MANAGER CYBERSECURITY RESILIENCE - RISK

Job Purpose

In This Role, You Will

• Oversee the group’s cyber security risk posture and proactively drive remediation. Own a cybersecurity risk dashboard and a security business scorecard in line with risk appetite.
• Own third-party cybersecurity oversight for risk, oversee third parties’ compliance with Emirates Group policies, and own an inventory of third parties accessing our IT estate.
• Accountable for driving the group’s cross-functional, risk-based cybersecurity approach, catering to differing risk appetites across our businesses.
• Own strategy and governance for “Enterprise Cyber Security Risk” and its integration into peer functions, such as Enterprise Architecture.
• Oversee, drive, and lead risk mitigation activities in collaboration with other cybersecurity resilience functions, cybersecurity defence, and the respective business stakeholders.
• Lead the global cybersecurity “behaviour change” programme, also known as cybersecurity awareness. Drive and develop strategies, and orchestrate awareness campaigns and data-driven (targeted) training interventions to educate Group company employees and support the first line of defence cyber security objective of educating and changing behaviour.
• Establish an “insider risk” program in close collaboration with HR and internal audit functions. Establish oversight by identifying and mitigating risks posed by individuals within the organisation.
• Drive industry best practice research for cybersecurity risk in alignment with other risk functions in the group, such as group safety and internal audit.

Qualification

• To be considered for the role, you must meet the below requirements:
• Degree or Honours (12+3 or equivalent) in Information Technology or a related field
• Preferred Master’s degree in Cybersecurity, Computer Science, Data Science, Engineering, or a related field
• Relevant professional certifications are a plus, including security frameworks such as ISO 27001, NIST, or CIS Critical Security Controls
• 10+ years of experience in cybersecurity, with a focus on governance and risk management
• 5+ years at a senior management level in IT Risk or Cybersecurity
• Hands-on experience in governance and cybersecurity risk and control frameworks
• Experience with business scorecards and metrics
• Hands-on experience in threat modelling (optional)
• Experience implementing security awareness programs

Knowledge And Skills

• Strong stakeholder management
• Experience in third-party vendor management, ideally in cyber risk
• Strong risk management and thought leadership capability
• Experience managing risk within complex technology environments
• Thought leadership in human risk and behaviour change
• Strong understanding of metrics, including KPIs and OKRs
• Knowledge of security frameworks such as ISO 27001, NIST, CIS Controls, and others

Salary