Cyber Security Risk Specialist

Client of Michael Page; United Arab Emirates; On-site; AED 300,000 - 540,000; Full time

Job summary

Client of Michael Page seeks a seasoned Cyber Risk Lead to drive hands-on assessments across enterprise, cloud, and industrial tech environments. You will perform threat modelling, identify vulnerabilities and business impacts, and guide risk treatment with architecture and delivery teams.

Ideal candidates will have 5+ years in cyber security, deep experience across infra, network, cloud, and data security, and familiarity with ISO 27001, NIST CSF, and UAE IA Standards.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Cyber Security, or related technical discipline.
• Minimum of 5 years' experience in cyber security, with a strong focus on technical risk assessment and analysis.
• Proven expertise across infrastructure, network, cloud, application, or data security environments.
• Strong understanding of threat modelling, attack path analysis, vulnerability assessment, and risk treatment methodologies.
• Experience assessing third-party, vendor, and supply chain security risks within complex organisations.
• Familiarity with leading cyber security frameworks and standards including ISO 27001, NIST Cybersecurity Framework, and UAE IA Standards.
• Professional certifications such as CISSP, CRISC, or equivalent security qualifications are highly desirable, alongside excellent stakeholder engagement and technical writing skills.

Responsibilities

• Lead hands-on cyber risk assessments across enterprise, cloud, application, and industrial technology environments.
• Perform threat modelling and attack path analysis to identify vulnerabilities, control gaps, and potential business impacts.
• Assess security risks associated with new projects, technology changes, and business initiatives influencing solutions from the design stage.
• Partner with architecture, engineering and delivery teams to embed security risk considerations into decision-making and execution.
• Evaluate third-party suppliers, managed services, and software supply chains, ensuring security requirements are defined and validated.
• Drive risk treatment activities, maintain risk register entries and track remediation plans through to closure.
• Provide threat-informed risk insights by leveraging current intelligence, operational security findings and industry trends to strengthen cyber resilience.

Skills

Threat modelling

Attack path analysis

Vulnerability assessment

Risk treatment

ISO 27001

NIST CSF

UAE IA Standards

CISSP/CRISC

Stakeholder engagement

Technical writing

Education

Bachelor's degree in Computer Science, Information Security, Cyber Security, or related technical discipline

Job description

Job Description

Drive cyber risk decisions across enterprise and industrial systemsOwn hands-on assessments influencing security and business outcomesOur client is a leading industrial organisation undergoing significant digital transformation and innovation The business invests heavily in technology cyber security and operational excellence to support critical operations and and long-term growth

Lead hands-on cyber risk assessments across enterprise cloud application and industrial technology environments Perform threat modelling and attack path analysis to identify vulnerabilities control gaps and potential business impacts Assess security risks associated with new projects technology changes and business initiatives influencing solutions from the design stage Partner with architecture engineering and delivery teams to embed security risk considerations into decision-making and execution Evaluate third-party suppliers managed services and software supply chains ensuring security requirements are clearly defined and validated Drive risk treatment activities maintain risk register entries and track remediation plans through to successful closure Provide threat-informed risk insights by leveraging current intelligence operational security findings and industry trends to strengthen cyber resilience

Bachelor's degree in Computer Science, Information Security, Cyber Security, or a related technical discipline.Minimum of 5 years' experience in cyber security, with a strong focus on technical risk assessment and analysis.Proven expertise across infrastructure, network, cloud, application, or data security environments.Strong understanding of threat modelling, attack path analysis, vulnerability assessment, and risk treatment methodologies.Experience assessing third-party, vendor, and supply chain security risks within complex organisations.Familiarity with leading cyber security frameworks and standards including ISO 27001, NIST Cybersecurity Framework, and UAE IA Standards.Professional certifications such as CISSP, CRISC, or equivalent security qualifications are highly desirable, alongside excellent stakeholder engagement and technical writing skills.