Senior Cyber Security Manager

Morgan McKinley; Dublin; Sur place; EUR 120 000 - 170 000; Plein temps

Résumé du poste

Morgan McKinley in Ireland is seeking a Senior Cyber Security Manager to oversee the development and implementation of cybersecurity policies, standards and controls across the organisation.

The ideal candidate will bring extensive experience in information security management, enterprise risk, security governance and security operations, and will work with senior management and technology teams to strengthen the organisation's security posture and regulatory compliance.

Qualifications

• CISSP certification is required.
• Significant experience in information security or cybersecurity, including experience in a senior management or leadership position.
• Demonstrable experience managing cybersecurity risks, security controls and information security programmes within a complex organisation.
• Strong knowledge of information security governance, risk management and regulatory compliance.
• Experience overseeing vulnerability management, security incident response, security assessments and remediation programmes.

Responsabilités

• Develop, implement and maintain the organisation's cybersecurity strategy, policies and standards.
• Manage information security risks, ensuring that appropriate mitigation plans and controls are in place.
• Oversee security governance, risk assessments, compliance activities and internal and external audits.
• Monitor the effectiveness of security controls and coordinate remediation activities where deficiencies are identified.
• Provide oversight of security operations, including vulnerability management, threat monitoring, incident response and security investigations.
• Lead the organisation's response to significant cybersecurity incidents, coordinating escalation, recovery and post-incident reviews.
• Work with IT, infrastructure, cloud and application teams to ensure security requirements are incorporated into technology projects and changes.
• Maintain and improve security frameworks and control environments in line with recognised industry standards.
• Manage third-party security assessments and oversee the identification and treatment of supplier-related risks.
• Prepare security reports and risk updates for senior management, providing clear information on key risks, control effectiveness and recommended actions.
• Support business continuity and disaster recovery arrangements, including cyber incident response exercises and resilience testing.
• Manage security improvement initiatives, ensuring that agreed actions are delivered within established timeframes.

Connaissances

Information security management

Risk management

Security governance

Regulatory compliance

Security operations

Incident response

Stakeholder engagement

Leadership

Formation

CISSP certification

CISM

CRISC

CISA

Description du poste

Senior Cyber Security Manager

Role Overview

We are seeking an experienced Senior Cyber Security Manager to oversee the development and implementation of cybersecurity policies, standards and controls across the organisation.

The successful candidate will have a strong background in information security management, enterprise risk, security governance and technical security operations. They will be responsible for assessing security risks, improving the organisation's security posture and ensuring that appropriate controls are implemented and maintained.

The role requires an individual who can work effectively with senior management, technology teams and business stakeholders to manage cybersecurity risks and support the organisation's regulatory and operational requirements.

Key Responsibilities

• Develop, implement and maintain the organisation's cybersecurity strategy, policies and standards.

• Manage information security risks, ensuring that appropriate mitigation plans and controls are in place.

• Oversee security governance, risk assessments, compliance activities and internal and external audits.

• Monitor the effectiveness of security controls and coordinate remediation activities where deficiencies are identified.

• Provide oversight of security operations, including vulnerability management, threat monitoring, incident response and security investigations.

• Lead the organisation's response to significant cybersecurity incidents, coordinating escalation, recovery and post-incident reviews.

• Work with IT, infrastructure, cloud and application teams to ensure security requirements are incorporated into technology projects and changes.

• Maintain and improve security frameworks and control environments in line with recognised industry standards.

• Manage third-party security assessments and oversee the identification and treatment of supplier-related risks.

• Prepare security reports and risk updates for senior management, providing clear information on key risks, control effectiveness and recommended actions.

• Support business continuity and disaster recovery arrangements, including cyber incident response exercises and resilience testing.

• Manage security improvement initiatives, ensuring that agreed actions are delivered within established timeframes.

Essential Requirements

• CISSP certification is required.

• Significant experience in information security or cybersecurity, including experience in a senior management or leadership position.

• Demonstrable experience managing cybersecurity risks, security controls and information security programmes within a complex organisation.

• Strong knowledge of information security governance, risk management and regulatory compliance.

• Experience working with recognised security frameworks and standards, such as ISO 27001 and the NIST Cybersecurity Framework.

• Experience overseeing vulnerability management, security incident response, security assessments and remediation programmes.

• Ability to engage with senior stakeholders and communicate security risks and recommendations clearly.

• Experience managing security projects, competing priorities and cross-functional teams.

• Strong analytical, organisational and decision-making skills.

Desirable Requirements

• Additional relevant qualifications, such as CISM, CRISC, CISA or CCSP.

• Experience implementing or maintaining an ISO 27001 Information Security Management System.

• Knowledge of relevant regulatory requirements, including GDPR, NIS2 or DORA, where applicable.

• Experience with cloud security, identity and access management, security monitoring and security operations.

• Experience managing external security providers, consultants and technology suppliers.

• Experience developing security metrics, management reporting and risk treatment plans.

Personal Attributes

The successful candidate will demonstrate sound judgement, attention to detail and a structured approach to managing security risks. They will be able to work independently, exercise appropriate professional challenge and build effective working relationships across technical and business functions.

They should also be comfortable managing sensitive issues, prioritising competing demands and providing clear, evidence-based recommendations to senior management.

[Company Name] is an equal opportunities employer.