Cyber Security Operations Manager

Indra Group UK & Ireland; Dublin; Ibrido; EUR 90.000 - 130.000; Tempo pieno

Vantaggi offerti da questo lavoro

Annual leave 24 days

Pension 7%

Private medical insurance

Hybrid working

Charitable initiatives

Learning & development programs

Travel allowances

Collaborative environment

Descrizione del lavoro

Indra is seeking an experienced Cyber Security Operations Manager to lead and coordinate security across live IT, cloud, and payment environments in Dublin. You will oversee incident response, vulnerability management and governance, while aligning with PCI DSS and P2PE requirements.

The role requires strong technical security knowledge, stakeholder engagement, and the ability to drive improvements with internal teams and external providers. Hybrid working options are available in Ireland.

Competenze

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline, or equivalent practical experience.
• Minimum of 7–10 years' experience within information security, cybersecurity operations, IT operations or a related technical environment.
• Experience coordinating operational security activities and working with technical teams, service providers and business stakeholders.
• Practical experience of security monitoring, SIEM platforms, security incident management and alert triage.
• Experience managing vulnerability assessments, remediation activities and operational security risks.
• Good understanding of cloud and infrastructure security, particularly AWS, alongside network security and endpoint protection.
• Knowledge of identity and access management, including MFA, privileged access management, logging and monitoring controls.
• Ability to interpret security findings, assess operational risks and coordinate appropriate remediation activities.
• Strong communication and organisational skills, with the ability to manage competing priorities and maintain accurate technical documentation and audit evidence.

Mansioni

• Lead and coordinate day-to-day operational security activities across live IT, cloud, infrastructure, network, end-user and payment environments.
• Ensure agreed security controls are implemented, maintained and operating effectively across AWS, on-premises infrastructure and payment systems.
• Work closely with service delivery and engineering teams to identify security requirements and ensure appropriate controls are incorporated into operational processes.
• Provide security oversight across incident, problem, change and release management activities, ensuring security risks and actions are appropriately addressed.
• Develop and maintain operational security procedures, technical documentation, runbooks and control records.
• Coordinate operational security governance activities, ensuring risks, incidents, remediation plans and improvement initiatives are regularly reviewed and reported.
• Coordinate the response to security alerts and incidents, including initial triage, investigation, escalation, evidence collection and incident documentation.
• Manage the operational relationship with Security Operations Centre (SOC) providers, ensuring effective monitoring, communication and incident response.
• Monitor SOC performance, identify recurring issues and coordinate appropriate service improvements.
• Work with technical teams and security providers to improve monitoring coverage, threat detection and incident response capabilities.

Conoscenze

Cybersecurity operations

Security governance

Stakeholder management

Incident management

Formazione

Degree in Computer Science / IT / Cybersecurity

Strumenti

SIEM

Cloud security AWS

Threat intelligence platforms

Descrizione del lavoro

About Indra

Indra is one of the world's leading technology and consulting companies, serving as a technological partner for the core business operations of customers worldwide. The company is a global leader in providing proprietary solutions across the Transport and Defence sectors, as well as in Digital Transformation Consulting and Information Technology through its affiliate, Minsait, particularly in Spain and Latin America.

Indra's business model is built around a comprehensive portfolio of proprietary products and solutions, with a strong focus on innovation and high-value technology. In the 2023 financial year, Indra achieved revenues of €4.34 billion, employing more than 58,000 people across over 46 countries, with business operations in more than 140 countries.

At Indra, innovation is in our DNA. We are committed to advancing the digitalisation of transport to deliver more sustainable, safe, reliable, resilient and accessible mobility and infrastructure. Our solutions help reduce accidents, improve safety and protect passengers and critical infrastructure. We also support more efficient and environmentally responsible transport management by optimising public resources, reducing carbon emissions, promoting sustainable mobility and improving air quality.

Our approach is underpinned by four key principles:

• Leadership – Generating real impact through tangible results.
• Flexibility – Enhancing proximity to customers and differentiating Indra from its competitors.
• Focus – Providing clear direction and driving specialisation across our business.
• Reliability – Building trust and long-term relationships through experience and excellence.

As part of a recently awarded ticketing project, Indra has an exciting opportunity for an experienced Cyber Security Operations Manager to join its growing team in Dublin, Ireland.

Role Overview

Indra is seeking an experienced Cyber Security Operations Manager to join its growing team in Ireland, supporting the delivery and ongoing operation of its Next Generation Ticketing (NGT) Managed Service.

The role will be responsible for coordinating and overseeing operational information security across live IT infrastructure, cloud environments, networks and payment systems. Working closely with internal service delivery, engineering and operational teams, as well as external security providers, the successful candidate will ensure that security controls are effectively implemented, monitored and continually improved.

A key aspect of the position will be maintaining a secure, compliant and resilient operational environment, with particular emphasis on payment security, PCI DSS and P2PE compliance, vulnerability management, incident coordination and security governance.

The successful candidate will combine strong technical security knowledge with the ability to coordinate operational activities, manage risk and engage effectively with a range of technical and business stakeholders.

