Senior Cyber Security Portfolio Assurance Analyst

Job Purpose

• At Emirates, we believe in connecting the world, to and through, our global hub in Dubai; and in constantly innovating to ensure our customers Fly Better.
• Emirates Group IT thrives on the dynamic nature of technology.
• As we continue to modernise and secure our enterprise platforms, we are seeking a **Senior Cyber Security Portfolio Assurance Analyst** to strengthen cyber security assurance across our Cloud ERP, SaaS, and public cloud environments.
• **This is a 12-month fixed-term contract based in Dubai, with 5 days per week in the office.**As a **Senior Cyber Security Portfolio Assurance Analyst** , you will provide independent assurance over cloud and application security controls, ensuring that enterprise platforms are implemented and operated in line with internal cyber security standards, regulatory obligations, and industry best practices. The role plays a key part in enabling secure adoption of Cloud ERP and cloud technologies across the Group.
• This role works closely with Cyber Security, Cloud Platform, Architecture, ERP delivery teams, Risk, and Internal Audit to ensure security risks are identified, assessed, and effectively managed across the technology portfolio.
• **In this role, you will:*** Perform cyber security assurance assessments across Cloud ERP, enterprise SaaS, and public cloud platforms.
• Assess the design and effectiveness of cloud and application security controls across cloud environments
• Provide assurance that cloud platforms and applications comply with internal cyber security standards, regulatory requirements, and audit expectations.
• Review solution designs, configurations, and security artefacts to identify control gaps, security risks, and non‑compliance, recommending pragmatic remediation actions.
• Provide security assurance input into Cloud ERP and enterprise technology programmes, supporting secure‑by‑design and risk‑based decision making.
• Work closely with Cloud, ERP, and application teams to validate controls covering identity and access management, data protection, logging and monitoring, network security, and resilience.
• Track and manage security findings, risks, and remediation actions, escalating material risks where required through established governance forums.
• Support engagement with Internal Audit, Risk, and external assessors, providing evidence and assurance artefacts as required.
• Contribute to the ongoing improvement of cyber security assurance frameworks, standards, and assessment methodologies for cloud and SaaS platforms.

Qualification

• To be considered for this role, you must meet the below requirements:
• Degree or Honours (12+3 or equivalent) in Information Security, Computer Science, Engineering, or a related discipline.
• 3+ years of experience in cyber security assurance, risk, or control assessment within large enterprise technology environments.
• Proven expertise in cloud security, with hands‑on knowledge of one or more public cloud platforms
• Strong understanding of cloud and application security controls, including identity and access management, data protection, encryption, logging and monitoring, network security, and secure configuration.
• Experience ensuring compliance with internal cyber security standards, regulatory obligations, and audit requirements.

Salary & Benefits