionals
Strong business acumen with the ability to translate complex legal concepts into clear, actionable advice that aligns with business objectives and supports deal-making and sales acceleration
Excellent communication and interpersonal skills, with the ability to influence stakeholders at all levels, including senior executives and cross-functional teams globally

Job Responsibility

Serve as a trusted strategic legal advisor to executive leadership, business unit and function heads, and the governance committees on global privacy, data protection, and cybersecurity risks, as well as opportunities aligned with rapid business growth and innovation
Design, lead, and continuously evolve the global privacy and data protection program, ensuring it not only meets regulatory requirements but also supports scalable growth and competitive advantage in a fast-paced, high-growth environment
Partner closely with product, technology, payments, data, software and hardware sales, marketing, and strategy teams to embed privacy-by-design and data governance principles into all data-driven and payment-related initiatives
Advise on privacy, data protection, cross-border data processing, and emerging technologies (AI and machine learning), in connection with parking, public transport and other urban mobility technologies and data services (B2B, B2C), to help the company navigate these complex regulatory environments while accelerating innovation
Balance risk management with enabling agility—help business units achieve their ambitious growth objectives without compromising compliance or customer trust
Lead and manage a global, unified privacy and data protection team, including the EU Data Protection Officer and EU Privacy Program Manager, and serve as the global privacy and data protection leader responsible for harmonizing privacy and data protection practices across all regions
Act as the company’s U.S. and Canada Privacy Officer, overseeing all U.S.-specific and Canada-specific aspects of the global privacy and data protection program
Own enterprise-wide development, implementation, and continuous improvement of privacy and data protection policies, standards, and frameworks aligned with relevant global privacy and data protection-related regulations
Develop and maintain a privacy and data protection risk management framework and a dashboard of key privacy metrics to inform leadership decision making and monitor program effectiveness in a high-growth environment
Lead privacy and data protection audits and program assessments to ensure compliance and identify areas for improvement aligned with rapid company growth

Information Security Officer

Elevate Our Security Posture: Join Us as an Information Security Officer. Are yo...

Location

Poland , Łódź

Salary:

Not provided

Arrive

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field
5+ years of experience in an information security role, with at least 2 years in a leadership position
Relevant certifications (CRISC, CISSP, CISA, CISM) are preferred
Strategic Mindset: Deep understanding of business goals and objectives, with the ability to align cybersecurity risk management with overall business strategy
Risk Management Expertise: Proven ability to identify, assess, and prioritize cybersecurity risks
Technical Proficiency: In-depth knowledge of cybersecurity principles, security controls, incident response, and industry frameworks
Communication & Collaboration: Excellent communication skills, with the ability to translate complex technical concepts for non-technical audiences
Leadership: Proven ability to lead and mentor a team of security professionals
Thrive in a Fast-Paced Environment: Experience contributing to and managing cybersecurity within a high-growth company

Job Responsibility

Risk Management: Proactively identify, assess, and mitigate security risks and vulnerabilities
Security Awareness: Develop and deliver engaging training programs to educate employees on security best practices
Compliance: Ensure adherence to relevant security standards and regulations (ISO 27001, PCI DSS, GDPR)
Policy & Procedure Development: Lead the creation and maintenance of clear and concise security policies and procedures
Third-Party Risk Management: Assess and manage the security posture of third-party vendors and partners
Data Protection: Define requirements and contribute to implementing Data Loss Prevention (DLP) solutions
Security Frameworks: Contribute to the adoption and implementation of industry-leading security frameworks (NIST, CIS)
Business Partnership: Collaborate closely with business units to understand their security needs and align with the overall security strategy
GRC Program: Operate and mature our Governance, Risk, and Compliance (GRC) program
Leadership & Collaboration: Lead and mentor a team of security professionals, fostering a culture of collaboration and continuous improvement

Lead, Risk and Information Protection

Lobellia

Location:
Qatar , Doha

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Requirements:

Nice to have:

Additional Information:

Job Posted:
February 10, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Lead, Risk and Information Protection

Information Security Officer

VP, Information Security Officer (ISO), Markets, Taiwan

Information Security Officer

Data Protection Adviser

Chief Information Security Officer

Information Security Manager

Global Data Privacy Counsel

Information Security Officer

Lead, Risk and Information Protection

Lobellia

Location:Qatar , Doha

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Requirements:

Nice to have:

Additional Information:

Job Posted:February 10, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Lead, Risk and Information Protection

Information Security Officer

VP, Information Security Officer (ISO), Markets, Taiwan

Information Security Officer

Data Protection Adviser

Chief Information Security Officer

Information Security Manager

Global Data Privacy Counsel

Information Security Officer

Location:
Qatar , Doha

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
February 10, 2026