Key Responsibilities

Cyber Security Operations & Service Management

• Lead and coordinate day-to-day operational security activities across live IT, cloud, infrastructure, network, end-user and payment environments.
• Ensure agreed security controls are implemented, maintained and operating effectively across AWS, on-premises infrastructure and payment systems.
• Work closely with service delivery and engineering teams to identify security requirements and ensure appropriate controls are incorporated into operational processes.
• Provide security oversight across incident, problem, change and release management activities, ensuring security risks and actions are appropriately addressed.
• Develop and maintain operational security procedures, technical documentation, runbooks and control records.
• Coordinate operational security governance activities, ensuring risks, incidents, remediation plans and improvement initiatives are regularly reviewed and reported.

Security Monitoring & Incident Management

• Coordinate the response to security alerts and incidents, including initial triage, investigation, escalation, evidence collection and incident documentation.
• Manage the operational relationship with Security Operations Centre (SOC) providers, ensuring effective monitoring, communication and incident response.
• Monitor SOC performance, identify recurring issues and coordinate appropriate service improvements.
• Work with technical teams and security providers to improve monitoring coverage, threat detection and incident response capabilities.
• Ensure lessons learned from security incidents are incorporated into operational procedures and security controls.

Risk & Vulnerability Management

• Coordinate the identification, assessment and ongoing management of operational cybersecurity risks.
• Oversee vulnerability management activities, including reviewing scan results, prioritising findings, assigning remediation actions and monitoring progress.
• Ensure vulnerabilities and security weaknesses are addressed within agreed timescales, escalating overdue actions and significant risks where necessary.
• Maintain accurate records of security risks, remediation activities, accepted exceptions and supporting evidence.
• Coordinate cyber threat intelligence activities, assessing emerging threats and their potential impact on organisational infrastructure, suppliers and payment environments.

Payment Security & Compliance

• Oversee operational security controls within Cardholder Data Environments (CDE), including access management, logging, monitoring and vulnerability management.
• Support ongoing compliance with PCI DSS and Point-to-Point Encryption (P2PE) requirements.
• Maintain security control evidence and coordinate audit activities, external assessments and requests from compliance assessors.
• Track audit findings and corrective actions, ensuring remediation is completed and appropriately evidenced.
• Ensure approved cryptographic and key-management procedures are followed across payment environments.
• Monitor adherence to identity and access management requirements, including Multi-Factor Authentication (MFA) and privileged access controls.
• Produce and present cybersecurity performance reports, including KPIs, KRIs, incident trends, vulnerability metrics and compliance status.

Third-Party Management & Continuous Improvement

• Coordinate operational security reviews of third-party suppliers and service providers, assessing security controls and tracking agreed improvement actions.
• Work with internal and external stakeholders to maintain appropriate security standards, procedures and operational documentation.
• Coordinate third-party penetration testing and security assessments, ensuring findings are prioritised and remediation actions are completed.
• Provide security guidance and assurance for projects, cloud deployments, infrastructure changes and payment system enhancements.
• Review proposed technical designs and changes to ensure alignment with organisational security standards and compliance requirements.
• Coordinate security awareness initiatives and phishing simulations, promoting good security practices across operational and business teams.
• Identify opportunities to improve security processes, strengthen operational controls and automate repeatable activities.
• Support compliance with relevant regulatory and information security requirements, including NIS2, DORA and PCI DSS.

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline, or equivalent practical experience.
• Minimum of 7–10 years' experience within information security, cybersecurity operations, IT operations or a related technical environment.
• Experience coordinating operational security activities and working with technical teams, service providers and business stakeholders.
• Practical experience of security monitoring, SIEM platforms, security incident management and alert triage.
• Experience managing vulnerability assessments, remediation activities and operational security risks.
• Good understanding of cloud and infrastructure security, particularly AWS, alongside network security and endpoint protection.
• Knowledge of identity and access management, including MFA, privileged access management, logging and monitoring controls.
• Ability to interpret security findings, assess operational risks and coordinate appropriate remediation activities.
• Strong communication and organisational skills, with the ability to manage competing priorities and maintain accurate technical documentation and audit evidence.

Desirable Requirements

• Professional cybersecurity qualification such as CISSP, CISM or equivalent.
• Experience working within PCI DSS or P2PE-compliant environments.
• Previous experience supporting payment systems, payment devices or financial transaction environments.
• Knowledge of ISO 27001 and familiarity with NIS2 and DORA regulatory requirements.
• Experience working with managed SOC providers, SIEM platforms, infrastructure service providers or external security assessors.
• Experience supporting security audits, penetration testing and regulatory compliance assessments.
• Previous experience within a managed services, transport, ticketing or other business-critical operational environment.

Expected Outcomes

• Effective coordination and management of day-to-day operational cybersecurity activities.
• Security incidents and alerts are appropriately investigated, escalated and documented.
• Vulnerabilities, operational risks and remediation actions are actively managed, with clear ownership and reporting.
• PCI DSS and P2PE security controls remain operationally effective, with appropriate evidence maintained for audits and assessments.
• Third-party security providers and suppliers are effectively managed, with service performance and improvement actions monitored.
• Security procedures, monitoring capabilities and operational controls are continually reviewed and improved.
• A secure, resilient and compliant environment is maintained across Indra's live IT and payment services.

Comprehensive Employee Benefits Package

• Annual Leave: 24 days per annum + Irish bank holidays (options to buy/sell days)
• Pension – 7% employee and 7% employer
• Private medical insurance (including dental & optical)
• Flexible/hybrid working options
• Charitable initiatives;
• Learning and development programs
• Travel & expense allowances; and
• Innovative & collaborative work environment.