Senior Cybersecurity Assurance Analyst

Emirates; Dubai; On-site; AED 250,000 - 450,000; Full time

Job summary

Emirates is seeking a Senior CyberSecurity Assurance Analyst to lead security assurance activities within the Product portfolio. You will collaborate with governance, risk, compliance, and secure coding teams to ensure control effectiveness and timely remediation.

Ideally you will drive continuous improvement, promote standardised assurance practices, and engage stakeholders to embed security requirements into business processes.

Qualifications

• Bachelor-level information security degree or equivalent.
• Industry certifications such as CISSP, CISA, CISM, GIAC or CEH.
• 5+ years of cybersecurity assurance, governance, or risk leadership.
• Experience with multiple control frameworks and regulatory requirements.

Responsibilities

• Coordinate security assurance activities across the product portfolio.
• Govern outputs from governance, risk, compliance, and secure coding teams.
• Monitor control effectiveness and escalate significant findings.
• Champion formal methodologies, tools, and documentation for assurance.
• Engage IT and business stakeholders to promote secure-by-design practices.

Skills

Security assurance

Governance

Risk management

Compliance

Secure coding

Education

Information security degree

CISSP/CISA/CISM

Tools

ISO/IEC 27001

NIST CSF

Job description

Job Purpose

At Emirates we believe in connecting the world to and through our global hub in Dubai and in constantly innovating to ensure our customers 'Fly Better'. Emirates Group IT thrives on the dynamic nature of technology Being pioneers in aviation innovation were always at the forefront pushing boundaries Were on the lookout for exceptional IT professionals to fortify our position as leaders in the industry Embark on a journey with the worlds largest international airline and become a vital part of our cutting edge information and technology team as Senior CyberSecurity Assurance Analyst

Join our CyberSecurity team where we ensure a world class CyberSecurity organisation based on the key principles of People, Process and Technology underpinned with executive endorsement of a multi-year strategy to continuously improve and develop. The team protects our digital assets by monitoring for threats, responding to incidents, managing vulnerabilities, and ensuring compliance with security policies and regulations.

As a Senior CyberSecurity Assurance Analyst, you will Lead the coordination, integration, and continuous improvement of security assurance processes within the Product portfolio. Oversee the implementation and effectiveness of security controls by collaborating with specialist teams and portfolio stakeholders. Drive the management of risk, compliance, and remediation activities, ensuring alignment with industry best practices and Emirates Group objectives. Foster a culture of secure-by-design and proactive risk management through cross-functional engagement and strategic leadership.

In The Role, You Will

• Coordinate and oversee the execution of security assurance activities within the Product portfolio, ensuring alignment with organizational priorities, compliance requirements, and industry best practices, while facilitating seamless collaboration between specialist teams and portfolio stakeholders.
• Integrate and synthesize outputs from specialist cybersecurity teams (such as compliance, governance, and secure coding), ensuring that identified risks and control gaps are tracked, prioritized, and managed through their lifecycle, and that remediation plans are effectively implemented.
• Monitor and review the effectiveness of security controls and assurance processes, escalating significant findings, supporting data-driven decision-making, and ensuring continuous improvement in the security posture of the Product portfolio.
• Champion the adoption and optimization of formal methodologies, tools, and documentation for security assurance activities, promoting consistency, efficiency, and alignment with industry standards across the portfolio.
• Engage and collaborate with IT and business stakeholders to promote a culture of security awareness, accountability, and secure-by-design, delivering guidance, facilitating knowledge transfer, and supporting the integration of assurance findings into business and technical processes.

Qualification

To be considered for this role, you must meet the below requirements:

• Degree or Honours (12+3 or equivalent) and an information security related industry recognised certification such as CISSP, CISA, CISM, GIAC certification, CEH etc.
• 5+ years in cybersecurity Assurance, Governance, Risk, or a closely related discipline with a demonstrated track record of leading assurance activities across complex, multi-stakeholder enterprise environments and managing company-wide security programmes.
• Advanced working knowledge of information security assurance principles, control frameworks, and regulatory compliance requirements, including ISO/IEC 27001, NIST CSF, CIS Controls, COBIT, and relevant industry-specific regulations (e.g., GDPR, NCA, SAMA, PCI-DSS).
• Proven ability to coordinate, integrate, and govern outputs from multiple specialist cybersecurity domains, including governance, risk, compliance, secure coding, threat intelligence, and architecture into a cohesive assurance view.
• Control Effectiveness & Assurance Oversight: Strong expertise in designing, monitoring, and continuously evaluating security control effectiveness, with the ability to identify assurance gaps, escalating material risks to senior leadership, and drive timely and accountable remediation.
• Demonstrated success in championing the adoption and continuous improvement of security methodologies, assurance tooling, automation, and standardised documentation practices to mature the organisation's assurance capability.
• Executive Communication & Stakeholder Engagement: Exceptional communication and influencing skills, with the ability to translate complex cybersecurity assurance findings into clear, business-relevant insights for C-suite, board, and technical audiences, while facilitating knowledge transfer and promoting secure-by-design principles across the organisation.
• Advanced analytical and organisational capabilities to manage end-to-end risk remediation tracking, measure assurance process performance through meaningful KPIs and metrics, and lead structured continuous improvement initiatives that strengthen the organisation's security posture over time.
• Proven ability to work collaboratively across business, technology, and operational teams to embed assurance findings, lessons learned, and security requirements directly into business processes, project lifecycles, and change management activities.
• Demonstrated leadership in building and sustaining a proactive, risk-aware security culture, including mentoring junior assurance professionals, influencing behavioural change, and driving organisation-wide accountability for cybersecurity outcomes at all levels.

Salary & benefits

Join us in Dubai and enjoy an attractive tax-free salary and travel benefits that are exclusive to our industry, including discounts on flights and hotels stays around the world. Find out what it’s like to live and work in our fast-paced, cosmopolitan home city in the Dubai Lifestyle section of our website www.emirates.com/careers