Cybersecurity Lead

Intellect; Leinster; Hybrid; EUR 120,000 - 150,000; Full time

Job summary

Intellect seeks an experienced cybersecurity leader to guide governance, risk management, security operations oversight, and third-party risk across a hybrid IT environment in Ireland. The role requires 7+ years of leadership experience, formal certifications, and a track record of maturing GRC programs.

You will manage vendor relationships, oversee MSSP/SOC providers, and drive incident response planning and post-incident reviews. English fluency and stakeholder communication are essential.

Qualifications

• Minimum 7+ years in cybersecurity management and strategy.
• Experience leading complex projects and programmes.
• Experience in service management and vendor management.
• Experience maturing GRC environments.
• Experience in cybersecurity leadership roles (e.g., vCISO).
• At least one example demonstrating cybersecurity leadership.

Responsibilities

• Lead cybersecurity governance, strategy, and risk management.
• Establish security governance frameworks, roadmaps, policies, standards, and procedures.
• Conduct cybersecurity risk assessments and support GDPR, NIS2 readiness and audits.
• Manage third-party security risk assessments, due diligence, monitoring, and remediation.
• Oversee MSSP/SOC services, review incidents, vulnerabilities, and remediation progress.
• Develop and maintain incident response plans, coordinate responses and tabletop exercises.
• Manage supplier performance, escalations, and multi-vendor arrangements.
• Provide cybersecurity input into projects, architecture, and design decisions.
• Communicate security risks and recommendations to technical and business stakeholders.
• Engage stakeholders and manage competing priorities.

Skills

Cybersecurity leadership

Governance & risk management

Security operations oversight

Vendor management

GRC maturity

Incident response leadership

Stakeholder communication

Education

CISSP/CISM certification

Tools

UpGuard

Job description

Intellect is seeking an experienced cybersecurity professional to lead cybersecurity governance, risk management, security operations oversight, third-party risk management, and incident response.

Attendance

Hybrid - Minimum 3 days per week in the office

Contract Start

ASAP

Mandatory Requirements - Experience

• Minimum 7+ years of extensive professional experience in cybersecurity management and strategy.
• Experience leading complex projects and programmes.
• Experience in service management, including vendor management.
• Experience maturing Governance, Risk and Compliance (GRC) environments.
• Experience in cybersecurity leadership roles, such as IT Security Manager, Security Lead, or equivalent (e.g. vCISO).
• A minimum of one relevant example demonstrating cybersecurity leadership experience.

Qualifications

• A recognised formal cybersecurity qualification, such as CISSP, CISM, or equivalent.
• Fluency in English is mandatory - Candidates who are fluent in English but do not hold the certificate may still be considered for evaluation, with proficiency verified during a presentation if shortlisted.
• Evidence of relevant certifications must be provided before contract award.

Key Responsibilities

• Lead cybersecurity governance, strategy, and risk management.
• Establish and maintain security governance frameworks, cybersecurity roadmaps, risk registers, policies, standards, and procedures.
• Conduct cybersecurity risk assessments and support GDPR, NIS2 readiness, and audit/compliance activities.
• Manage third-party and vendor security risk assessments, due diligence, ongoing monitoring, and remediation tracking.
• Operate UpGuard or an equivalent third-party risk management platform.
• Oversee outsourced security providers, including MSSP/SOC services, and review security incidents, alerts, vulnerabilities, and remediation progress.
• Develop and maintain incident response plans, coordinate incident responses, and conduct post-incident reviews and tabletop exercises.
• Manage security-related supplier performance, escalations, and shared-responsibility arrangements.
• Provide cybersecurity input into projects, new systems, architecture, and design decisions.
• Communicate security risks and recommendations effectively to technical teams, business stakeholders, and senior management.
• Cybersecurity leadership and management.
• Cybersecurity governance, risk, and compliance.
• Security operations oversight and incident management.
• Incident response planning and coordination.
• Supplier management and multi-vendor environments.
• Stakeholder engagement and communication with technical and non-technical audiences.
• Managing competing priorities, explaining risks and issues, and supporting decision-making.