Cyber Security Risk Specialist - UAE National

Michael Page; Abu Dhabi; On-site; AED 150,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation package

Job summary

Michael Page is seeking a senior cyber risk professional for the UAE to lead enterprise-scale risk assessments across infrastructure, cloud, and applications. You will perform threat modelling, assess third‑party and supply chain security, and guide risk treatment from design through to remediation.

Collaboration with architecture and delivery teams is essential to embed security into decisions. The role requires 5+ years in cyber security, with strong capabilities in vulnerability assessment,

Qualifications

• Bachelor's degree required in a technical discipline.
• Minimum 5 years' experience in cyber security with focus on technical risk assessment and analysis.
• Expertise across infrastructure, network, cloud, application, or data security environments.
• Strong understanding of threat modelling, attack-path analysis, vulnerability assessment, and risk treatment.
• Experience assessing third-party, vendor, and supply chain security risks in complex organisations.

Responsibilities

• Lead hands-on cyber risk assessments across enterprise, cloud, application, and industrial technology environments.
• Perform threat modelling and attack path analysis to identify vulnerabilities and business impacts.
• Assess security risks for new projects, technology changes, and business initiatives; influence design and decision-making.
• Embed security risk considerations into architecture, engineering, and delivery teams.
• Evaluate third-party suppliers, managed services, and software supply chains; ensure security requirements are defined and validated.
• Drive risk treatment activities, maintain risk registers, and track remediation through to closure.
• Provide threat-informed risk insights using current intelligence and industry trends to strengthen cyber resilience.

Skills

Cyber security

Risk assessment

Threat modelling

Vulnerability assessment

Security governance

Stakeholder engagement

Technical writing

Cloud security

Network security

Education

Bachelor's degree in Computer Science / Information Security

Job description

This role plays a key part in industrial technology environments, working closely with technical teams, you will provide evidence-based assessments that support informed security decisions. You will help shape secure technology outcomes by assessing new initiatives, third‑party risks, and emerging threats, ensuring practical mitigation strategies are implemented and tracked through to completion.

Client Details

Our client is a leading industrial organisation undergoing significant digital transformation and innovation. The business invests heavily in technology, cyber security, and operational excellence to support critical operations and long-term growth.

Description

Lead hands‑on cyber risk assessments across enterprise, cloud, application, and industrial technology environments. Perform threat modelling and attack path analysis to identify vulnerabilities, control gaps, and potential business impacts. Assess security risks associated with new projects, technology changes, and business initiatives, influencing solutions from the design stage. Partner with architecture, engineering, and delivery teams to embed security risk considerations into decision‑making and execution. Evaluate third‑party suppliers, managed services, and software supply chains, ensuring security requirements are clearly defined and validated. Drive risk treatment activities, maintain risk register entries, and track remediation plans through to successful closure. Provide threat‑informed risk insights by leveraging current intelligence, operational security findings, and industry trends to strengthen cyber resilience.

Profile

• Bachelor's degree in Computer Science, Information Security, Cyber Security, or a related technical discipline.
• Minimum of 5 years' experience in cyber security, with a strong focus on technical risk assessment and analysis.
• Proven expertise across infrastructure, network, cloud, application, or data security environments.
• Strong understanding of threat modelling, attack path analysis, vulnerability assessment, and risk treatment methodologies.
• Experience assessing third‑party, vendor, and supply chain security risks within complex organisations.
• Familiarity with leading cyber security frameworks and standards including ISO 27001, NIST Cybersecurity Framework, and UAE IA Standards.
• Professional certifications such as CISSP, CRISC, or equivalent security qualifications are highly desirable, alongside excellent stakeholder engagement and technical writing skills.

Job Offer

UAE National OpportunityOpportunity to influence cyber security strategy and risk decisions within a complex, technology‑driven environment.

• Competitive compensation package.

Skills

cyber security, cyber, technical, sec ops, engineer, technology