This role plays a key part in industrial technology environments, working closely with technical teams, you will provide evidence-based assessments that support informed security decisions. You will help shape secure technology outcomes by assessing new initiatives, third-party risks, and emerging threats, ensuring practical mitigation strategies are implemented and tracked through to completion Client Details Our client is a leading industrial organisation undergoing significant digital transformation and innovation. The business invests heavily in technology, cyber security, and operational excellence to support critical operations and long-term growth. Description * Lead hands-on cyber risk assessments across enterprise, cloud, application, and industrial technology environments. * Perform threat modelling and attack path analysis to identify vulnerabilities, control gaps, and potential business impacts. * Assess security risks associated with new projects, technology changes, and business initiatives, influencing solutions from the design stage. * Partner with architecture, engineering, and delivery teams to embed security risk considerations into decision-making and execution. * Evaluate third-party suppliers, managed services, and software supply chains, ensuring security requirements are clearly defined and validated. * Drive risk treatment activities, maintain risk register entries, and track remediation plans through to successful closure. * Provide threat-informed risk insights by leveraging current intelligence, operational security findings, and industry trends to strengthen cyber resilience. Profile * Bachelor's degree in Computer Science, Information Security, Cyber Security, or a related technical discipline. * Minimum of 5 years' experience in cyber security, with a strong focus on technical risk assessment and analysis. * Proven expertise across infrastructure, network, cloud, application, or data security environments. * Strong understanding of threat modelling, attack path analysis, vulnerability assessment, and risk treatment methodologies. * Experience assessing third-party, vendor, and supply chain security risks within complex organisations. * Familiarity with leading cyber security frameworks and standards including ISO 27001, NIST Cybersecurity Framework, and UAE IA Standards. * Professional certifications such as CISSP, CRISC, or equivalent security qualifications are highly desirable, alongside excellent stakeholder engagement and technical writing skills. Job Offer * UAE National Opportunity * Opportunity to influence cyber security strategy and risk decisions within a complex, technology-driven environment. * Competitive compensation package.