Requirements
Requires a degree or equivalent with an information security certification (CISSP, CISA, CISM, GIAC, CEH). Must have 5+ years of experience in cybersecurity assurance, governance, risk, or a related field, with proven experience leading assurance activities in complex environments and managing company-wide security programs. Advanced knowledge of security frameworks (ISO/IEC 27001, NIST CSF, CIS Controls, COBIT) and regulations (GDPR, NCA, SAMA, PCI-DSS) is essential. Proven ability to integrate outputs from various cybersecurity domains, monitor control effectiveness, and champion security methodologies. Strong communication and influencing skills for executive audiences are required.
Description
Job PurposeAt Emirates we believe in connecting the world to and through our global hub in Dubai and in constantly innovating to ensure our customers Fly Better. Emirates Group IT thrives on the dynamic nature of technology Being pioneers in aviation innovation were always at the forefront pushing boundaries Were on the lookout for exceptional IT professionals to fortify our position as leaders in the industry Embark on a journey with the worlds largest international airline and become a vital part of our cutting edge information and technology team as Senior CyberSecurity Assurance AnalystJoin our CyberSecurity team where we ensure a world class CyberSecurity organisation based on the key principles of People, Process and Technology underpinned with executive endorsement of a multi-year strategy to continuously improve and develop. The team protects our digital assets by monitoring for threats, responding to incidents, managing vulnerabilities, and ensuring compliance with security policies and regulations. If you are passionate about CyberSecurity, we invite you to apply to play a crucial role in shaping the future of our technology initiatives at Emirates Group.As a Senior CyberSecurity Assurance Analyst, you will Lead the coordination, integration, and continuous improvement of security assurance processes within the Product portfolio. Oversee the implementation and effectiveness of security controls by collaborating with specialist teams and portfolio stakeholders. Drive the management of risk, compliance, and remediation activities, ensuring alignment with industry best practices and Emirates Group objectives. Foster a culture of secure-by-design and proactive risk management through cross-functional engagement and strategic leadership.In The Role, You WillCoordinate and oversee the execution of security assurance activities within the Product portfolio, ensuring alignment with organizational priorities, compliance requirements, and industry best practices, while facilitating seamless collaboration between specialist teams and portfolio stakeholders.Integrate and synthesize outputs from specialist cybersecurity teams (such as compliance, governance, and secure coding), ensuring that identified risks and control gaps are tracked, prioritized, and managed through their lifecycle, and that remediation plans are effectively implemented.Monitor and review the effectiveness of security controls and assurance processes, escalating significant findings, supporting data-driven decision-making, and ensuring continuous improvement in the security posture of the Product portfolio.Champion the adoption and optimization of formal methodologies, tools, and documentation for security assurance activities, promoting consistency, efficiency, and alignment with industry standards across the portfolio.Engage and collaborate with IT and business stakeholders to promote a culture of security awareness, accountability, and secure-by-design, delivering guidance, facilitating knowledge transfer, and supporting the integration of assurance findings into business and technical processes.QualificationTo be considered for this role, you must meet the below requirements: Degree or Honours (12+3 or equivalent) and an information security related industry recognised certification such as CISSP, CISA, CISM, GIAC certification, CEH etc.5+ years in cybersecurity Assurance, Governance, Risk, or a closely related discipline with a demonstrated track record of leading assurance activities across complex, multi-stakeholder enterprise environments and managing company-wide security programmes.Advanced working knowledge of information security assurance principles, control frameworks, and regulatory compliance requirements, including ISO/IEC 27001, NIST CSF, CIS Controls, COBIT, and relevant industry-specific regulations (e.g., GDPR, NCA, SAMA, PCI-DSS).Proven ability to coordinate, integrate, and govern outputs from multiple specialist cybersecurity domains, including governance, risk, compliance, secure coding, threat intelligence, and architecture into a cohesive assurance view.Control Effectiveness & Assurance Oversight: Strong expertise in designing, monitoring, and continuously evaluating security control effectiveness, with the ability to identify assurance gaps, escalate material risks to senior leadership, and drive timely and accountable remediation.Demonstrated success in championing the adoption and continuous improvement of security methodologies, assurance tooling, automation, and standardised documentation practices to mature the organisation's assurance capability.Executive Communication & Stakeholder Engagement: Exceptional communication and influencing skills, with the ability to translate complex cybersecurity assurance findings into clear, business-relevant insights for C-suite, board, and technical audiences, while facilitating knowledge transfer and promoting secure-by-design principles across the organisation.Advanced analytical and organisational capabilities to manage end-to-end risk remediation tracking, measure assurance process performance through meaningful KPIs and metrics, and lead structured continuous improvement initiatives that strengthen the organisation's security posture over time.Proven ability to work collaboratively across business, technology, and operational teams to embed assurance findings, lessons learned, and security requirements directly into business processes, project lifecycles, and change management activities.Demonstrated leadership in building and sustaining a proactive, risk-aware security culture, including mentoring junior assurance professionals, influencing behavioural change, and driving organisation-wide accountability for cybersecurity outcomes at all levels.Salary & benefitsJoin us in Dubai and enjoy an attractive tax-free salary and travel benefits that are exclusive to our industry, including discounts on flights and hotels stays around the world. Find out what it's like to live and work in our fast-paced, cosmopolitan home city in the Dubai Lifestyle section of our website www.emirates.com/careers