Cyber Security Governance and Risk Analyst

Cpl; Dublin; On-site; EUR 70,000 - 110,000; Full time

Job summary

A Cyber Security & Risk Analyst is sought for a 12-month contract with an integral public service organisation in Ireland. The role covers governance, risk management, incident response, and security operations to support resilient information security across the enterprise.

You will coordinate governance activities, maintain risk registers, and assist audits and supplier risk assessments, working with executive teams and business units.

Qualifications

• Minimum 5 years in information security, cyber security, or IT risk.
• Experience in regulated/public sector environments.
• Strong knowledge of cyber risk management and governance reporting.
• Experience with cyber incident response planning and audits.
• Practical understanding of NIS2, CyFun, ISO 27001, NIST CSF.

Responsibilities

• Coordinate cyber governance activities across the organisation.
• Maintain cyber risk register with owners, ratings and action plans.
• Prepare governance packs and reporting for EMT, Board and committees.
• Support incident response planning, playbooks and after-action reviews.
• Assist vulnerability management, patching, and security monitoring.
• Coordinate cyber risk assessments for suppliers and third parties.
• Support audit activities and evidence gathering.
• Promote cyber security awareness and reporting to stakeholders.
• Report security findings to CIO, EMT and senior governance forums.

Skills

Governance coordination

Security risk management

Incident response planning

Stakeholder management

Regulatory compliance

Tools

NIS2 knowledge

ISO 27001

Risk assessment tools

Job description

We're partnering with an integral public service organisation that supports Ireland's healthcare industry and millions of patients across the country.

They're looking for a Cyber Security & Risk Analyst to join them on a 12 month contract, with the possibility of renewal.

The Role

Cyber Security Governance

• Coordinate cyber governance activities across the organisation.
• Support compliance and resilience activities relating to NIS2, CyFun, and other relevant cyber security requirements.
• Prepare cyber governance reports, briefing papers, meeting packs and action trackers for relevant governance groups, including EMT, ARC, Board, programme boards, working groups and IT governance forums.
• Manage cyber and information security policies, standards, procedures, SOPs, guidance documents and supporting templates, including coordinating review and periodic refresh.
• Support rollout and implementation of cyber policies and SOPs across IT and relevant business areas
• Maintain oversight of the cyber remediation plan, including actions, owners, milestones, dependencies, risks, issues, status and evidence of completion.

Cyber Risk Management

• Coordinate the upkeep of the cyber risk register, ensuring risks have clear owners, ratings, treatment plans, target dates and status.

Work with the Risk and Resilience function to ensure cyber risks are reflected in the corporate risk register where appropriate.

Incident Response

• Maintain the Major incident response plan and supporting playbooks, escalation paths and contact lists.
• Coordinate cyber incident readiness activities, including tabletop exercises, lessons learned reviews and follow-up action tracking.
• Support incident response planning, evidence gathering, communications, reporting, escalation and post-incident improvement activities.

Security Operations

• Support improvement activities relating to vulnerability management, patch management, secure configuration, logging, monitoring, endpoint protection, malware controls, network security, remote access and identity controls.
• Support development of secure baselines for business-critical systems and track exceptions or overdue remediation items.

Third-Party and Supplier Security Management

• Support cyber security input into supplier onboarding, procurement, contract reviews and supplier assurance activities.
• Coordinate cyber risk assessments for suppliers and third-party service providers.
• Track supplier-related cyber risks, remediation actions, assurance evidence and contractual obligations.
• Support external assurance activities relating to supplier security controls and operational resilience.

Audit and Compliance Support

• Support internal and external audit activities relating to information security, cyber security, resilience and compliance.
• Coordinate evidence gathering, management responses, action tracking and closure evidence for cyber audit findings.
• Monitor cyber security regulatory developments and assess their relevance to the organisation.

Cyber Awareness

• Track completion of cyber training and report on awareness programme performance.
• Promote a strong cyber security culture across the organisation by making cyber responsibilities clear and practical.
• Support targeted cyber training for incident response teams, system owners, IT teams, project teams and business stakeholders.

Stakeholder Management, Communication and Reporting

• Act as a key point of coordination for cyber security matters across the organisation.
• Prepare clear and concise reports for CIO, EMT, CEO, Board, ARC, programme boards, working groups, NCSC engagements, internal audit and other governance forums as required.

Experience And Qualifications

• Minimum 5 years’ experience in information security, cyber security, IT risk, security operations, IT governance, audit, compliance or a related IT discipline.
• Demonstrable experience managing or coordinating information security activities in a regulated, healthcare, public sector, critical service or operationally sensitive environment.
• Strong knowledge of cyber risk management, control assessments, remediation tracking and governance reporting.
• Experience developing, reviewing, implementing and monitoring cyber security policies, standards, SOPs and procedures.
• Experience preparing cyber security reports for senior management, executive committees, audit/risk committees or Board-level governance forums.
• Practical understanding of NIS2, CyFun, ISO 27001, NIST Cybersecurity Framework.
• Experience coordinating cyber incident response planning, incident exercises, tabletop exercises and post-incident improvement actions.
• Experience supporting internal or external audits, evidence gathering, action tracking and management responses.
• Experience working with third-party technology providers, managed service providers, cyber advisory partners or security vendors.
• Excellent stakeholder management, communication, documentation, meeting facilitation and project coordination skills.
• Ability to work independently, manage multiple priorities, follow up actions to closure and elevate risks where required.

Desirable Skills

• Strong technical understanding across IT infrastructure, networks, identity and access management, endpoint security, cloud/SaaS, logging, monitoring, backup, disaster recovery and vulnerability management.

Relevant professional certification such as CISSP, CISM, CRISC, CISA.