Cyber Security Risk Specialist (UAE National)

About the role

This role plays a key part in industrial technology environments, working closely with technical teams to provide evidence‑based assessments that support informed security decisions. You will shape secure technology outcomes by assessing new initiatives, third‑party risks and emerging threats, ensuring practical mitigation strategies are implemented and tracked through to completion.

Key responsibilities

• Lead hands‑on cyber risk assessments across enterprise, cloud, application and industrial technology environments.
• Perform threat modelling and attack‑path analysis to identify vulnerabilities, control gaps and potential business impacts.
• Assess security risks of new projects, technology changes and business initiatives, influencing solutions from the design stage.
• Partner with architecture, engineering and delivery teams to embed security risk considerations into decision‑making and execution.
• Evaluate third‑party suppliers, managed services and software supply chains, ensuring security requirements are defined and validated.
• Drive risk‑treatment activities, maintain risk‑register entries and track remediation plans through to closure.
• Provide threat‑informed risk insights using current intelligence, operational findings and industry trends to strengthen cyber resilience.

Required profile

• Bachelor’s degree in Computer Science, Information Security, Cyber Security or a related technical discipline.
• Minimum 5 years of experience in cyber security with a focus on technical risk assessment and analysis.
• Proven expertise across infrastructure, network, cloud, application or data security environments.
• Strong understanding of threat modelling, attack‑path analysis, vulnerability assessment and risk‑treatment methodologies.
• Experience assessing third‑party, vendor and supply‑chain security risks within complex organisations.
• Familiarity with ISO 27001, NIST Cybersecurity Framework and UAE IA Standards.
• Professional certifications such as CISSP, CRISC or equivalent are highly desirable.

Required skills

• Threat modelling
• Attack‑path analysis
• Vulnerability assessment
• Risk‑treatment methodologies
• ISO 27001
• NIST Cybersecurity Framework
• UAE IA Standards