Cyber Security Risk Specialist (UAE National)

About the role

This role plays a key part in industrial technology environments, working closely with technical teams to provide evidence‑based assessments that support informed security decisions. You will help shape secure technology outcomes by assessing new initiatives, third‑party risks, and emerging threats, ensuring practical mitigation strategies are implemented and tracked through to completion.

Key responsibilities

• Lead hands‑on cyber risk assessments across enterprise, cloud, application, and industrial technology environments.
• Perform threat modelling and attack path analysis to identify vulnerabilities, control gaps, and potential business impacts.
• Assess security risks associated with new projects, technology changes, and business initiatives, influencing solutions from the design stage.
• Partner with architecture, engineering, and delivery teams to embed security risk considerations into decision‑making and execution.
• Evaluate third‑party suppliers, managed services, and software supply chains, ensuring security requirements are clearly defined and validated.
• Drive risk treatment activities, maintain risk register entries, and track remediation plans through to successful closure.
• Provide threat‑informed risk insights by leveraging current intelligence, operational security findings, and industry trends to strengthen cyber resilience.

Required profile

• Bachelor’s degree in Computer Science, Information Security, Cyber Security, or a related technical discipline.
• Minimum of 5 years’ experience in cyber security, with a strong focus on technical risk assessment and analysis.
• Proven expertise across infrastructure, network, cloud, application, or data security environments.
• Strong understanding of threat modelling, attack path analysis, vulnerability assessment, and risk treatment methodologies.
• Experience assessing third‑party, vendor, and supply chain security risks within complex organisations.
• Familiarity with leading cyber security frameworks and standards including ISO 27001, NIST Cybersecurity Framework, and UAE IA Standards.
• Professional certifications such as CISSP, CRISC, or equivalent security qualifications are highly desirable.
• Excellent stakeholder engagement and technical writing skills.

Required skills

• Threat modelling
• Attack path analysis
• Vulnerability assessment
• Risk treatment methodologies
• ISO 27001
• NIST Cybersecurity Framework
• UAE IA Standards
• Cloud security
• Application security
• Industrial technology security
• CISSP certification
• CRISC certification