Cybersecurity, Critical Infrastructure and Artificial Intelligence Regulation Senior Inspector (Grade I)

Commission for Railway Regulation; Dublin; In loco; EUR 70.000 - 95.000; Tempo pieno

Descrizione del lavoro

The Commission for Railway Regulation (CRR) is seeking a Senior Inspector (Grade I) to lead regulatory oversight in cybersecurity, critical infrastructure resilience and AI across Ireland's rail and cableway sectors. You will drive inspection programmes, engage stakeholders and shape regulatory policy within the CCIAI Division.

Ideal candidates combine cybersecurity, governance or risk management expertise with strong leadership and the ability to deliver evidence-based regulatory outcomes in a

Competenze

• Third-level or professional qualification at NFQ Level 8 in a discipline relevant to the role.
• Experience in cybersecurity governance, risk management or regulatory oversight is desirable.
• Strong leadership, analytical and reporting capabilities are essential to deliver regulatory outcomes.

Mansioni

• Lead Regulatory Oversight and Compliance: plan, coordinate and deliver risk-based inspection, supervision, audit and compliance programmes.
• Assess regulatory compliance and support evidence-based regulatory decisions.
• Lead reviews of cybersecurity, resilience and technology-related risks; oversee incident notifications and regulatory responses.
• Develop regulatory policies, procedures and governance for the CCIAI Division.
• Provide leadership and guidance to staff; coordinate workloads and build capability.
• Build relationships with regulated entities and national/international authorities.

Conoscenze

Cybersecurity governance

Regulatory oversight

Audit and assurance

Leadership

Stakeholder engagement

Formazione

NFQ Level 8 or higher

Strumenti

Descrizione del lavoro

The Commission for Railway Regulation (CRR) is seeking an experienced and motivated professional to join its Cybersecurity, Critical Infrastructure and Artificial Intelligence (CCIAI) Division as a Senior Inspector (Grade I).

This is an opportunity to take on a senior role in an important and developing area of regulation, helping to shape how cybersecurity, critical infrastructure resilience and artificial intelligence are regulated across Ireland's rail and cableway sectors.

As Senior Inspector, you will play a key role in developing the division's regulatory approach, leading and coordinating regulatory activities, supporting colleagues and building relationships with regulated organisations and national and European authorities.

We welcome applications from experienced professionals with backgrounds in cybersecurity, governance, risk management, compliance, audit, assurance, regulation, information systems or related technical and operational fields.

Previous experience in the rail sector is not essential. We are particularly interested in candidates who combine sound professional judgement, analytical ability, organisational skills and leadership capability with an understanding of cybersecurity, risk and regulatory oversight.

What You Will Be Doing

The role combines regulatory leadership, technical oversight, stakeholder engagement and organisational development.

1. Lead Regulatory Oversight and Compliance

• Plan, coordinate and deliver risk-based inspection, supervision, audit and compliance programmes.
• Assess regulatory compliance and support proportionate, evidence-based regulatory decisions.
• Lead and contribute to reviews of cybersecurity, organisational resilience and technology-related risks.
• Oversee incident notifications and coordinate appropriate regulatory responses.
• Monitor emerging risks affecting rail and cableway operations, including operational technology, networked systems and artificial intelligence.

2. Develop Regulatory Policies and Procedures

• Contribute to the establishment and ongoing development of the CCIAI Division.
• Develop and implement practical regulatory policies, guidance and operational procedures.
• Establish effective processes for inspections, case management, incident handling, escalation and reporting.
• Support the division's regulatory work programme and strategic priorities.
• Identify opportunities to improve internal systems, processes and operational efficiency.
• Contribute to digitisation, corporate governance and continuous improvement.

3. Provide Leadership and Support to Colleagues

• Provide technical guidance and support to Engineer Grade 2 staff.
• Coordinate workloads, priorities and regulatory activities.
• Support colleagues in developing their technical and professional capabilities.
• Promote collaboration, knowledge sharing and consistent working practices.
• Contribute to effective team planning and operational management.

4. Build Relationships and Represent the CRR

• Develop relationships with regulated entities, government departments, public bodies and industry stakeholders.
• Lead stakeholder engagement, meetings and regulatory communications.
• Prepare reports, briefings, guidance, recommendations and decision papers.
• Represent the CRR at national competent authority groups and relevant European and international forums.
• Collaborate with regulatory counterparts to share knowledge and promote effective regulatory approaches.

