Senior IT Cyber Security Assurance and Risk Specialist

Senior IT Cyber Security Assurance and Risk Specialist – Emirates Nuclear Energy, Abu Dhabi, AE

Full‑time on‑site position offering significant career growth opportunities.

The primary purpose of this role is to continuously improve the protection of information systems by preventing unauthorized disclosure or modification through coordinated efforts with system owners and internal stakeholders to enhance Nawah's security posture.

• Scope and perform penetration testing on systems, networks, and applications to identify vulnerabilities.
• Utilize manual and automated testing methods to find and exploit code flaws, misconfigurations, and insecure software.
• Use penetration testing tools and frameworks such as Metasploit, Nmap, Nessus, Burp Suite, Wireshark, Air crack-ng, SQL map, Tenable, John the Ripper, Hydra, OWASP ZAP, SOAP UI, Echo mirage, etc.
• Write clear and concise penetration testing reports detailing findings and recommendations.
• Plan and provide technical training to junior team members for their professional development and growth.
• Perform on‑demand and scheduled security assessments on enterprise solutions.
• Conduct Red Team activities, including exploitation of identified vulnerabilities, breach attack simulations, phishing campaigns, and collaboration with the Blue Team to improve monitoring and defense measures.
• Lead the vulnerability management program by performing scheduled and on‑demand vulnerability assessments, reporting, prioritization, and remediation recommendations, and validating the remediation of mitigated vulnerabilities.
• Work on Endpoint Detection & Response tools for operations and investigations.
• Perform secure architecture reviews for upcoming projects.
• Conduct technical investigations of cybersecurity events and incidents, designing and recommending effective mitigations.
• Stay updated on the latest security trends, threats, and technologies.
• Provide technical guidance and support to IT teams on security‑related matters.
• Maintain current cybersecurity training and knowledge by monitoring the latest security threats and vulnerabilities.
• Develop and implement cloud security strategies and plans to protect cloud‑based systems, networks, and data.
• Collaborate with IT teams to ensure the security of all cloud systems, identifying and mitigating potential threats and vulnerabilities within the cloud environment.
• Ensure compliance with industry security standards and regulations for cloud environments.
• Conduct security assessments through vulnerability testing and risk analysis specific to cloud infrastructure.
• Monitor cloud environments for irregular activities and potential security breaches.

• Provide technical support and guidance in relation to cloud security.
• Stay updated on the latest cloud security trends, technologies, and best practices.
• Conduct regular security audits to identify potential weaknesses in cloud infrastructure.
• Support the Audit teams during audits with required evidence.
• Verify compliance with organizational and regulatory requirements during onboarding of new solutions.
• Represent the Information Security Assurance Team in Enterprise Design Authority and Enterprise Change Management Board meetings to ensure proposed changes and designs comply with organizational and regulatory requirements.
• Provide strategic recommendations to enhance the organization’s overall security posture.

• Bachelor’s Degree.
• 3 years’ experience; or Diploma, Military or Police Academy graduate with 8 years’ experience; or High School graduate with 10 years’ experience.
• Professional certifications: CEH, ECSA, OSCP, CISSP, GPEN, Cloud Security Certifications.