We are seeking a Cybersecurity Regulatory Lead to join our CISO team
Position Description
Technology plays a leading role in enabling and delivering ESB's purpose to deliver a brighter future for the customers and communities we serve.
We are driven to make a difference – by becoming net zero by **** – and it's our people who ensure we succeed.
At ESB, we operate one of the most advanced and critical technology landscapes in Ireland.
We manage a vast array of Enterprise IT and Operational Technologies (OT) which reside in our state-of-the-art data centres, in our power generation plants, and in our critical operations centres – all requiring the appropriate level of security to protect our business.
Together, these technologies support our critical national infrastructure, and we are recruiting a Cybersecurity Regulatory Lead to support our transformation to a digital utility.
The CISO team are looking for talented, personable and ambitious candidates to fill the role of Cybersecurity Regulatory Lead.
Successful candidates will have a key role in shaping how cybersecurity is delivered to meet business goals, supporting major change imperatives and enabling ESB's transition to a digital utility in line with regulatory requirements.
The successful candidate will be required to:
Provide leadership, strategic decision-making, and guidance in cybersecurity regulatory, audit and certification programs e.g. NIS2, CER, DORA, Cyber Fundamentals
Act as a single point of contact for cybersecurity regulatory compliance support
Support business transformation by consulting and advising key stakeholders
Develop key regulatory metrics and report results to senior leaders
We are seeking to attract candidates who have cybersecurity and regulatory experience
Key Responsibilities
Lead and develop a team to oversee cybersecurity regulatory requirements, audits and related certifications aligned to leading frameworks and standards e.g. NIST, ISO
Ensure that cybersecurity measures support the delivery of the ESB Cybersecurity Strategy
Liaise with relevant stakeholders in planning, assessing and auditing regulatory compliance including coordination of compliance responses
Continually improve ESB's cybersecurity security second line of defence, assisting business, project and technology teams to embed the requirements necessary to operate and demonstrate appropriate security controls in their activities and operating procedures
Provide regulatory and audit related status reports and metrics to stakeholders including ESB's security council, senior management, auditors and regulators
Monitor sources of relevant cybersecurity legislation and communicate the related implications to ESB's operations, policies, and procedures
Manage a cybersecurity legislation register and provide cybersecurity regulatory expertise and training to senior leaders and stakeholders
Essential
A minimum of 7 years' relevant experience
Experience applying cybersecurity principles and policies, regulatory requirements and compliance frameworks and standards
Excellent stakeholder management, negotiation and communication skills combined with strategic thinking skills
Demonstrable ability to develop and grow new capabilities and skills related to cybersecurity
Organisational, analytical, and project management skills
Demonstrated ability to apply technology in solving business problems
Desirable
Previous programme or team lead experience in Cybersecurity Architecture, Governance, Risk, Compliance or Regulatory affairs
Experience working in environments where OT is a component of business operations
Related third-level degree and industry certifications
#J-*****-Ljbffr