{bc}
indeed

Senior IT Risk Analyst

The Emirates Group
Dubai, UAE
Onsite
Discovered 3 weeks ago
IT risk managementCybersecurity governance, risk and compliance (GRC)Risk assessmentsRisk register managementRisk reportingKey Risk Indicators (KRIs)

Full Job Posting

Role purpose

Join Emirates Group IT's CyberSecurity team, which protects digital assets through threat monitoring, incident response, vulnerability management, and security-policy compliance.

Maintain the IT Risk Management framework and assess cybersecurity, third-party, IT operations, project, and programme risks.

Maintain cybersecurity governance, review policies and standards, and conduct awareness campaigns.

Responsibilities

  • Establish and maintain a comprehensive IT risk framework for identifying, analyzing, mitigating, monitoring, and communicating risks.
  • Collect IT risks from assessments, incidents, and other channels; record them in the IT Risk Register; and monitor them continuously.
  • Assess third-party, cybersecurity, project and programme, and IT operations risks regularly.
  • Prepare risk assessment reports and present results to management; produce regular reports for IT departments and top-risk reports for senior management.
  • Develop Key Risk Indicators and dashboards for continuous monitoring.
  • Conduct maturity, benchmarking, and gap assessments against industry best practices.
  • Assess, improve, and develop cybersecurity controls, policies, processes, and standards.
  • Maintain a cybersecurity scorecard by business area, define metrics, automate data collection and scorecard production, and present results.
  • Track IT regulatory requirements and emerging risks and standards, assess their potential organizational impact, and report to senior management.
  • Support awareness campaigns through roadshows, articles, and on-site training; conduct IT risk awareness training and workshops.
  • Assess, review, and action security-policy exception requests; maintain a record of granted exceptions and communicate them to relevant teams.

Qualifications

  • Degree in Computer Science or a cybersecurity-related field.
  • At least 5 years of IT risk management, cybersecurity, and governance experience in a large, complex enterprise, including risk frameworks, assessments, and risk registers.
  • Strong cybersecurity GRC experience, including cyber maturity assessment, control development, and continuous improvement.
  • Ability to create and present risk reports, KRIs, dashboards, and executive-level insights to senior stakeholders.
  • Experience managing third-party, operational, project, and regulatory risks, with knowledge of standards, compliance, and risk monitoring.

Team and employer

Emirates Group IT describes itself as focused on technology innovation in aviation.

The CyberSecurity team works across people, process, and technology to protect digital assets and improve security.

Benefits

  • The employer mentions a tax-free salary and travel benefits, including discounts on flights and hotel stays.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at The Emirates Group