مطلوب Senior IT Risk Analyst - Emiratisation

Job Purpose At Emirates، we believe in connecting the world، to and through، our global hub in Dubai، and in constantly innovating to ensure our customers ‘Fly Better’

Requirements & Qualifications

• Monitor and track IT regulatory requirements

• Experience managing third-party، operational، project، and regulatory risks، with a strong understanding of industry standards، compliance requirements، and risk monitoring practices

• Experience managing third-party، operational، project، and regulatory risks، with a strong understanding of industry standards، compliance requirements، and risk monitoring practices.

Benefits & Conditions

• Leadership Role: No Salary & benefits Join us in Dubai and enjoy an attractive tax-free salary and travel benefits that are exclusive to our industry، including discounts on flights and hotels stays around the world

• Salary & benefits

• Join us in Dubai and enjoy an attractive tax-free salary and travel benefits that are exclusive to our industry، including discounts on flights and hotels stays around the world

Emirates Group IT thrives on the dynamic nature of technology

Being pioneers in aviation innovation، we're always at the forefront، pushing boundaries

We're on the lookout for exceptional IT professionals to fortify our position as leaders in the industry

Embark on a journey with the world’s largest international airline and become a vital part of our cutting-edge information and technology team as Senior IT Risk Analyst

Join our CyberSecurity team where we ensure a world class CyberSecurity organisation based on the key principles of People، Process and Technology underpinned with executive endorsement of a multi-year strategy to continuously improve and develop

The team protects our digital assets by monitoring for threats، responding to incidents، managing vulnerabilities، and ensuring compliance with security policies and regulations

If you are passionate about CyberSecurity، we invite you to apply to play a crucial role in shaping the future of our technology initiatives at Emirates Group

As Senior IT Risk Analyst، you will maintain the IT Risk Management framework، and perform risk assessments on CyberSecurity، third party، IT operations and project & programme risks

Maintain the CyberSecurity governance framework، review policies and standards، and conduct CyberSecurity awareness campaigns

In the role you will: Ensure a comprehensive IT Risk Management framework is established to identify، analyse، mitigate، monitor and communicate IT risks across Emirates IT

Collect IT risks identified through various channels (e.g. risk assessments، incidents)، log them in the IT Risk Register and perform continuous monitoring activities

Perform regular risk assessments on Third Party، CyberSecurity، Project & Programme and IT operations risks

Perform risk assessment reports and present the results to Management

Produce regular risk reports for all IT departments، and Top risks report for Senior Management

Develop Key Risk Indicators (KRIs) for IT and create dashboards for continuous monitoring of the risks

Conduct regular IT and CyberSecurity maturity assessments، bench-marking assignments and gap assessments against industry best practices to identify areas of improvement

Periodically assess، improve and develop CyberSecurity controls، policies، processes and standards

Design، develop and maintain a CyberSecurity scorecard by business area، to assess the CyberSecurity posture: Identify key metrics covering all CyberSecurit aeras، automate the data collection and scorecard production for all business areas، present the scorecard to the business

Keep abreast of emerging risks and industry standards، and assess the potential impact on the organisation

Produce regular reporting to Senior Management

Support / contribute to the IT security awareness campaign by organising roadshows، publishing articles، or conducting on-site CyberSecurity training

Conduct awareness training and workshops on IT Risk Management

Manage daily security exceptions requests: Assess، review and action requests for exceptions to policies and standards from all levels of the organization، both corporate and IT users

Maintain an up-to-date repository of all the exceptions granted and communicate the exceptions to relevant business/ technical units

Qualification To be considered for this role، you must meet the below

Degree in Computer Science or a CyberSecurity related field. 5+ Years of experience in IT Risk management، CyberSecurity and Governance within a large، complex enterprise environment، including risk framework development، risk assessments، and risk register management

Strong CyberSecurity Governance، Risk and Compliance (GRC) experience، with the ability to assess cyber maturity، develop controls، and drive continuous improvement

Demonstrated ability to create and present risk reports، KRIs، dashboards، and executive-level risk insights to senior stakeholders

Find out what it’s like to live and work in our fast-paced، cosmopolitan home city in the Dubai Lifestyle section of our website

Job Purpose

At Emirates، we believe in connecting the world، to and through، our global hub in Dubai، and in constantly innovating to ensure our customers ‘Fly Better’

Embark on a journey with the world’s largest international airline and become a vital part of our cutting-edge information and technology team as Senior IT Risk Analyst.

If you are passionate about CyberSecurity، we invite you to apply to play a crucial role in shaping the future of our technology initiatives at Emirates Group.

In the role you will

Ensure a comprehensive IT Risk Management framework is established to identify، analyse، mitigate، monitor and communicate IT risks across Emirates IT.

Perform regular risk assessments on Third Party، CyberSecurity، Project & Programme and IT operations risks.

Perform risk assessment reports and present the results to Management.

Produce regular risk reports for all IT departments، and Top risks report for Senior Management.

Develop Key Risk Indicators (KRIs) for IT and create dashboards for continuous monitoring of the risks.

Conduct regular IT and CyberSecurity maturity assessments، bench-marking assignments and gap assessments against industry best practices to identify areas of improvement.

Periodically assess، improve and develop CyberSecurity controls، policies، processes and standards.

Design، develop and maintain a CyberSecurity scorecard by business area، to assess the CyberSecurity posture: Identify key metrics covering all CyberSecurit aeras، automate the data collection and scorecard production for all business areas، present the scorecard to the business.

Produce regular reporting to Senior Management.

Conduct awareness training and workshops on IT Risk Management.

Maintain an up-to-date repository of all the exceptions granted and communicate the exceptions to relevant business/ technical units.

Qualification

To be considered for this role، you must meet the below

Degree in Computer Science or a CyberSecurity related field.

5+ Years of experience in IT Risk management، CyberSecurity and Governance within a large، complex enterprise environment، including risk framework development، risk assessments، and risk register management.

Strong CyberSecurity Governance، Risk and Compliance (GRC) experience، with the ability to assess cyber maturity، develop controls، and drive continuous improvement.

Demonstrated ability to create and present risk reports، KRIs، dashboards، and executive-level risk insights to senior stakeholders.

Leadership Role: No