ENOC
Cyber Security IT Assurance Senior Analyst
- Permanent
- Dubai, United Arab Emirates
- Experience 5 - 10 yrs
- Urgent
Job expiry date: 07/11/2026
Job overview
Date posted
23/09/2026
Location
Dubai, United Arab Emirates
Salary
AED 20,000 - 30,000 per month
Compensation
Comprehensive package
Experience
5 - 10 yrs
Seniority
Senior & Lead
Qualification
Bachelors degree
Expiration date
07/11/2026
Job description
Protecting ENOC's information assets and critical infrastructure depends on knowing whether the security controls in place actually work, and this Dubai-based assurance role exists to find out. Periodic assessments cover the technology environment through vulnerability scanning, penetration testing and Red Teaming exercises. IT architecture and reference architectures are reviewed from a technical security point of view, with changes recommended where risk can be reduced. Configuration reviews extend to the security infrastructure itself, including firewalls, IPSs, passive monitoring solutions and anti-malware/endpoint protection systems. On the application side, you carry out secure code review, dynamic security testing and threat modelling tied to each service's risk and data classification. Systems development and acquisition projects also pass through a cyber security review, where security requirements and designs are validated. Gaps you find lead to evaluations of available tools and countermeasures and clear recommendations on remediation. Expect to bring 6+ years in IT, including 3+ years in cyber security assurance, assessments and architecture review, plus a certification such as CISSP, CISM, OSCP, CEH, CISA or GSEC.
Required skills
Key responsibilities
- Conduct IT cyber security analysis of the technology environment to identify gaps and recommend improvements
- Assess IT architecture from a technical security point of view
- Evaluate available IT tools and countermeasures to remedy detected vulnerabilities and recommend best solutions
- Review IT infrastructure and reference architectures against security best practices and recommend changes to reduce risk
- Perform cyber security reviews for systems development or acquisition projects in the IT environment
- Validate IT systems security requirements definitions and established system security designs
- Run periodic cyber security assessments of existing IT controls through vulnerability scanning, penetration testing and Red Teaming exercises
- Inspect security configurations of, and access to, firewalls, IPSs, passive monitoring solutions and anti-malware/endpoint protection systems
- Carry out secure code review and dynamic security testing for applications in the IT environment
- Develop IT cyber threat models for services and applications tied to their risk and data classification
- Maintain strong working relationships with internal and external stakeholders
- Report security incidents, vulnerabilities, weaknesses or non-compliance in line with established procedures and the ISMS
Experience & skills
- Hold a Bachelor's degree in Computer Science, Engineering or Business field or equivalent, or a Diploma with additional relevant experience
- Possess a professional certification such as CISSP, CISM, OSCP, CEH, CISA or GSEC
- Bring 6+ years of Information Technology experience, including 3+ years of relevant working experience
- Demonstrate working experience in cyber security assurance and cyber security assessments
- Show experience in cyber security architecture review
- Apply hands-on knowledge of vulnerability scanning, penetration testing and security configuration review
- Offer an MBA or Master's degree in computer science, engineering or information security (preferable)
- Contribute working experience across multiple industries such as Oil & Gas, Energy, Utilities, Retail or Government (preferable)