Technology Risk Analyst | Cyber Risk Consultant

Overview

We are looking for a meticulous and analytical Technology Risk Analyst | Cyber Risk Consultant to join our team on a full-time basis at our Abu Dhabi location. This role demands collaboration with IT, cybersecurity, compliance, internal audit, and business sectors to enhance technology risk oversight, fortify security controls, and ensure a resilient and secure operational environment.

Key Responsibilities

• Spot and evaluate technology, cybersecurity, information security, and operational risks organization-wide.
• Perform risk assessments on infrastructure, applications, cloud services, networks, and business systems.
• Analyze cybersecurity threats, vulnerabilities, control deficiencies, and possible impacts on business.
• Maintain updated risk registers, assessments, and mitigation strategies.
• Track key risk and performance indicators and emerging trends in technology risk.
• Review IT security controls, policies, procedures, and risk management frameworks for effectiveness.
• Identify any control weaknesses and advise on remediation and mitigation measures.
• Collaborate with technology teams to resolve risks, findings, and control shortcomings.
• Integrate technology risk considerations into enterprise-wide risk assessments.
• Conduct cybersecurity risk evaluations for third-party vendors, service providers, and partners.
• Assess risks related to cloud computing, SaaS, APIs, data systems, and new technologies.
• Support risk evaluations for system implementations, tech changes, and digital transformation efforts.
• Analyze cybersecurity incidents and contribute to incident response and risk remediation.
• Keep up with new cyber threats, vulnerabilities, regulations, and trends in technology risk.
• Create risk scenarios assessing financial, operational, regulatory, and reputational consequences.
• Assist with business continuity, disaster recovery, and technology resilience assessments.
• Evaluate access controls, identity management, data protection, vulnerability management, and security monitoring practices.
• Provide support during internal and external audits by preparing risk-related documentation and management responses.
• Assist with compliance evaluations against relevant technology and cybersecurity standards.
• Prepare concise risk reports, dashboards, summaries, and presentations for management.
• Effectively convey technology and cybersecurity risks to both technical and non-technical audiences.
• Lead risk workshops, control assessments, stakeholder engagement, and remediation discussions.
• Provide actionable recommendations to enhance technology governance and risk practices.
• Monitor remediation plans and escalate critical or overdue risk issues when necessary.
• Thoroughly document risk assessments, controls, findings, action plans, and risk acceptance decisions.
• Contribute to the ongoing development and refinement of technology risk policies, standards, procedures, and methodologies.
• Assess the risk impact of new technologies, applications, platforms, and technology projects.
• Perform routine reviews of risk profiles to detect shifts in threat exposure and control effectiveness.
• Deliver data-supported insights on technology and cybersecurity risk to senior leadership.

Qualifications and Requirements

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Information Security, Risk Management, or related field.
• Prior experience in technology risk, cyber risk, IT risk, information security, or technology consulting.
• In-depth knowledge of cybersecurity concepts, technology risk, and information security controls.
• Proficient in conducting IT and cybersecurity risk assessments.
• Familiarity with risk management frameworks and control assessment methods.
• Experience with standards such as ISO 27001, NIST CSF, COBIT, CIS Controls, or similar.
• Understanding of cyber threats, vulnerabilities, attack types, and risk scenarios.
• Knowledgeable in network security, cloud security, identity and access management, endpoint security, and data protection.
• Experience assessing IT general controls, application controls, and security controls.
• Exposure to third-party risk management and vendor security evaluation.
• Strong analytical and problem-solving capabilities.
• Ability to interpret technical data and articulate business risk implications.
• Excellent report writing, documentation, presentation, and stakeholder communication skills.
• Experience supporting technology audits, regulatory assessments, or compliance reviews considered an advantage.
• Familiarity with GRC platforms, vulnerability management tools, SIEM, or security assessment tools is beneficial.
• Relevant certifications like CISA, CRISC, CISSP, CISM, ISO 27001 are preferred.
• Attention to detail and aptitude for managing multiple risk assessments and remediation tasks.
• Capable of independent work while effectively collaborating with technical and business teams.

Benefits

• Competitive compensation and comprehensive employee benefits.
• Hands-on experiences spanning technology risk, cybersecurity, governance, and compliance functions.
• Engagement with enterprise-grade technology and cybersecurity setups.
• Opportunities for professional growth in cyber risk, IT governance, and risk management fields.
• Access to advanced cybersecurity, GRC, risk management, and analytics tools.
• Involvement in significant technology transformation and security projects.
• Exposure to senior leadership and strategic decision-making processes on technology risk.
• Support for obtaining relevant cybersecurity, risk, audit, and compliance certifications.
• A collaborative environment centered on security, resilience, governance, and continual enhancement.
• Recognition for successful identification and mitigation of risks.
• Clear career advancement path toward senior roles such as Senior Technology Risk Analyst, Cyber Risk Manager, or Head of Technology Risk.