Cybersecurity

• Location: United Arab Emirates (Remote)
• Employment Type: Full-Time
• Experience Level: Junior / Entry-Level
• Department: Cybersecurity / Third-Party Risk Management
• Salary Range: AED 13,000–17,000 per month (proposed; subject to employer budget and qualifications)

About the Role

We are seeking a detail-oriented and analytical Junior Cybersecurity Supply Chain Risk Analyst to help assess and monitor security risks associated with external vendors, technology providers, software suppliers, and third-party service partners.

As organizations increasingly depend on external technology services, understanding supplier security practices is essential. In this role, you will support vendor security assessments, maintain risk records, review security documentation, and help track remediation activities.

This position is suitable for an early-career IT professional interested in cybersecurity, vendor risk management, and information security governance. Training and mentorship will be provided.

Key Responsibilities

• Assist with cybersecurity assessments of third-party vendors and technology suppliers.
• Review vendor security questionnaires and supporting documentation.
• Help identify potential risks relating to data access, system integrations, and outsourced services.
• Maintain supplier risk registers and assessment records.
• Support the collection of security certifications, audit reports, and compliance evidence from vendors.
• Track outstanding security findings and follow up on remediation plans.
• Assist with reviewing vendor access permissions and data-handling practices.
• Research supplier security incidents and relevant threat advisories.
• Help prepare risk summaries and reports for internal stakeholders.
• Collaborate with procurement, legal, IT, and cybersecurity teams.
• Support periodic reassessments of critical suppliers.
• Escalate significant third-party security concerns to senior team members.

Requirements

• Diploma or bachelor's degree in IT, Cybersecurity, Information Systems, Business Technology, or a related field; equivalent practical knowledge may be considered.
• Basic understanding of cybersecurity fundamentals and information security controls.
• Strong analytical skills and attention to detail.
• Good written communication and report-writing abilities.
• Ability to organize documentation and maintain accurate records.
• Familiarity with spreadsheets and assessment questionnaires.
• Ability to communicate professionally with internal teams and external suppliers.
• Willingness to learn third-party risk management processes and security frameworks.

Entry-level applicants are encouraged to apply. Relevant coursework, internships, IT support experience, and introductory cybersecurity certifications are advantageous.

Preferred Skills

• Awareness of third-party risk management and vendor due diligence.
• Basic knowledge of ISO 27001, NIST Cybersecurity Framework, or CIS Controls.
• Familiarity with SOC 2 reports or information security certifications.
• Understanding of data protection, access management, and incident reporting.
• Basic knowledge of cloud services and software supply chain risks.
• Familiarity with risk registers, spreadsheets, and reporting tools.
• Relevant introductory training in cybersecurity, governance, risk, or compliance.

What We Offer

• Proposed salary range of AED 13,000–17,000 per month, depending on qualifications and experience.
• Remote working arrangement, subject to employer policy and country-of-residence eligibility.
• Structured onboarding and mentorship from experienced professionals.
• Opportunities to develop third-party security assessment and risk analysis skills.
• Exposure to vendor governance, security reviews, and remediation tracking.
• Professional development and ongoing training.
• A collaborative environment focused on reducing security risks across the supply chain.