Senior Cybersecurity Assurance Analyst

Job Purpose

At Emirates we believe in connecting the world to and through our global hub in Dubai and in constantly innovating to ensure our customers 'Fly Better'. Emirates Group IT thrives on the dynamic nature of technology, being pioneers in aviation innovation, and we are always at the forefront pushing boundaries. We are on the lookout for exceptional IT professionals to fortify our position as leaders in the industry.

Embark on a journey with the world's largest international airline and become a vital part of our cutting‑edge information and technology team as Senior Cyber Security Assurance Analyst.

Join our Cyber Security team where we ensure a world‑class Cyber Security organisation based on the key principles of People, Process and Technology underpinned with executive endorsement of a multi‑year strategy to continuously improve and develop. The team protects our digital assets by monitoring for threats, responding to incidents, managing vulnerabilities, and ensuring compliance with security policies and regulations. If you are passionate about Cyber Security, we invite you to apply to play a crucial role in shaping the future of our technology initiatives at Emirates Group.

• Coordinate and oversee the execution of security assurance activities within the Product portfolio, ensuring alignment with organizational priorities, compliance requirements, and industry best practices, while facilitating seamless collaboration between specialist teams and portfolio stakeholders.
• Integrate and synthesize outputs from specialist cybersecurity teams (such as compliance, governance, and secure coding), ensuring that identified risks and control gaps are tracked, prioritized, and managed through their lifecycle, and that remediation plans are effectively implemented.
• Monitor and review the effectiveness of security controls and assurance processes, escalating significant findings, supporting data‑driven decision‑making, and ensuring continuous improvement in the security posture of the Product portfolio.
• Champion the adoption and optimization of formal methodologies, tools, and documentation for security assurance activities, promoting consistency, efficiency, and alignment with industry standards across the portfolio.
• Engage and collaborate with IT and business stakeholders to promote a culture of security awareness, accountability, and secure‑by‑design, delivering guidance, facilitating knowledge transfer, and supporting the integration of assurance findings into business and technical processes.

• Degree or Honours (12+3 or equivalent) and an information security related industry recognised certification such as CISSP, CISA, CISM, GIAC certification, CEH, etc.
• 5+ years in cybersecurity Assurance, Governance, Risk, or a closely related discipline with a demonstrated track record of leading assurance activities across complex, multi‑stakeholder enterprise environments and managing company‑wide security programmes.
• Advanced working knowledge of information security assurance principles, control frameworks, and regulatory compliance requirements, including ISO/IEC 27001, NIST CSF, CIS Controls, COBIT, and relevant industry‑specific regulations (e.g., GDPR, NCA, SAMA, PCI‑DSS).
• Proven ability to coordinate, integrate, and govern outputs from multiple specialist cybersecurity domains, including governance, risk, compliance, secure coding, threat intelligence, and architecture into a cohesive assurance view.
• Control Effectiveness & Assurance Oversight:
  Strong expertise in designing, monitoring, and continuously evaluating security control effectiveness, with the ability to identify assurance gaps, elevate material risks to senior leadership, and drive timely and accountable remediation.
• Demonstrated success in championing the adoption and continuous improvement of security methodologies, assurance tooling, automation, and standardised documentation practices to mature the organisation's assurance capability.
• Executive Communication & Stakeholder Engagement:
  Exceptional communication and influencing skills, with the ability to translate complex cybersecurity assurance findings…