Cybersecurity Lead

Intellect; Dún Laoghaire; Hybrid; EUR 90,000 - 150,000; Full time

Job summary

Intellect in Ireland seeks an experienced cybersecurity leader to drive governance, risk management, security operations oversight, third-party risk, and incident response. This role offers a hybrid work arrangement with a minimum of three days in the office.

You will shape security strategy, maturity of GRC programmes, and oversee vendor security, MSSP/SOC providers, and incident response planning. The position requires strong stakeholder engagement and clear communication with technical and

Qualifications

• 7+ years of professional cybersecurity leadership and strategy.
• Experience leading complex programmes and projects.
• Service management including vendor management experience.
• Maturing Governance, Risk and Compliance (GRC) environments.
• Roles like IT Security Manager, Security Lead, or vCISO.
• At least one concrete example of cybersecurity leadership.

Responsibilities

• Lead governance, strategy, and risk management for cybersecurity.
• Maintain security governance frameworks, roadmaps, and policies.
• Support GDPR and NIS2 readiness, plus audit activities.
• Manage third-party risk assessments, due diligence, and remediation.
• Operate risk platforms such as UpGuard or similar.
• Oversee MSSP/SOC providers and monitor incidents and vulnerabilities.
• Develop and maintain incident response plans and exercises.
• Manage supplier performance and multi-vendor arrangements.
• Provide security input into projects and system design decisions.
• Communicate risks and recommendations to technical and business stakeholders.
• Engage with stakeholders and manage competing priorities.
• Report to senior management on security posture and readiness.

Skills

Cybersecurity leadership

Governance & risk management

Vendor management

Security operations oversight

Incident response planning

Stakeholder communication

Education

CISSP

CISM

Tools

UpGuard

Job description

Intellect is seeking an experienced cybersecurity professional to lead cybersecurity governance, risk management, security operations oversight, third-party risk management, and incident response.

• Attendance: Hybrid - Minimum 3 days per week in the office
• Contract start: ASAP

Mandatory Requirements - Experience

• Minimum 7+ years of extensive professional experience in cybersecurity management and strategy.
• Experience leading complex projects and programmes.
• Experience in service management, including vendor management.
• Experience maturing Governance, Risk and Compliance (GRC) environments.
• Experience in cybersecurity leadership roles, such as IT Security Manager, Security Lead, or equivalent (e.g. vCISO).
• A minimum of one relevant example demonstrating cybersecurity leadership experience.

Qualifications

• A recognised formal cybersecurity qualification, such as CISSP, CISM, or equivalent.
• Fluency in English is mandatory - Candidates who are fluent in English but do not hold the certificate may still be considered for evaluation, with proficiency verified during a presentation if shortlisted.
• Evidence of relevant certifications must be provided before contract award.

Key Responsibilities

• Lead cybersecurity governance, strategy, and risk management.
• Establish and maintain security governance frameworks, cybersecurity roadmaps, risk registers, policies, standards, and procedures.
• Conduct cybersecurity risk assessments and support GDPR, NIS2 readiness, and audit/compliance activities.
• Manage third-party and vendor security risk assessments, due diligence, ongoing monitoring, and remediation tracking.
• Operate UpGuard or an equivalent third-party risk management platform.
• Oversee outsourced security providers, including MSSP/SOC services, and review security incidents, alerts, vulnerabilities, and remediation progress.
• Develop and maintain incident response plans, coordinate incident responses, and conduct post-incident reviews and tabletop exercises.
• Manage security-related supplier performance, escalations, and shared-responsibility arrangements.
• Provide cybersecurity input into projects, new systems, architecture, and design decisions.
• Communicate security risks and recommendations effectively to technical teams, business stakeholders, and senior management.
• Cybersecurity leadership and management.
• Cybersecurity governance, risk, and compliance.
• Security operations oversight and incident management.
• Incident response planning and coordination.
• Supplier management and multi-vendor environments.
• Stakeholder engagement and communication with technical and non-technical audiences.
• Managing competing priorities, explaining risks and issues, and supporting decision-making.