Cyber Security IT Assurance Senior Analyst

Emirates National Oil Company Limited (ENOC) L.L.C.; Dubai; On-site; AED 300,000 - 400,000; Full time

Job summary

A leading energy firm in Dubai is seeking a Cyber Security IT Assurance Senior Analyst to conduct IT assurance activities and cyber security assessments. The ideal candidate will have over 6 years of experience in IT, strong relationships with stakeholders, and professional certifications like CISSP and CISM. The role involves validating IT security measures and recommending improvements to protect organizational assets.

Qualifications

• 6+ years of Information Technology experience.
• 3+ years of relevant working experience.
• Working experience in multiple industries is preferable.

Responsibilities

• Conduct IT cyber security analysis to identify gaps.
• Perform cyber security review for IT projects.
• Conduct periodic cyber security assessments.

Skills

CISSP

CISM

OSCP

CEH

CISA

GSEC

Education

Bachelor’s degree in Computer Science, Engineering or Business

MBA or Master’s in Information Security

Job description

Cyber Security IT Assurance Senior Analyst

Date: 15 Oct 2025

Location: DUBAI, AE

Company: ENOC

Job Title

Cyber Security IT Assurance Senior Analyst

Job Purpose

Perform and conduct IT assurance activities towards protecting the organization information assets and critical infrastructure. Conduct technical IT cyber security assessments in addition to providing technical assurance capabilities that verify effectiveness of security controls and projects.

Principal Accountabilities

Operational

• Conduct IT cyber security analysis of the technology environment to identify gaps and recommend solutions for improvement.
• Conduct IT architecture assessments from a technical security point of view.
• Conduct evaluation and assessment of available IT tools and countermeasures to remedy detected vulnerabilities and recommend best solutions and practices.
• Conduct reviews and validations of IT infrastructure and other reference architectures for security best practices and recommend changes to enhance security and reduce risks where applicable.
• Perform cyber security review for systems development or acquisition projects related to IT environments.
• Validate and verify IT system security requirements definitions and analysis and established system security designs.
• Conduct periodic cyber security assessments of existing IT controls and the technology landscape within the Organization (vulnerability scanning, penetration testing and Red Teaming exercises).
• Conduct configuration review of IT cyber security equipment.
• Assess and validate security configurations and access to security infrastructure tools, including firewalls, IPS, passive monitoring solutions and anti-malware/endpoint protection systems.
• Conduct secure code review and dynamic security testing for applications related to the IT environment.
• Conduct IT cyber threat modelling of services and applications that tie to the risk and data classification associated with the service or application.

Stakeholder Management

• Build strong relationships and work collaboratively with internal and external stakeholders.

Experience

• Degree: Bachelor’s degree in Computer Science, Engineering or Business field or equivalent, Diploma with additional relevant experience.
• MBA or Master’s degree in computer science, engineering, information security is preferable.
• Required professional certifications: CISSP, CISM, OSCP, CEH, CISA, GSEC.
• 6+ years of Information Technology experience.
• 3+ years of relevant working experience.
• Working experience in multiple industries (e.g., Oil & Gas, Energy, Utilities, Retail, Government) is preferable.
• Working experience in cyber security assurance.
• Working experience in cyber security assessments.
• Working experience in cyber security architecture review.