Cybersecurity Lead

• Location: Harbour Road, Dún Laoghaire, Co. Dublin
• Attendance: Hybrid - Minimum 3 days per week in the office
• Contract duration: 12 months
• Contract start: ASAP

• Minimum 7+ years of extensive professional experience in cybersecurity management and strategy.
• Experience leading complex projects and programmes.
• Experience in service management, including vendor management.
• Experience maturing Governance, Risk and Compliance (GRC) environments.
• Experience in cybersecurity leadership roles, such as IT Security Manager, Security Lead, or equivalent (e.g. vCISO).
• Experience working in organisations with limited internal security capabilities.
• A minimum of one relevant example demonstrating cybersecurity leadership experience.

• A recognised formal cybersecurity qualification, such as CISSP, CISM, or equivalent.

• Fluency in English is mandatory.
• The CV must state whether the candidate is a native English speaker.
• Non-native English speakers must hold a CEFR C2 Mastery/Proficiency certificate or equivalent.
• Candidates who are fluent in English but do not hold the certificate may still be considered for evaluation, with proficiency verified during a presentation if shortlisted.
• Evidence of relevant certifications must be provided before contract award.

• Lead cybersecurity governance, strategy, and risk management.
• Establish and maintain security governance frameworks, cybersecurity roadmaps, risk registers, policies, standards, and procedures.
• Conduct cybersecurity risk assessments and support GDPR, NIS2 readiness, and audit/compliance activities.
• Manage third-party and vendor security risk assessments, due diligence, ongoing monitoring, and remediation tracking.
• Operate UpGuard or an equivalent third-party risk management platform.
• Oversee outsourced security providers, including MSSP/SOC services, and review security incidents, alerts, vulnerabilities, and remediation progress.
• Develop and maintain incident response plans, coordinate incident responses, and conduct post-incident reviews and tabletop exercises.
• Manage security-related supplier performance, escalations, and shared-responsibility arrangements.
• Provide cybersecurity input into projects, new systems, architecture, and design decisions.
• Communicate security risks and recommendations effectively to technical teams, business stakeholders, and senior management.

• Cybersecurity leadership and management.
• Cybersecurity governance, risk, and compliance.
• Third-party/vendor risk management.
• Security operations oversight and incident management.
• Incident response planning and coordination.
• Supplier management and multi-vendor environments.
• Stakeholder engagement and communication with technical and non-technical audiences.
• Managing competing priorities, explaining risks and issues, and supporting decision-making.