Senior Information Security Manager

Auxilion; Dublin; On-site; EUR 110,000 - 120,000; Full time

Job summary

Auxilion in Ireland is seeking a Senior Information Security Engineering Manager to lead our information security and IT risk strategy on a permanent basis. Reporting to the Chief Information Security Officer, you will balance hands-on engineering with strategic leadership, building a secure, compliant environment across data centres.

Initially onsite in South County Dublin with hybrid arrangements as the project progresses, you will drive security governance, risk management, and security

Qualifications

• Requires a third level degree in computer science, IT or related field.
• 5+ years in a Senior Information Security Management role.
• CISSP, CISM or equivalent certification.
• TOGAF/COBiT or similar architectural certification advantageous.
• ISO 27001 implementation through to certification with documentation.

Responsibilities

• Lead information security and IT risk strategy with strong governance and regulatory compliance.
• Own and maintain security policies, standards, and assurance processes.
• Drive risk identification, assessment and reporting; escalate as needed.
• Build and lead the Security function with cross‑functional stakeholders.
• Oversee third party and operational security risks and foster security culture.
• Deliver enterprise‑wide information security programme aligned to priorities.
• Manage security vendor assessments and security awareness training.
• Guide IT change and projects on security requirements and controls.

Skills

Leadership

Governance

IT risk management

Stakeholder engagement

Hands-on security

Education

Bachelor's degree in Computer Science or related field

CISSP or CISM certification

TOGAF or COBIT certification (advantage)

ISO 27001 implementation experience

Tools

Microsoft 365 security stack

PowerShell

Python

SOAR / Sentinel

Microsoft Graph

Job description

Senior Information Security Engineering Manager - €110-120K

A leading construction and Engineering organisation with a strong focus on the design and construction of Data Centres is looking for a Senior Information Security Leader to join them on a contract basis in advance of an upcoming digital transformation project.

Reporting to the Chief Information Security officer, this role shapes and delivers the Organisations information security and IT risk strategy, ensuring strong governance, robust controls, and full regulatory compliance. The Information Security Engineering Manager will protect the Company’s information assets, enhance cyber resilience, and ensure alignment with internal standards while working closely with stakeholders across the business.

While the role is at managerial level, the organisation is looking for someone that will also be a hand's on engineer - A player manager that can develop effective solutions while leading/managing an information security team

Located in South County Dublin, the role will be predominantly based onsite in the initial period with flexibility for hybrid arrangements once the project is properly up and running. This role is permanent, and comes with a highly competitive benefits package

Responsibilities of Role

• Lead the Company’s information security and IT risk strategy, ensuring strong governance, effective controls, and full regulatory compliance.
• Own and maintain security policies, standards, and assurance processes that protect the Company’s data and technology environment.
• Drive security risk identification, assessment, and reporting, ensuring risks are understood, managed, and escalated appropriately.
• Build and lead the Security function, working closely with risk, compliance, audit, legal, HR, and technology teams.
• Oversee third party and operational security risks and champion a strong security culture across the Company.
• Provide governance oversight through security committees, forums, and executive reporting.
• Deliver a strategic, enterprise wide information security and IT risk programme aligned to business priorities.
• Manage vendor security assessments, service provider KPIs, and Company wide security awareness training.
• Guide IT change and project teams on security requirements and technical controls.
• Maintain a unified control framework aligned to global standards and regulatory expectations.
• Lead the Security team to deliver high quality, risk based outcomes.
• Define and deliver the Company’s Information Security Strategy based on ISO 27001 and (1) Maintain Information Security Policies and ensure user education (2) Perform selected operational security activities deliver Security Assurance Framework and (3) Conduct risk assessments and oversee business unit security risk management.
• Third Level degree in computer science, IT or other area relevant to the role
• 5+ Years experience in a Senior Information Security Management role
• Cisco - Certified Information Systems Security Professional (CISSP), CISM or other equivalent professional qualification
• TOGAF, CoBit or other Architectural certification would be particularly advantageous but relevant experience may suffice
• Certification in Business Management, Project Management or other area relevant to the role. Again, relevant experience may suffice for this requirement.
• Demonstrable experience taking an ISO 27001 implementation through to certification, with personal involvement in producing the ISMS, Statement of Applicability and audit-ready documentation.
• Strong working knowledge of the Microsoft 365 security stack, including Defender for Endpoint, Intune, Entra ID, Conditional Access, Defender for Cloud Apps and Purview.
• Hands-on detection engineering and incident response experience, comfortable engineering as well as directing.
• Proven ability to design and build security automation across the existing security stack, using PowerShell with Microsoft Graph, SOAR or Sentinel Logic Apps, and Python, or other appropriate methods.
• Experience leading the security workstream for the enterprise adoption of generative AI, including agentic tooling, is highly valued.
• Experience operating or administering a CTEM, breach-and-attack simulation, or automated penetration testing platform such as Pentera, AttackIQ, Cymulate or SafeBreach.
• Comfortable challenging assumptions and giving honest, constructive critique to internal staff, suppliers and senior stakeholders.

IMPORTANT!

All applicants must have UK right to work status as our client cannot provide any kind of Visa or Work Permit sponsorship at present.