Information Security Officer

Cpl Group; Dublin; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

CPL Group in Dublin seeks an Information Security Officer to lead its information security and IT risk management function in a hybrid setup. The role shapes cybersecurity strategy, governance, and operational resilience across the business.

You will collaborate with risk, compliance, audit, legal, HR and technology teams; embed enterprise security frameworks such as ISO 27001; drive security maturity, incident management, third‑party risk, and security awareness.

Qualifications

• Significant experience in information security within a regulated environment.
• Proven experience embedding enterprise security and IT risk frameworks.
• Strong knowledge of cybersecurity governance, security assurance, and third‑party risk management.
• Experience with recognised standards such as ISO 27001.
• Excellent communication and stakeholder management at executive level.
• Demonstrated leadership and ability to develop high‑performing teams.

Responsibilities

• Develop and deliver the organisation's information security strategy and roadmap.
• Lead enterprise‑wide cybersecurity governance, risk management, and assurance activities.
• Establish and maintain security policies, standards, controls, and reporting frameworks.
• Oversee information security risk assessments, incident management, and third‑party security risk programmes.
• Promote a strong security culture through awareness, training, and stakeholder engagement initiatives.
• Provide expert guidance on technology projects, operational resilience, change initiatives, and emerging cyber risks.
• Collaborate with senior leadership, risk, compliance, audit, legal, HR, and technology teams to ensure effective security oversight.
• Lead and develop a high‑performing security function while driving continuous improvement in security maturity and resilience.

Skills

Information security

Governance

Risk management

Leadership

Regulatory compliance

Job description

Information Security Officer

Location: Dublin (Hybrid)

Contract Type: Permanent

An established and highly regulated financial services organisation is seeking an experienced Information Security Officer to lead its information security and IT risk management function. This is a senior leadership role with responsibility for shaping and delivering the organisation's cybersecurity strategy, governance framework, and operational resilience agenda.

The successful candidate will provide strategic leadership across all aspects of information security, ensuring that policies, controls, and risk management practices effectively protect critical information assets while supporting business objectives and regulatory requirements.

Key Responsibilities

• Develop and deliver the organisation's information security strategy and roadmap.


• Lead enterprise-wide cybersecurity governance, risk management, and assurance activities.


• Establish and maintain security policies, standards, controls, and reporting frameworks.


• Oversee information security risk assessments, incident management, and third-party security risk programmes.


• Promote a strong security culture through awareness, training, and stakeholder engagement initiatives.


• Provide expert guidance on technology projects, operational resilience, change initiatives, and emerging cyber risks.


• Collaborate with senior leadership, risk, compliance, audit, legal, HR, and technology teams to ensure effective security oversight.


• Lead and develop a high-performing security function while driving continuous improvement in security maturity and resilience.

About You

You will bring significant experience in information security, cybersecurity, technology risk, or IT governance, ideally gained within a regulated environment. You will have a strong understanding of recognised security frameworks, risk management methodologies, operational resilience, and regulatory expectations.

The ideal candidate will possess:

• Proven experience developing and embedding enterprise security and IT risk frameworks.


• Strong knowledge of cybersecurity governance, security assurance, and third-party risk management.


• Experience working with recognised standards such as ISO 27001 or equivalent frameworks.


• Excellent communication and stakeholder management skills, with the ability to influence at executive level.


• Demonstrated leadership capability and experience developing high-performing teams.

This is an excellent opportunity to join a purpose-driven organisation and play a pivotal role in strengthening security, resilience, and risk management across the business.

#LI-DC2