Senior ICT Cybersecurity Manager

eir business talent; Dublin; Hybrid; EUR 111,000 - 166,000; Part time

Benefits offered by this job

Hybrid work arrangement

Job summary

eirbusinesstalent is seeking a Senior ICT Cybersecurity Manager for a public sector client in Dublin. You will provide hands-on leadership, governance and operational oversight of cybersecurity across the organisation, acting as the internal owner of cyber risk and managing third-party security providers.

The role involves risk, compliance, audit, incident management and security operations oversight, with a hands-on approach where required.

Qualifications

• 7+ years in cybersecurity leadership & strategy.
• Experience leading complex security programmes.
• Vendor management and service oversight.
• Mature GRC environments and audits.
• Formal cyber security qualification (CISSP, CISM).

Responsibilities

• Lead cyber risk and governance for the client.
• Oversee third-party security providers and audits.
• Define and maintain security roadmap and policies.
• Coordinate incident response and security operations oversight.
• Report risk and incidents to executives.

Skills

Cybersecurity leadership

Governance & risk

Third-party risk management

Security operations oversight

Incident management

Stakeholder communication

Education

CISSP/CISM certification or equivalent

Tools

UpGuard platform

Job description

Senior ICT Cybersecurity Manager

• Day rateContract
• Hybrid working model – (2 days onsite (Dublin 4) / 3 days offsite)

Our public sector client is seeking an experienced IT Security Manager to provide hands‑on leadership, governance, and operational oversight of cybersecurity across the organisation. This role will act as the internal owner of cybersecurity, responsible for managing cyber risk, overseeing third party security providers and ensuring that they maintain a proportionate, effective, and auditable security posture.

The role combines:

• IT/Cyber Security leadership and governance
• Risk, Compliance, Audit and Third‑party assurance
• Operational oversight of security services
• Practical, hands‑on involvement where required

Mandatory Requirement

You must have the equivalent of:

• 7+ years of extensive professional experience in Cybersecurity Management & Strategy
• Experience in leading complex projects/programmes.
• Experience in Service Management, including Vendor Management
• Experience in maturing GRC (Governance, Risk & Compliance) environments
• A recognised formal qualification in Cyber security (eg. CISSP, CISM etc)

Experience, Competencies & Skillset required:

1. Relevant Experience in Cybersecurity Leadership Roles Experience working in similar roles as an IT Security Manager, Security Lead or equivalent (e.g. vCISO), including operating in organisations with limited internal security capability. As part of the response, Tenderers must include a minimum of one relevant example.
2. Experience in Cybersecurity Governance, Risk and Compliance Experience in establishing and operating cybersecurity governance frameworks, including maintaining risk registers, supporting audit/compliance activities, and developing practical policies and standards.
3. Experience in Third Party Risk Management (TPRM) Demonstrable experience in delivering third-party/vendor security risk assessments, including onboarding due diligence, ongoing vendor monitoring, and risk reporting. Experience using tools such as UpGuard (or equivalent platforms) will be considered advantageous.
4. Experience in Security Operations Oversight and Incident Management Experience overseeing outsourced security services (e.g. MSSP/SOC providers), including reviewing incidents, alerting outputs, and vulnerability reporting. Experience in developing and managing incident response processes and coordinating responses to security incidents.
5. Experience in Supplier Management and Multi-Vendor Environments Experience managing third-party IT and security providers, including performance oversight, escalation, and coordination across multiple suppliers operating within a shared responsibility model.
6. Communication and Stakeholder Engagement Skills Experience communicating clearly and effectively with a range of stakeholders, including technical and non-technical audiences and senior management. The response should include examples of how the resource has managed competing priorities, explained risks/issues, and supported decision making.

Key Deliverables

• Act as lead cybersecurity professional, providing clear direction and ownership of cyber risk
• Establish and operate a practical security governance framework aligned to size and risk profile
• Define and maintain the Client / supplier operating model and responsibilities (RACI)
• Develop and manage a prioritised cybersecurity roadmap
• Provide regular executive-level reporting on risk, incidents, and overall security posture

Risk Management & Compliance

• Own and maintain the IT and cybersecurity risk register, including risk identification, assessment, and treatment tracking
• Conduct and facilitate risk assessments across systems and services
• Provide support for audit and compliance activities (e.g. GDPR, NIS2 readiness, internal/external audit)
• Maintain and evolve security policies, standards, and procedures in a pragmatic, implementable manner

Third-Party Risk Management

• Establish and operate a structured third-party / vendor security risk management process
• Lead delivery of third-party risk assessments across suppliers and service providers
• Own and operate the UpGuard platform (or equivalent), including:
  • vendor onboarding and assessment
  • risk scoring and monitoring
  • remediation tracking
• Work with internal stakeholders to ensure:
  • appropriate due diligence for new suppliers
  • ongoing monitoring of critical vendors
• Provide clear reporting on third-party risk exposure and remediation status

Security Operations Oversight

• Act as the primary interface with:
  • any existing or future MSSP providers
• Review and challenge:
  • security incidents and reports
  • alerting and investigation outputs
  • vulnerability findings and remediation progress
• Ensure that security issues impacting our client are:
  • understood
  • prioritised
  • actioned effectively

Incident Management & Response

• Develop, maintain, and own the Incident Response Plan
• Lead internal coordination during cybersecurity incidents
• Act as escalation point between our client, OGCIO, and third parties
• Conduct post‑incident reviews and lessons learned activities
• Plan and facilitate periodic incident response tabletop exercises

Supplier & Stakeholder Management

• Manage security aspects of key third-party and managed service providers
• Provide informed challenge and oversight to suppliers where required
• Act as liaison between:
  • IT
  • business stakeholders
  • governance / compliance functions (e.g. DPO, Legal)

Hands‑On Security & Project Support

• Provide practical input into:
  • projects and new systems
  • architecture and design decisions
• Review vulnerability outputs and track remediation progress
• Identify and address security gaps not covered by shared services

Ref: EBT8385

Candidates must be eligible to work full time and long term in the location specified or currently hold a valid appropriate long term work Visa to apply.

eirbusinesstalent, eir business and our clients are equal opportunity employers who seeks to recruit and appoint the best available person for a job regardless of marital / civil partnership status, sex (including pregnancy), age, religion, belief, race, nationality and ethnic or national origin, colour, sexual orientation or disability. eirbusiness talent, eirbusiness and our clients apply all relevant Data Protection laws when processing your Personal Data.

If you choose to apply to this opportunity and share your CV or other personal information with eirbusiness talent, eirbusiness and our clients, these details will be held by us in accordance with our privacy policy used by our recruitment team to contact you regarding this or other relevant opportunities at eirbusiness talent and eirbusiness.