Your Initial Priorities

During the initial period in the role, you will focus on four key areas.

• Developing regulatory programmes: Establishing proportionate, risk-based inspection and supervision arrangements for cybersecurity and critical infrastructure resilience.
• Building effective operational processes: Developing procedures for case management, incident notifications, reporting, escalation and workflow coordination.
• Supporting and developing the team: Providing technical guidance, coordinating priorities and supporting professional development.
• Strengthening regulatory engagement: Building relationships with regulated organisations and national and European regulatory authorities.

Who We Are Looking For

We are looking for an experienced professional who can take responsibility for complex work, provide leadership and contribute to the development of an effective regulatory function.

You may have developed your experience in the public or private sector, including cybersecurity, risk management, governance, audit, compliance, assurance, regulation, information technology or other technical and operational environments.

We particularly value candidates who can:

• Lead and deliver: Take ownership of complex activities, manage priorities and achieve high-quality outcomes.
• Exercise sound judgement: Assess technical and regulatory information, evaluate risks and make evidence-based recommendations.
• Communicate effectively: Explain complex issues clearly and prepare high-quality reports and guidance.
• Support and develop others: Provide direction, share expertise and contribute to an effective team.
• Build strong relationships: Engage confidently with colleagues, regulated entities and external authorities.
• Drive improvement: Identify opportunities to strengthen systems, processes and regulatory practices.
• Adapt and develop: Apply existing expertise to evolving regulatory challenges.

Essential Eligibility and Selection Criteria

To be considered for this role, candidates must demonstrate the following.

1. Qualifications

A third-level or professional qualification at Level 8 or higher on the National Framework of Qualifications (NFQ) in a discipline relevant to the role.

Relevant disciplines may include cybersecurity, information systems, engineering, risk management, governance, compliance or a related field.

2. Professional Experience

A minimum of three years' relevant professional experience, preferably gained after qualification, in one or more of the following areas:

• Cybersecurity governance or information security.
• Risk management, compliance or regulatory oversight.
• Audit, assurance or structured assessment activities.
• Comparable technical, operational or regulated environments.

Candidates should demonstrate strong operational and organisational skills and the ability to deliver complex work.

Previous experience in the rail sector is not essential. Relevant experience gained in other regulated, technical or risk-based environments is welcomed.

3. Core Skills and Capabilities

• Cybersecurity and risk expertise: In-depth knowledge of cybersecurity regulations, frameworks and good practice relevant to critical infrastructure and digital resilience.
• Regulatory understanding: A strong understanding of public-sector legislation, regulation, governance and compliance, including the ability to develop knowledge of the CRR's statutory functions.
• Leadership and management: Ability to lead, coordinate and develop a team, plan workloads and support professional development.
• Analysis and judgement: Ability to evaluate complex information, identify risks and develop evidence-based recommendations.
• Audit and assessment experience: Experience conducting or supporting audits, compliance reviews, assessments or structured assurance activities.
• Communication: Excellent written and verbal communication skills, including preparing reports, briefings and recommendations.
• Stakeholder engagement: Ability to build effective relationships with colleagues, regulated organisations, public bodies and other stakeholders.
• Planning and delivery: Proven ability to manage priorities and deliver outcomes to agreed deadlines in technical, regulated or risk-based environments.

4. Other Requirements

• Medical fitness for rail access, where required.
• Possession of a full, clean Category B driving licence.

Desirable Experience and Qualifications

The following would be advantageous but are not essential to apply.

Professional Qualifications and Development

• Relevant professional certifications such as Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) or Certified in Risk and Information Systems Control (CRISC).
• Evidence of ongoing professional development in cybersecurity, risk, governance, compliance or related areas.

Regulatory, Audit and Risk Experience

• Experience leading or supporting security audits, risk assessments, compliance reporting or assurance programmes.
• Experience in lead auditing, IT governance or organisational resilience.
• Experience working within transport, infrastructure, utilities or other regulated or high-risk sectors.

Technical and Analytical Knowledge

• Knowledge of operational technology (OT), industrial control systems or other critical infrastructure technologies.
• Experience assessing complex cybersecurity, resilience or regulatory risks.
• Strong analytical and decision-making skills, including interpreting technical information and developing practical recommendations.
• Proficiency in Microsoft Word, Excel and PowerPoint.