Cyber Security Governance and Risk Analyst

Brightwater Recruitment; Dublin; Híbrido; EUR 44.000 - 74.000; Jornada completa

Descripción de la vacante

Brightwater Recruitment is seeking a Cyber Security Governance and Risk Analyst for a daily-rate contract in Ireland. The role focuses on coordinating cyber governance, risk management, incident readiness, and supplier assurance across a regulated public sector environment.

The ideal candidate will have at least four years in information security or IT risk, with practical knowledge of NIS2, ISO27001 and NIST CSF, and strong stakeholder reporting capabilities.

Formación

• Minimum 4 years’ experience in information security, IT risk, IT governance, audit or compliance.
• Experience in regulated, healthcare or public sector environments preferred.
• Practical understanding of NIS2, CyFun, ISO27001 and NIST CSF.

Responsabilidades

• Coordinate cyber governance, risk management and incident readiness.
• Manage cyber and information security policies, standards and guidance.
• Maintain cyber risk register, actions, owners and milestones.
• Track cyber KPIs, KRIs and management dashboards.
• Coordinate incident response plans and tabletop exercises.
• Support audits, supplier assurance and third-party risk assessments.
• Prepare clear reports for CIO, EMT, CEO and Board.

Conocimientos

Stakeholder management

Communication

Coordination

Reporting to senior management

Governance

Cyber risk management

Incident readiness

Descripción del empleo

Cyber Security Governance and Risk Analyst

Daily Rate Contract, Hybrid

About the Company

My client is a national public sector healthcare organisation in Ireland, providing an essential and critical service to the national health system. Operating in a highly regulated environment, they are strengthening their cyber security, resilience and compliance in line with NIS2 and related requirements.

About the Position

My client is looking for a Cyber Security Governance and Risk Analyst to coordinate cyber governance, risk management, incident readiness, supplier assurance and audit activities across the organisation, and to provide clear reporting to senior management and the Board.

The ideal candidate has a minimum of 4 years’ experience in information security, IT risk, IT governance, audit or compliance, ideally in a regulated, healthcare or public sector environment, with a practical understanding of NIS2, CyFun, ISO 27001 and the NIST Cybersecurity Framework.

• ResponsibilitiesCoordinate cyber governance activities and support compliance and resilience activities relating to NIS2, CyFun and other relevant cyber security requirements.
• Manage cyber and information security policies, standards, SOPs and guidance, including periodic review and rollout across IT and relevant business areas.
• Maintain oversight of the cyber remediation plan, tracking actions, owners, milestones, dependencies, risks and evidence of completion.
• Maintain the cyber risk register, ensuring clear owners, ratings and treatment plans, and ensure cyber risks are reflected in the corporate risk register where appropriate.
• Maintain cyber KPIs, KRIs and management dashboards.
• Maintain the major incident response plan and playbooks, and coordinate incident readiness, tabletop exercises and post-incident improvement activities.
• Support security operations improvements, including vulnerability and patch management, secure configuration, monitoring, endpoint and identity controls, and secure baselines for business-critical systems.
• Coordinate cyber risk assessments for suppliers and third parties, supporting onboarding, procurement, contract reviews and ongoing assurance.
• Support internal and external cyber audits, coordinating evidence, management responses and closure of findings, and monitor cyber security regulatory developments.
• Track cyber training completion and promote a strong cyber security culture, including targeted training for key teams.
• Act as a key point of coordination for cyber security matters, preparing clear reports for the CIO, EMT, CEO, Board, ARC, NCSC engagements and other governance forums.
• ExperienceMinimum 4 years’ experience in information security, cyber security, IT risk, security operations, IT governance, audit, compliance or a related IT discipline.
• Experience coordinating information security activities in a regulated, healthcare, public sector, critical service or operationally sensitive environment.
• Strong knowledge of cyber risk management, control assessments, remediation tracking, governance reporting and cyber security policy development.
• Practical understanding of NIS2, CyFun, ISO 27001 and the NIST Cybersecurity Framework.
• Experience preparing reports for senior management, executive committees, audit/risk committees and Board-level forums.
• Experience in incident response planning and exercises, audit support, and working with third-party technology providers and security vendors.
• Excellent stakeholder management, communication and coordination skills, with the ability to work independently, manage multiple priorities and follow actions to closure.
• Desirable SkillsTechnical understanding across IT infrastructure, networks, identity and access management, endpoint and cloud security, logging, monitoring, backup, disaster recovery and vulnerability management.
• Relevant professional certification such as CISSP, CISM, CRISC or CISA.

Remuneration Package

Up to €400 per day, potential for extension or longer term role.