Reports To:GroupChief Information Officer

Accountable:Chief Information Officer

Hours of work:37 Hours per Week

Location: Onsite/ Hybrid (Dublin 22 or South County Dublin)

Role Description

The Information Security Manager will oversee the Group’s overall security strategy, put security standards into practice, and ensure continual progress against external common security maturity frameworks (CIS controls)

This role is responsible for securing the operations, both internal and external facing and will be responsible for information security technology decisions and implementation, as the group standardises its security posture. The Information Security Manager will standardise security policies across the group ensuring they are contributing to the overall maturity of the organisation. A key element of the role is working with executive management to determine acceptable levels of risk for the organization

The Information Security Manager willbe a key contributor to the overall digital strategy of the group and will advise in numerous business projects as well as managing 3rd party service providers for external security services such as that exist today.

Qualifications and Experience

• 
  Minimum of 5 years’ experience in information security or a similar IT role
• Strong interpersonal skills with the ability to negotiate with senior stakeholders
• Experience of managing 3rd party service providers and SLA management
• Experience of policy development and risk management
• Experience with formal security risk assessment methodologies (CIS Controls)
• Excellent project management skills
• Professional certification in IT Security - CISA, CISSP, CISM, CRISC, CompTIA etc.
• Understanding of Health sector specific risks and common technologies

Role Responsibilities

• 
  Oversight and management of existing IT Security measures across the Group.
• Assessing current environment and identifying key areas of risk
• Develop security roadmap to standardise security posture across Group
• Standardisation of and creation of security policies where not in place
• Coordination of external and internal IT vulnerability assessments.
• Evaluate emerging cybersecurity and IT technologies for adoption, as well as provide guidance to internal technology and business teams. Maintain knowledge of new guidance or standards that are relevant to the Group
• Project management of technical and business projects in IT Security areas
• Management of 3rd party security providers and services e.g., Security Operations Centre (SOC)
• Reporting the status of group information security to the CIO and wider executive teams
• Manage training and development plans on matters affecting IT security to wider staff and stakeholders
• Coordination and oversight of ongoing internal and compliance audits
• Investigate suspected and actual security incidents in accordance with the security incident management standard, produce reports with recommendations and manage any remedial action that is needed