Cyber Security IT Assurance Senior Analyst

Emirates National Oil Company Limited (ENOC) L.L.C.; Dubai; On-site; AED 300,000 - 600,000; Full time

Job summary

ENOC in Dubai is seeking a Cyber Security IT Assurance Senior Analyst to perform IT assurance activities, assess security controls, and support risk reduction across the organization. The role requires 6+ years IT experience, 3+ years in cyber security assurance, and relevant certifications such as CISSP, CISM, OSCP, CEH, CISA or GSEC.

The position involves vulnerability scanning, penetration testing, Red Teaming, secure code reviews, and threat modeling.

Qualifications

• Degree requirements in CS/Engineering/Business or equivalent.
• MBA or Master’s in CS/Engineering/InfoSec preferred.
• Professional certifications such as CISSP, CISM, OSCP, CEH, CISA, GSEC.
• 6+ years IT experience; 3+ years in cyber security roles.
• Experience across multiple industries preferred; oil and gas, energy, utilities, etc.
• Experience in cyber security assurance, assessments, and architecture reviews.

Responsibilities

• Conduct IT cyber security analysis of the technology environment to identify gaps and propose improvements.
• Perform IT architecture assessments from a security perspective.
• Evaluate IT tools and countermeasures to remediate vulnerabilities.
• Review IT infrastructure references for security best practices and suggest changes.
• Conduct cyber security reviews for systems development or acquisition projects.
• Validate IT security requirements and designs.
• Perform periodic cyber security assessments including vulnerability scanning, penetration testing, and Red Teaming.
• Review IT cyber security equipment configurations.
• Assess and validate security configurations and access to security infrastructure tools.
• Conduct secure code reviews and dynamic security testing for applications.
• Perform IT cyber threat modeling for services and apps.
• Engage with internal and external stakeholders to align security activities.

Education

Bachelor’s degree in Computer Science, Engineering or Business field or equivalent

MBA or Master’s degree in computer science, engineering, information security is preferable

Diploma with additional relevant experience

Job description

Select how often (in days) to receive an alert:

Cyber Security IT Assurance Senior Analyst

Date: 31 Aug 2026

Location: DUBAI, AE

Company: ENOC

Job Title

Cyber Security IT Assurance Senior Analyst

Job Purpose

Perform and conduct IT assurance activities towards protecting the organization information assets and critical infrastructure. conduct technical IT cyber security assessments in addition to providing technical assurance capabilities that verify effectiveness of security controls and projects.

Principal Accountabilities

Operational

• conduct IT cyber security analysis of the technology environment to identify gaps and recommend solutions for improvement.
• Conduct IT architecture assessments from technical security point of view
• conduct evaluation and assessment of available IT tools and countermeasures to remedy the detected vulnerabilities and recommend best solutions and practices.
• Conduct reviews and Validations of IT infrastructure and other reference architectures for security best practices and recommend changes to enhance security and reduce risks, where applicable
• Preform cyber security review for systems development or acquisition projects related to IT environments
• Validate and verify IT systems security requirements definitions and analysis and established system security designs
• conduct periodic cyber security assessments of existing IT controls and the technology landscape within the Organization (vulnerability scanning, penetration testing and Red Teaming exercises).
• conduct configuration review of IT cyber security equipment.
• Assess and validate security configurations and access to security infrastructure tools, including firewalls, IPSs, Passive monitoring solutions and anti-malware/endpoint protection systems
• conduct secure security code review and dynamic security testing for applications related to IT environment.
• Conduct IT cyber threat modelling of services and applications that tie to the risk and data classification associated with the service or application

Stakeholder Management

• Build strong relationships and working collaboratively with internal/external stakeholders and

Cyber Information Security Responsibilities

• Comply with all applicable information security policies, standards, and procedures.
• Classify and protect information assets in accordance with the Data Classification Standard.
• Participate in mandatory information security awareness and training programs.
• Support information security initiatives and activities within the organization.
• Consider information security requirements when managing changes involving information assets.
• Report security incidents, vulnerabilities, weaknesses, or non-compliance in accordance with established procedures.
• Fulfil role-specific information security responsibilities and contribute to maintaining the effectiveness of the Information Security Management System (ISMS).

Experience

• Degree: Bachelor’s degree in Computer Science, Engineering or Business field or equivalent, Diploma with additional relevant experience.
• MBA or Master’s degree in computer science, engineering, information security is preferable.
• Required professional certifications: Professional certificate such as CISSP, CISM, OSCP, CEH, CISA, GSEC.
• Experience
• 6+ years of Information Technology experience.
• 3+ years of relevant working experience.
• Working experience in multiple industries (e.g. Oil & Gas, Energy, Utilities, Retail, Government…) is preferable.
• Working experience in cyber security assurance.
• Working experience in cyber security assessments.
• Working experience in cyber security architecture review.