Head of Information Security

Vhi; Dublin; Hybrid; EUR 150,000 - 210,000; Full time

Job summary

Vhi in Dublin/Kilkenny (Hybrid) is seeking a Head of Information Security to lead strategy, governance and risk management, reporting to the Board and executive committees. This CF1 role balances regulatory requirements with practical, risk-based security delivery to protect customers and enable growth.

You will build a strong security culture, partner with IT, GRC and business teams, and lead a high-performing team to implement pragmatic controls and resilience across the organisation.

Qualifications

• A third level qualification in an area underpinning ICT or equivalent.
• A security professional qualification such as CISSP.
• Minimum 10 years' experience applying/managing information security controls in a similar environment.
• Strong IT background and understanding of business processes.

Responsibilities

• Develop and maintain Vhi's Information Security Framework aligned with risk appetite and regulatory requirements.
• Define and deliver the Information Security strategy with annual plans, budgets, risk appetite statements and security KRIs.
• Provide regular reporting and insights to the Board, Executive and Risk Committees on security risks and controls.
• Monitor the security risk profile and control environment; respond to threats and vulnerabilities.
• Lead operational resilience, business continuity and cyber incident preparedness.
• Advise the business on information security matters and third-party security risks.
• Champion a strong security culture through awareness, education and training programs.
• Partner with business and technology teams to embed security policies within the Risk Management Framework.
• Support business change initiatives with pragmatic, risk-based security guidance.

Skills

Leadership

Communication

Strategic thinking

Risk management

Team development

Education

Third level ICT qualification

CISSP or equivalent

Job description

Role Title: Head of Information Security

Location: Dublin/Kilkenny (Hybrid)

Contract: Permanent, Full Time

PCF/CF: CF1 role

Lead Vhi's Information Security strategy and help shape the future of cyber resilience across one of Ireland's leading healthcare organisations. This is a unique opportunity for an experienced security leader to influence Board-level decision making, build a strong security culture, and deliver practical, risk-based solutions that protect our customers, support innovation, and enable business growth in an evolving digital landscape. This is a Central Bank regulated CF1 role.

What Will You Do

Information Security Strategy & Governance

• Develop and maintain Vhi's Information Security Framework, ensuring alignment with risk appetite, regulatory requirements, industry best practice and customer expectations.
• Define and deliver the Information Security strategy, including annual plans, budgets, risk appetite statements and security KRIs.
• Provide regular reporting and insights to the Board, Executive and Risk Committees, supporting informed decision-making on security risks and controls.

Security Risk Management & Resilience

• Monitor the organisation's security risk profile and control environment, ensuring effective responses to emerging threats and vulnerabilities.
• Lead the security aspects of operational resilience, business continuity and cyber incident preparedness.
• Advise the business on information security matters, regulatory requirements and third-party security risks.

Security Culture & Business Engagement

• Champion a strong security culture across the organisation through awareness, education and training programmes.
• Partner with business and technology teams to embed security policies, standards and controls within the wider Risk Management Framework.
• Support business change initiatives by providing practical, risk-based security guidance that enables innovation and growth.

Leadership & Stakeholder Management

• Lead, develop and inspire the Information Security team, ensuring high performance and delivery against agreed service levels.
• Chair and manage the Information Security Forum and build strong relationships across the business, regulators, customers and external stakeholders.
• Work collaboratively with IT, Governance, Risk and Compliance teams and senior leadership to deliver effective and pragmatic security solutions.

What will you need to be successful:

Education & Knowledge

• A third level qualification in an area underpinning ICT or equivalent.
• A security professional qualification e.g. CISSP.
• Minimum 10 years relevant experience of applying/managing information security controls in a similar business environment.
• Strong background in IT and understanding of business processes.
• Demonstrates good knowledge of information security methodologies.

Skills and Abilities:

• Ability to express ideas in a clear & concise manner - verbally & in writing and to communicate with impact across a wide range of internal and external stakeholders
• Strategic thinker with the ability to analyse & translate complex challenges or concepts into concrete actions & approaches.
• Solution orientated with a continuous improvement and commercial mindset and ability to identify and influence change.
• Self-starter with ability to manage multiple tasks and deliverables within tight timeframes.
• Proven track record of successfully managing and developing a high performing team.
• Demonstrates a good understanding of risk management and use of risk in decision making.
• Demonstrate alignment with Vhi Values.

Sustainability

At Vhi, we believe that the health of people and the health of the planet are interconnected. That’s why we’re on a journey towards an integrated model of healthcare that puts people and the planet at its heart.

Our Commitment to Inclusion and Accessibility

At Vhi, we are on a continuous journey to build an inclusive and diverse workplace where everyone feels valued and respected. We welcome applications from individuals of all backgrounds, experiences, abilities, and perspectives.

We are committed to providing reasonable accommodations at every stage of the recruitment process for candidates with disabilities, neurodivergence, or medical conditions. If you require an accommodation, please contact , and a member of our recruitment team will be in touch via email.

Any information you provide will be treated confidentially within the recruitment team and used solely for the purpose of determining and providing appropriate accommodations during the application and recruitment process.

Vhi is an equal opportunities employer.