The Commission for Railway Regulation (CRR) is seeking a motivated and capable individual to join its Cybersecurity, Critical Infrastructure and Artificial Intelligence (CCIAI) Division as an Inspector.
This is an opportunity to contribute to an important and developing area of regulation, helping to strengthen cybersecurity, critical infrastructure resilience and the responsible use of artificial intelligence across Ireland's rail and cableway sectors.
We welcome applications from candidates with experience in regulation, governance, risk management, compliance, audit, information technology, public administration, project delivery or related fields.
You do not need to be an expert in all these areas to apply. We are particularly interested in candidates who demonstrate sound judgement, strong organisational and analytical skills, clear communication and a willingness to develop their expertise.
As an Inspector, you will support the CRR in delivering its regulatory responsibilities, working with colleagues, industry stakeholders and other regulatory authorities at national and European levels.
Inspector – Cybersecurity, Critical Infrastructure and Artificial Intelligence (CCIAI)
Commission for Railway Regulation (CRR)
Role Purpose – About the Opportunity
The Commission for Railway Regulation (CRR) is seeking a motivated and capable individual to join its Cybersecurity, Critical Infrastructure and Artificial Intelligence (CCIAI) Division as an Inspector.
This is an opportunity to contribute to an important and developing area of regulation, helping to strengthen cybersecurity, critical infrastructure resilience and the responsible use of artificial intelligence across Ireland's rail and cableway sectors.
We welcome applications from candidates with experience in regulation, governance, risk management, compliance, audit, information technology, public administration, project delivery or related fields.
You do not need to be an expert in all these areas to apply. We are particularly interested in candidates who demonstrate sound judgement, strong organisational and analytical skills, clear communication and a willingness to develop their expertise.
What You Will Be Doing
1. Regulatory Oversight and Compliance
- Support inspections, audits, compliance reviews and supervisory activities.
- Help develop risk-based approaches to regulation under NIS2, CER and the AI Act.
- Review evidence and contribute to regulatory findings and recommendations.
- Assist with incident notifications and associated regulatory responses.
- Monitor emerging cybersecurity, resilience and technology-related risks.
2. Policy, Procedures and Continuous Improvement
- Develop and maintain regulatory policies, guidance and procedures.
- Support case management, incident handling and regulatory coordination.
- Identify opportunities to improve internal systems and processes.
- Contribute to digitisation and organisational improvement.
- Support divisional planning, reporting and governance activities.
3. Communication and Stakeholder Engagement
- Prepare reports, briefings, guidance and recommendations.
- Build relationships with regulated organisations, public bodies and industry representatives.
- Coordinate stakeholder meetings and communications.
- Provide guidance to stakeholders in line with agreed CRR positions.
4. National and European Collaboration
- Support CRR participation in national and European regulatory forums.
- Prepare briefings and coordinate follow-up actions.
- Exchange knowledge and best practice with other regulatory authorities.
- Contribute to a consistent and effective regulatory approach.
Your Initial Priorities
During the initial period, you will focus on four key areas:
- Developing regulatory approaches: Supporting the introduction of risk-based inspection and supervision arrangements for cybersecurity and critical infrastructure resilience.
- Establishing effective procedures: Helping develop processes for case management, incident notifications, regulatory coordination and record keeping.
- Supporting stakeholder engagement: Preparing clear guidance, briefings and communications.
- Building regulatory relationships: Supporting engagement with national and European authorities.
Specialist knowledge of the relevant regulatory frameworks will be developed further through experience in the role.
Who We Are Looking For
We are looking for someone who can work independently, exercise sound judgement, communicate clearly and contribute positively to a developing regulatory function.
You may have developed these skills through the public or private sector, including regulation, governance, compliance, risk management, audit, operations, IT, project management or related professional environments.
We particularly value candidates who can:
- Analyse information and make evidence-based decisions.
- Organise priorities and deliver high-quality work.
- Communicate complex information clearly.
- Build productive working relationships.
- Take ownership of responsibilities and demonstrate initiative.
- Adapt to new challenges and develop specialist knowledge.
Essential Eligibility and Selection Criteria
1. Qualifications
A minimum Level 8 qualification on the National Framework of Qualifications (NFQ) in a relevant discipline.
Relevant disciplines may include engineering, information technology, cybersecurity, risk management, audit, compliance, governance, regulation, public administration or a related field.
2. Professional Experience
Relevant professional experience in one or more of the following, or a comparable environment:
- Regulation, public administration or public service delivery.
- Governance, risk management, compliance or audit.
- Information technology, operational or technical functions.
Previous experience in the rail sector is not essential.
3. Core Skills and Capabilities
- Judgement and analysis: Ability to assess information, evaluate evidence and reach reasoned conclusions.
- Organisation and delivery: Strong planning, prioritisation and time management skills.
- Communication: Ability to prepare clear reports, briefings and recommendations.
- Relationship management: Ability to work effectively with colleagues and external stakeholders.
- Regulatory and technical understanding: Knowledge of public administration, regulation, governance, compliance or risk management, and the ability to understand relevant technical and operational issues.
- Review and assessment skills: Experience supporting reviews, audits, assessments, evidence gathering or similar activities.
- Adaptability and initiative: Ability to work independently and develop expertise in new areas.
4. Other Requirements
- Medical fitness for rail access, where required.
- A full, clean Category B driving licence, or an undertaking to obtain one within the first year of appointment.
Desirable Experience and Qualifications
The following would be advantageous but are not essential to apply.
Regulatory, Risk and Assurance Experience
- Experience in regulation, audit, compliance, risk management or operational oversight.
- Experience in transport, infrastructure, utilities or other regulated sectors.
- Involvement in inspections, investigations, compliance reviews or risk assessments.
- Experience applying governance, risk or regulatory frameworks.
Technical and Sector Knowledge
- Knowledge of cybersecurity, IT, operational resilience, operational technology, digital governance or artificial intelligence.
- Familiarity with rail, public transport, critical infrastructure or other regulated environments.
- Knowledge of relevant EU legislation or experience working with regulatory authorities.
Reporting and Professional Development
- Experience preparing reports, recommendations or decision papers for senior management.
- A relevant postgraduate qualification, recognised professional certification or substantial specialist training.