Cyber Security IT Assurance Senior Analyst

The Cyber Security IT Assurance Senior Analyst assesses technology environments, architectures and security controls to help protect information assets and critical infrastructure. The role reviews the security of systems and projects, identifies control weaknesses and recommends practical measures to reduce cyber risk. Working with technology teams and stakeholders, the analyst provides independent technical assurance throughout system development, acquisition, operation and change.

Key Responsibilities

• Analyse IT environments to identify cyber security gaps, assess exposure and recommend appropriate remediation measures.
• Review solution and infrastructure architectures from a security perspective, checking designs against recognised practices and internal requirements.
• Assess security tools and countermeasures, including firewalls, intrusion prevention, passive monitoring and endpoint protection systems.
• Conduct or coordinate vulnerability assessments, penetration tests, configuration reviews and red-team exercises where appropriate.
• Review security requirements for development and acquisition projects, validate system designs and perform application security testing.
• Apply threat modelling to services and applications, document findings and collaborate with teams to track corrective actions.

Requirements and Qualifications

• Bachelor's degree in computer science, engineering, business or a related field; a diploma supported by relevant experience may be considered.
• At least six years of IT experience, including three or more years of relevant cyber security or assurance work.
• Experience in cyber security assessments and architecture reviews; exposure to energy, utilities, retail or government environments is an advantage.
• Relevant credentials such as CISSP, CISM, OSCP, CEH, CISA or GSEC are expected as applicable to the role.

Skills and Working Approach

The position calls for sound security judgement, structured testing, technical writing and the ability to explain risk clearly to both engineers and business stakeholders. The successful candidate handles sensitive information carefully, follows approved security procedures and reports vulnerabilities or control failures through established channels.

Employment Details

Full-time position in Dubai. The role supports ongoing information-security governance and requires consideration of data classification, secure change management, incident reporting and organisational security awareness.