Cyber Security Risk Specialist

• Drive cyber risk decisions across enterprise and industrial systems • Own hands-on assessments influencing security and business outcomes Our client is a leading industrial organisation undergoing significant digital transformation and innovation. The business invests heavily in technology, cyber security, and operational excellence to support critical operations and and long-term growth. Job Description • Lead hands-on cyber risk assessments across enterprise, cloud, application, and industrial technology environments. • Perform threat modelling and attack path analysis to identify vulnerabilities, control gaps, and potential business impacts. • Assess security risks associated with new projects, technology changes, and business initiatives, influencing solutions from the design stage. • Partner with architecture, engineering, and delivery teams to embed security risk considerations into decision-making and execution. • Evaluate third-party suppliers, managed services, and software supply chains, ensuring security requirements are clearly defined and validated. • Drive risk treatment activities, maintain risk register entries, and track remediation plans through to successful closure. • Provide threat-informed risk insights by leveraging current intelligence, operational security findings, and industry trends to strengthen cyber resilience. • Bachelor's degree in Computer Science, Information Security, Cyber Security, or a related technical discipline. • Minimum of 5 years' experience in cyber security, with a strong focus on technical risk assessment and analysis. • Proven expertise across infrastructure, network, cloud, application, or data security environments. • Strong understanding of threat modelling, attack path analysis, vulnerability assessment, and risk treatment methodologies. • Experience assessing third-party, vendor, and supply chain security risks within complex organisations. • Familiarity with leading cyber security frameworks and standards including ISO 27001, NIST Cybersecurity Framework, and UAE IA Standards. • Professional certifications such as CISSP, CRISC, or equivalent security qualifications are highly desirable, alongside excellent stakeholder engagement and technical writing skills.