Hybrid Information Security Officer (Part-Time)

Sleep.ai; Dublin; Hybrid; EUR 49,000 - 55,000; Part time

Job summary

SleepScore Inc in Dublin, Ireland, invites an Information Security Officer (part-time, 20 hours/week) to lead the ISMS. You will own audits, governance, risk, and privacy, with authority to drive improvements while reporting to the Director of Engineering – DevOps, IT, Security and Privacy.

The role emphasizes autonomy two days per week and the ability to operate across the full security programme, including vendor security, incident response and training.

Qualifications

• Five or more years in information security with direct ISMS responsibility, not just participation in someone else’s audit.
• Fluency in the ISO 27001 standard: clauses, controls and evidence that satisfies them.
• Willingness to be formally designated in the ISMS, and to be present and answerable during audits.
• Judgement: assess control gaps and propose workable improvements.
• Track record of building or improving security programmes: asset, access, vulnerability, continuity, incident response or training.
• Comfort assigning work to engineering teams you do not manage and following it through.
• Genuine autonomy: two days a week with limited supervision.
• Writing that lands: proposals, register entries, management-review material.
• ISO 27001 Lead Auditor or Lead Implementer fits the role.
• Experience through a full certification or recertification cycle.
• GDPR and data protection practice.
• CISM or CISSP.

Responsibilities

• Audit readiness: internal audits and external surveillance, closing findings with evidence.
• ISMS governance: operating rhythm, audit scheduling, management review inputs, and an accurate statements of applicability.
• Risk register: honest, current, defensible with actionable treatment plans.
• Third-party and vendor security: assessments, supplier register and backlogs.
• Vulnerability follow-through: findings tracked to remediation with SLAs and honest reporting.
• Access and asset reviews: periodic, evidenced, across sites including portable media.
• Policies and procedures: current, cyclical reviews, gaps drafted and proposed.
• Privacy and data protection: retention, inventories, and verifying deletion in connected systems.
• Continuity and incident response: practical exercises, closing gaps and improving plans.
• Training and awareness: end-to-end programme management and tracking.
• The improvement programme: running a live pipeline of improvements.

Skills

Information security

ISMS responsibility

Audits

ISO 27001

GDPR

Judgement

Autonomy

Proposal writing

Education

ISO 27001 Lead Auditor/Lead Implementer

CISSP or CISM

GDPR/Data protection practice

Job description

SleepScore Inc in Dublin, Ireland, invites an Information Security Officer (part-time, 20 hours/week) to lead the ISMS. You will own audits, governance, risk, and privacy, with authority to drive improvements while reporting to the Director of Engineering – DevOps, IT, Security and Privacy.

The role emphasizes autonomy two days per week and the ability to operate across the full security programme, including vendor security, incident response and training.