Information Security Analyst

Cpl; Dublin; Hybrid; EUR 65,000 - 90,000; Full time

Job summary

CPL is seeking an Information Security Analyst contractor in Dublin City Centre. The role is hybrid, focusing on identifying, designing, and implementing process improvements to enhance security, resilience, and control effectiveness.

You will oversee ISMS operations aligned with ISO 27001:2022, NIS2, PCI-DSS v4, and GDPR, coordinating audits and data protection matters. You will lead incident response, risk management, and compliance reporting, while driving automation and evaluating AI-driven

Qualifications

• Experience identifying, design and implementing process improvements in information security.
• Strong knowledge of ISO 27001, ITIL, NIS2, PCI-DSS, GDPR and EU AI Directive.
• Ability to lead internal/external security and compliance audits and ensure regulatory readiness.

Responsibilities

• Investigate, resolve, and report on information security incidents and vulnerabilities.
• Support ISO 27001, PCI DSS, GDPR audits and audits of third-party providers.
• Provide risk management support for core business services and new initiatives.
• Analyse and report on compliance with information security policies and controls.
• Assist with vulnerability assessments and penetration testing and follow-up remediation.
• Maintain ISMS risk registers and conduct periodic risk assessments.
• Monitor and report on fraudulent or malicious activity and drive automation.
• Collaborate with Data Protection Officer on data protection matters.
• Evaluate new technologies that improve security and risk reduction.

Skills

IS controls

Risk management

Audit coordination

Regulatory frameworks

Tools

ISO27001

PCI-DSS

GDPR

Job description

Information Security Analyst contractor required , hybrid , Dublin City Centre. Your role will encompass ability to Identify, design, and implement process improvements across all areas of responsibility to enhance efficiency, control effectiveness, and operational resilience. Good working knowledge of ISO27001 ,ITIL, NIS2, PCI-DSS4, GDPR and the EU AI Directive. Oversee the effective operation and continual improvement of the Information Security Management System (ISMS) in alignment with ISO 27001:2022, NIS2, PCI-DSS v4, GDPR, and other relevant regulatory or industry frameworks. Lead and coordinate internal and external security and compliance audits, ensuring organisational readiness and adherence to required standards.

• Investigate, resolve, and report on information security incidents, vulnerabilities, and compliance issues.
• Support and participate in internal audit activities, including ISO 27001, PCI DSS, GDPR, and audits of key third‑party service providers, ensuring alignment with best practice controls.
• Provide risk management support for core business services and new project initiatives, including risk identification, assessment, mitigation planning, and documentation.
• Analyse, document, and report on compliance with organisational information security policies, procedures, and control requirements.
• Assist with the execution, review, and follow‑up of vulnerability assessments and penetration tests, collaborating with technical teams to ensure timely remediation of findings.
• Manage and maintain the organisation’s cybersecurity and enterprise risk posture, including Business Continuity and Disaster Recovery (BCDR) considerations.
• Collaborate with the Data Protection Officer on matters relating to data protection, privacy compliance, and personal data handling.
• Maintain and update the ISMS Risk Register and other organisational risk registers, conducting periodic risk assessments of business units against defined control standards and previous audit outcomes.
• Monitor, investigate, and report on fraudulent or malicious activity, including phishing, smishing, and other social engineering threats.
• Drive digitisation and automation of tasks using available organisational tools and platforms.
• Evaluate and recommend new technologies, including AI‑driven solutions, that can support automation, risk reduction, or improved security outcomes.
• Streamline workflows by consolidating overlapping activities, eliminating inefficiencies, and removing tasks that do not contribute meaningful value.
• Good Knowledge of networks, system architectures and IS controls.