Senior IT Risk Analyst

Job Description

Job PurposeMaintain the IT Risk Management framework, and perform risk assessments on CyberSecurity, third party, IT operations and project & programme risks. Maintain the CyberSecurity governance framework, review policies and standards, and conduct CyberSecurity awareness campaigns. Job Outline:- Ensure a comprehensive IT Risk Management framework is established to identify, analyse, mitigate, monitor and communicate IT risks across Emirates IT.- Collect IT risks identified through various channels (e.g. risk assessments, incidents), log them in the IT Risk Register and perform continuous mornitoring activities.- Perform regular risk assessments on Third Party, CyberSecurity, Project & Programme and IT operations risks. Perform risk assessment reports and present the results to Management.- Produce regular risk reports for all IT departments, and Top risks report for Senior Management.- Develop Key Risk Indicators (KRIs) for IT and create dashboards for continuous monitoring of the risks.- Conduct regular IT and CyberSecurity maturity assessments, bench-marking assignments and gap assessments against industry best practices to identify areas of improvement.- Periodically assess, improve and develop CyberSecurity controls, policies, processes and standards.- Design, develop and maintain a CyberSecurity scorecard by business area, to assess the CyberSecurity posture: Identify key metrics covering all CyberSecurit aeras, automate the data collection and scorecard production for all business areas, present the scorecard to the business.- Monitor and track IT regulatory requirements. Keep abreast of emerging risks and industry standards, and assess the potential impact on the organisation. Produce regular reporting to Senior Management.- Support / contribute to the IT security awareness campaign by organising roadshows, publishing articles, or conducting on-site CyberSecurity training. Conduct awareness training and workshops on IT Risk Management.Manage daily security exceptions requests: Assess, review and action requests for exceptions to policies and standards from all levels of the organization, both corporate and IT users. Maintain an up-to-date repository of all the exceptions granted and communicate the exceptions to relevant business/ technical units.Qualifications & ExperienceInformation Technology.Other : 5+ Years Degree or Honours (12+3 or equivalent) : Degree in a subject related to IT Experienceexperience in IT Risk management, CyberSecurity and Governance.Knowledge/skills:- Information Security- Risk Management- CyberSecurity Awareness- Holistic IT Knowledge of Heterogeneous Technology EnvironmentsSafety Sensitive Role: NoSalary & BenefitsJoin us in Dubai and enjoy an attractive tax-free salary and travel benefits that are exclusive to our industry, including discounts on flights and hotels stays around the world. You can find out more information about our employee benefits in the Working Here section of our website www.emirates.com/careers. Further information on whats it like to live and work in our cosmopolitan home city, can be found in the Dubai Lifestyle section.

Keyskills :

About Company

the Emirates Group employs over 103,363 staff from more than 160 nationalities. The Emirates Group’s extensive and diverse international portfolio includes the world’s largest international airline, Emirates, and one of the largest combined air services provider in the world, dnata. For the year financial year ending 2017-18, the Emirates Group posted a profit of AED 4.1 billion (US$ 1.1 billion).