Qureos Mentor

HumanImpact (Hi)

<div>
 
 The Senior Cyber Security and IT Risks Analyst will lead the identification, evaluation, and mitigation of cybersecurity risks for a fast-growing government entity. Reporting to the Head of Cybersecurity and Risk management, the ideal candidate will bring deep technical expertise, a strong understanding of cybersecurity frameworks, and compliance knowledge aligned with the regional regulations and global standards. Prior experience in both banking and public sector environments is preferred.
 
 
 
 
 
 
 Key responsibilities:
 
 
 
 
 
 
 
 Risk Management &amp; Governance:
 
 
 <ul>
 <li>
 Lead the identification and assessment of cybersecurity risks across business units, systems, and projects.
 </li>
 <li>
 Support the development and continuous improvement of the Cybersecurity Risk Management Framework (CRMF).
 </li>
 <li>
 Conduct cybersecurity risk assessments in line with NIST, ISO 27001, NCA EC, ADSIC, and regional IA standards.
 </li>
 <li>
 Monitor compliance with local regulatory requirements (e.g., CBUAE, ADGM, DIFC, and TRA guidelines).
 </li>
 <li>
 Coordinate with enterprise risk management (ERM) teams to integrate cybersecurity risk into the broader risk profile.
 </li>
 </ul>
 
 
 
 
 
 Cybersecurity Operations &amp; Controls:
 
 
 <ul>
 <li>
 Evaluate the effectiveness of technical and administrative controls to mitigate risks.
 </li>
 <li>
 Work with SOC and IT teams to analyze threat intelligence, vulnerabilities, and incidents.
 </li>
 <li>
 Contribute to the continuous improvement of security controls, detection capabilities, and incident response plans.
 </li>
 </ul>
 
 
 
 
 
 Audit &amp; Compliance:
 
 
 <ul>
 <li>
 Act as a key interface for internal/external audits, regulatory inspections, and compliance reviews.
 </li>
 <li>
 Ensure the organization maintains evidence of compliance with local and international standards.
 </li>
 <li>
 Draft and maintain cybersecurity policies, standards, and procedures.
 </li>
 </ul>
 
 
 
 
 
 Stakeholder Engagement:
 
 
 <ul>
 <li>
 Collaborate with stakeholders and business unit leaders to align cybersecurity strategy with business goals.
 </li>
 <li>
 Provide subject matter expertise on risk mitigation in digital transformation projects.
 </li>
 <li>
 Develop executive-level risk reports and dashboards for senior management and board committees.
 </li>
 </ul>
 
 
 
 
 
 Project &amp; Change Risk Advisory:
 
 
 <ul>
 <li>
 Evaluate and advise on cybersecurity risks in projects, particularly i e-government initiatives.
 </li>
 <li>
 Perform third-party risk assessments and vendor security due diligence.
 </li>
 </ul>
 
 
 
 
 
 Key requirements:
 
 
 <ul>
 <li>
 Willing and able to work in the Emirate of RAK.
 </li>
 <li>
 Bachelor&rsquo;s degree in computer science, Information Security, or related field. (Master&rsquo;s degree preferred).
 </li>
 <li>
 At least 5 years in banking/financial institutions and 3+ years in the public sector (federal/local government or regulator).
 </li>
 <li>
 Strong knowledge of cyber risk frameworks (NIST CSF, ISO 27005, FAIR, MITRE ATT&amp;CK).
 </li>
 <li>
 Understanding of banking cybersecurity frameworks (SWIFT CSP, PCI-DSS, CB ISSP).
 </li>
 <li>
 Understanding of public sector security frameworks such as NESA, ADSIC, or NCA ECC.
 </li>
 <li>
 Familiarity with cloud security (AWS, Azure) and data protection laws (e.g., DIFC Data Protection Law, GDPR).
 </li>
 <li>
 Strong analytical, communication, and report-writing skills.
 </li>
 </ul>
</div>

Senior Cyber Security and IT Risks Analyst - Public Sector

Join HumanImpact (Hi) and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

HumanImpact (Hi)

ABOUT_COMPANY

Senior Cyber Security and IT Risks Analyst - Public Sector