Overview
We are seeking an experienced Information Security Officer to join our team and drive a consistent, enterprise-wide approach to cybersecurity. This role will be instrumental in developing and maintaining information security strategies, policies, controls, and assurance programs. The successful candidate will ensure compliance with Public Sector Cyber Security Standards, NIS2 Directive requirements, and best practice frameworks, while actively supporting staff and third parties in achieving a strong security posture.
Responsibilities
* Develop and implement information security strategies, policies, controls, and cyber incident response plans.
* Deliver and maintain a security framework supporting compliance with Public Sector Cyber Security Standards and NIS2.
* Design and manage enterprise-wide cyber security assurance programs for internal systems and third-party services.
* Work directly with divisions to address information security issues, collaborating with Corporate Risk Manager, Data Protection Officer, and Head of IT.
* Provide guidance to contract managers on third-party assurance and contractual requirements for information security.
* Create and deliver security training and awareness programs for staff and contractors, including phishing simulations.
* Monitor and report issues, risks, and progress to the Head of Governance and Legal, including executive briefings and board presentations as required.
* Conduct post-incident reviews, impact analysis, and recommendations for vulnerability remediation.
* Network with other Public Sector Agencies and groups to stay abreast of cyber security initiatives and developments.
* Contribute to security budget planning and act as a champion for the organisation’s security strategy.
* Undertake other information security-related tasks as required.
Qualifications
* Third Level Qualification (HETAC Level 8 or equivalent) in Engineering, Mathematics, Computer Science, Information Systems, or a related discipline.
* Current Security Certification such as:
* Certified Information Security Manager (CISM)
* Certified Information Systems Security Professional (CISSP)
Experience & Competencies
* Proven experience working with Information Security Standards such as ISO 27001/27002 or NIST Cybersecurity Framework.
* Hands-on exposure to a wide range of technologies, including:
* Anti-virus / Malware Protection
* Wireless Networking Technologies
* Firewalls, Network Traffic Monitoring, IDS/IPS
* Vulnerability Scanning & Penetration Testing Tools
* Experience in developing and delivering information security training programs.
* Effective decision-maker with the ability to work independently and take initiative.
* Strong leadership skills with the ability to build relationships and influence stakeholders.
* Excellent report writing and communication skills (written and oral).
* Fluency in English (written and spoken).
#J-18808-Ljbffr