Information Security Officer

TechHeads; Dublin; On-site; EUR 70,000 - 95,000; Full time

Job summary

TechHeads are seeking an experienced Information Security Officer to join their internal Information Security team in Ireland. You will oversee the ISMS, security policies, and controls, and work with IT Operations, HR, Legal and stakeholders to ensure security is embedded in daily operations.

This role focuses on operational security and assurance rather than engineering. You will coordinate access reviews, audits, awareness programs and supplier security assessments to protect sensitive

Qualifications

• 4+ years in an internal security role (e.g., Information Security Officer, IT Security Assurance).
• Practical experience maintaining or supporting an ISO 27001-aligned ISMS.
• Experience coordinating security audits and maintaining security documentation.
• Knowledge of identity and access governance and user access control processes.
• Experience delivering security awareness training and phishing simulations.
• Familiarity with supplier onboarding and third-party security assessments.
• Working knowledge of enterprise IT environments would be advantageous.
• Certifications such as ISO 27001 Lead Implementer, CISM, CISSP or CompTIA Security+ would be advantageous.

Responsibilities

• Maintaining and improving the organisation's ISMS, including policies, procedures, control documentation and evidence.
• Coordinating regular user access reviews and joiner/mover/leaver processes with IT and HR teams.
• Supporting ISO 27001 certification maintenance, including internal audits and evidence gathering.
• Managing information security awareness activities and phishing simulations.
• Reviewing security requirements for suppliers and business applications.
• Working with IT Operations to review security exceptions and remediation actions.
• Supporting governance of information security incidents, including documentation and lessons learned.
• Maintaining security metrics and regular reporting on information security performance.

Skills

ISO 27001 knowledge

Access governance

Security audits

Security awareness training

Third-party security assessments

Stakeholder engagement

Microsoft 365

Entra ID

Documentation & evidence management

Tools

Microsoft 365

Microsoft Entra ID

Job description

Information Security Officer – Information Security & Assurance

TechHeads are working with one of our established clients, who is looking to hire an experienced Information Security Officer to join their internal Information Security team.

This is an opportunity to join an established organisation where information security plays an important role in protecting sensitive business information, supporting day-to-day operations and maintaining the confidence of clients and stakeholders.

The role sits within the organisation's internal technology and security function, with responsibility for maintaining information security standards, overseeing key security processes and ensuring that appropriate controls are consistently applied across the business.

You'll work closely with IT Operations, Infrastructure, HR, Legal and business stakeholders, supporting everything from access governance and security awareness through to supplier security reviews, internal audits and the ongoing maintenance of the organisation's Information Security Management System (ISMS).

This is not a security engineering or SOC position. The focus is on operational information security, security assurance and ensuring that security policies and controls work effectively in practice.

Key Responsibilities:

• Maintaining and improving the organisation's Information Security Management System (ISMS), including security policies, procedures, control documentation and supporting evidence.
• Coordinating regular user access reviews, privileged access reviews and joiner, mover and leaver processes, working closely with IT and HR teams.
• Supporting the ongoing maintenance of ISO 27001 certification, including internal audits, evidence gathering, corrective actions and preparation for external assessments.
• Managing information security awareness activities, including phishing simulations, employee training and targeted awareness campaigns.
• Reviewing security requirements for new suppliers, technology services and business applications, ensuring appropriate information security standards are maintained.
• Working with IT Operations to review security exceptions, track outstanding control actions and ensure agreed remediation activities are completed.
• Supporting the management of information security incidents from a governance perspective, including documentation, lessons learned and follow-up actions.
• Maintaining security metrics, compliance records and regular reporting to provide visibility of information security performance across the organisation.

Requirements:

• 4+ years of experience in an Information Security Officer, Information Security Specialist, IT Security Assurance or similar internal security role.
• Practical experience maintaining or supporting an ISO 27001-aligned Information Security Management System.
• Experience coordinating security audits, maintaining security documentation and managing evidence for internal or external assessments.
• Good understanding of identity and access governance, privileged access reviews and user access control processes.
• Experience delivering or coordinating information security awareness training and phishing simulation programmes.
• Familiarity with third-party security assessments, supplier onboarding processes and security control reviews.
• Working knowledge of Microsoft 365, Microsoft Entra ID and enterprise IT environments would be advantageous.
• Strong organisational, communication and stakeholder engagement skills, with the ability to follow through on security actions across multiple business teams.
• Certifications such as ISO 27001 Lead Implementer, CISM, CISSP or CompTIA Security+ would be advantageous.