Cyber Security Specialist

Emirates Flight Catering; Dubai; On-site; AED 240,000 - 480,000; Full time

Job summary

Emirates Flight Catering is seeking a Cybersecurity Specialist to strengthen our security posture across the technology environment. You will lead risk assessments, incident response, and policy enforcement to protect critical assets.

The role requires 5+ years in IT security within a global, hybrid IT environment, with hands-on work in risk, audit and GRC frameworks and strong collaboration with IT teams. Join us to drive secure operations and resilient systems.

Qualifications

• Bachelor’s degree in CS or related field.
• Cybersecurity certifications: CompTIA Security+, CEH, CySA+.
• Minimum 5 years IT security experience in a global org.
• Experience with IT risk, IT audit and GRC.

Responsibilities

• Conduct regular security and vulnerability assessments to identify and evaluate potential risks to information systems.
• Develop and implement incident response plans to minimize damage and recovery time.
• Develop, implement and enforce security policies, procedures and controls to protect assets and ensure regulatory compliance.
• Monitor network traffic for suspicious activity and early threat detection.
• Provide security awareness training to employees on data security best practices.
• Conduct regular code reviews and penetration testing to identify vulnerabilities.
• Use SIEM tools to centralize security data and simplify monitoring/analysis.
• Prepare regular security status and incident reports for governance and compliance review.
• Collaborate with IT teams to secure infrastructure and applications.
• Provide input on security implications for new projects during design/implementation.

Skills

Problem solving

Security frameworks

VAPT

IT security

ITSM/COBIT

Communication

Education

BSc in CS/Math

Job description

Join our team and play a key role in maintaining EKFC's strong cybersecurity posture. The Cybersecurity Specialist will contribute to threat mitigation, risk management, and the protection of our digital assets, ensuring the security and resilience of our technology environment.

Key responsibilities:

• Conduct regular security and vulnerability assessments to identify and evaluate potential risks to information systems.
• Develop and implement effective incident response plans through established protocols to minimize damage and recovery time.
• Develop, implement, and enforce security policies, procedures and controls to protect the organization’s assets and ensure compliance with relevant regulations and standards (e.g., ISO27001, ISR, ICs and NESA).
• Monitor network traffic for suspicious activities for maintaining a secure environment and early threat detection
• Conduct security awareness training for employees to promote best practices for data security throughout the organization
• Conduct regular code reviews and penetration testing of various cybersecurity systems and applications for identifying vulnerabilities and improving software quality.
• Use security information and event management (SIEM) tools to provide a centralized view of security-related data and simplify monitoring and analysis.
• Prepare regular reports on security status and incidents for ongoing monitoring and review of compliance efforts.
• Collaborate with IT teams to secure infrastructure and applications tailored to the organization’s specific needs.
• Provide input on security implications for new projects or systems to ensure security considerations are integrated into the design and implementation phase.

Education Qualifications:

• Bachelor’s degree in computer science, Maths etc or equivalent
• Professional certifications in Cybersecurity (CompTIA Security+, Certified Ethical Hacker (CEH), CompTIA Cybersecurity Analyst (CySA+)

Work Experience:

• Minimum 5 years of IT Experience with extensive focus on IT Security covering IT Audit, IT Risk and Cybersecurity
• Must have worked in Information Security/Risk in a Global organisation with Complex/Hybrid IT Environment
• Strong knowledge of IT Infrastructure – both On Premise and Cloud, BYOD, Application development etc.
• Must have followed IT GRC Methodologies

Skills:

• Strong problem solving, analytical and time management skills
• Security Frameworks - ISO2700130000/CIS Critical security controls, NESA etc.
• Vulnerability Assessment and Penetration Testing (VAPT)
• IT Security/Cybersecurity
• ITSM and COBIT skills
• Strong interpersonal and communication skills.