Cybersecurity & Infrastructure Analyst

Overview

Lesha Bank seeks a highly skilled and motivated Cybersecurity & Infrastructure Analyst to join their growing team in Doha, Qatar. This role offers a dynamic environment where each day brings unique challenges and opportunities to contribute to the bank's success. The Analyst will work under the guidance of the Cybersecurity & Infrastructure Lead, managing and enhancing the bank's IT infrastructure, cloud systems, and cybersecurity measures.

Responsibilities

• Maintain and administer the bank's IT infrastructure spanning on-premises, hosted, and cloud environments, covering networks, servers, storage, virtualization, and end-user devices.
• Oversee routine operations of core infrastructure, including server virtualization, directory and identity services, messaging systems, databases, and enterprise backup solutions.
• Apply ITIL-aligned service management procedures such as incident, problem, and change management to infrastructure operations.
• Manage the help desk/service management platform, ensuring efficient ticket logging, progression, and resolution.
• Plan and execute disaster recovery strategies and test recovery procedures to meet defined objectives.
• Handle data replication technologies supporting production and disaster recovery setups.
• Supervise daily cybersecurity practices including threat detection, incident handling, vulnerability assessments, and risk mitigation.
• Coordinate with the Security Operations Center (SOC) to monitor alerts, respond to incidents, and escalate issues appropriately.
• Administer essential security tools including email security and endpoint protection systems.
• Implement data loss prevention and information classification in accordance with organizational security policies.
• Configure conditional access and endpoint security for mobile and BYOD devices.
• Ensure cyber controls comply with risk, compliance, and internal audit requirements.
• Execute infrastructure and security changes according to established procedures and escalate when necessary.
• Provide senior-level support for infrastructure and cybersecurity projects to maintain operational continuity.
• Manage vendor relationships related to infrastructure and security services.
• Maintain accurate records of IT hardware, software inventory, and assets.
• Collaborate with application teams, business stakeholders, and the Information Security department to address infrastructure and security needs.
• Identify and implement improvements to optimize infrastructure performance and utilization.
• Contribute to the enhancement of governance and process documentation ensuring compliance with organizational policies.

Key Performance Indicators

• Maintain uptime targets for core infrastructure and messaging services.
• Complete disaster recovery testing and replication duties promptly.
• Ensure timely threat monitoring, alerting, and vulnerability remediation.
• Achieve high quality and accuracy in infrastructure and security change execution.
• Resolve help desk tickets in a timely and effective manner with proper escalation.

Required Experience and Knowledge

• Over 12 years experience in systems, network, and infrastructure administration in mission-critical, high-availability environments.
• Senior-level experience in a banking, investment, or regulated financial services organization.
• Extensive hands-on expertise with Microsoft enterprise infrastructure including directory services, virtualization, messaging, database systems, and backup/storage technologies.
• Advanced practical knowledge in cybersecurity fundamentals such as threat monitoring, incident response, and vulnerability management.
• Experience managing cloud platforms and hybrid infrastructure environments.
• Proven ability to work autonomously with sound judgment on escalation.
• Bachelor’s degree in Computer Science or a related field.
• Relevant industry certifications in security and/or cloud infrastructure (e.g., Security+, CySA+, Microsoft/Azure certifications), with advanced certifications like CISSP or CISM preferred.