Cyber Resilience Manager AVIATION/OT/IOT/ET

Join our CyberSecurity team where we ensure a world class CyberSecurity organisation based on the key principles of People, Process and Technology underpinned with executive endorsement of a multi-year strategy to continuously improve and develop. The team protects our digital assets by monitoring for threats, responding to incidents, managing vulnerabilities, and ensuring compliance with security policies and regulations. If you are passionate about CyberSecurity, we invite you to apply to play a crucial role in shaping the future of our technology initiatives at Emirates Group.

As Cyber Resilience Manager AVIATION/OT/IOT/ET you will drive cyber resilience programmes in the assigned domain of aviation, cyber physical systems (including OT/IoT), and/or emerging technologies to ensure the secure, responsible, and compliant adoption of technology across the Group. Deliver outcomes through a Cyber Resilience Centre of Excellence (CoE) approach by defining, developing, and executing governance, risk, compliance, and assurance frameworks aligned to enterprise risk appetite and regulatory requirements.

In this role you will:

• Lead and deliver cyber resilience work programmes within the assigned domain, ensuring activities are prioritised based on risk, criticality, and business impact. Contribute to CoE planning, backlog management, and delivery against strategic objectives and regulatory commitments.
• Develop, implement, and continuously improve cybersecurity governance, risk, compliance, and assurance frameworks within the assigned domain, ensuring alignment with enterprise risk management and applicable regulatory and industry standards.
• Support the operation of the Cyber Resilience Centre of Excellence by acting as the domain point of contact for business demand. Provide structured guidance, intake, and assurance for initiatives within the assigned domain
• Develop and oversee risk assessment methodologies, threat modelling, vulnerability assessments, penetration testing, and assurance activities for systems and use cases within the assigned domain. Ensure cybersecurity risks are identified, assessed, tracked, treated, and closed through their full lifecycle.
• Embed cybersecurity requirements and controls across the full lifecycle of solutions within the assigned domain from design and development through deployment, operation, and decommissioning. Support cybersecurity incident response, investigation, and forensic activities in collaboration with central Cybersecurity and SOC teams.
• Drive cybersecurity awareness for stakeholders involved in initiatives within the assigned domain to ensure transparency, accountability, and secure adoption. Maintain documentation, metrics, and reporting for cybersecurity risks, controls, and decisions, and serve as the primary point of contact for domain specific cybersecurity inquiries.