ISMS Lead - ISO 27001 Security (Part-Time, Dublin)

Sleep; Dublin; Hybrid; EUR 49,000 - 55,000; Part time

Job summary

SleepScore Inc is seeking an Information Security Officer on a part-time basis in Dublin, Ireland. The role will own the ISMS day to day and report to the Director of Engineering, DevOps, IT and Privacy, helping keep the management system honest and effective while balancing two days a week in the office.

You will drive governance, risk and compliance activities across asset management, access review, vulnerability handling, incident response and training, delivering practical improvements and

Qualifications

• Five or more years in information security with direct ISMS responsibility.
• Fluency in the ISO 27001 standard: clauses, controls and evidence.
• ISO 27001 Lead Auditor or Lead Implementer is a natural fit for a designated role.
• GDPR and data protection practice.
• Experience through a full certification or recertification cycle.

Responsibilities

• Audit readiness: internal audits and external surveillance.
• ISMS governance: operating rhythm, audit scheduling and management review inputs.
• Risk register: current and defensible with actionable treatment plans.
• Third-party and vendor security: assessments and supplier registry.
• Vulnerability follow-through: remediation tracking with SLAs.
• Access and asset reviews: periodic and evidenced across both sites.
• Policies and procedures: kept current and gaps drafted.
• Privacy and data protection: retention and inventories, verification of deletion.
• Continuity and incident response: running exercises and improving plans.
• Training and awareness: end-to-end program management and tracking.
• The improvement programme: live pipeline of improvements.

Skills

ISMS management

ISO 27001

Security governance

Audits & compliance

Decision making

Job description

SleepScore Inc is seeking an Information Security Officer on a part-time basis in Dublin, Ireland. The role will own the ISMS day to day and report to the Director of Engineering, DevOps, IT and Privacy, helping keep the management system honest and effective while balancing two days a week in the office.

You will drive governance, risk and compliance activities across asset management, access review, vulnerability handling, incident response and training, delivering practical improvements and