Go to application form

Senior ICT Cybersecurity Manager (EBT8385)

Location
Dublin, Ireland
Sector
IT
Salary
Apply with CV for more details
Senior ICT Cybersecurity Manager
 
  • Day rate Contract
  • Hybrid working model - (2 days onsite (in Dublin 4) / 3 days offsite)
 
Our public sector client is seeking an experienced IT Security Manager to provide hands-on leadership, governance, and operational oversight of cybersecurity across the organisation.
This role will act as the internal owner of cybersecurity, responsible for managing cyber risk, overseeing third party security providers and ensuring that they maintain a proportionate, effective, and auditable security posture.
 
The role combines:
  • IT/Cyber Security leadership and governance
  • Risk, Compliance, Audit and Third-party assurance
  • Operational oversight of security services
  • Practical, hands-on involvement where required
 
Mandatory Requirement
You must have the equivalent of:
  • 7+ years of extensive professional experience in Cybersecurity Management & Strategy
  • Experience in leading complex projects/programmes.
  • Experience in Service Management, including Vendor Management
  • Experience in maturing GRC (Governance, Risk & Compliance) environments
  • A recognised formal qualification in Cyber security (eg. CISSP, CISM etc)
 
Experience, Competencies & Skillset required:
  1. Relevant Experience in Cybersecurity Leadership Roles
    Experience working in similar roles as an IT Security Manager, Security Lead or equivalent (e.g. vCISO), including operating in organisations with limited internal security capability. As part of the response, Tenderers must include a minimum of one relevant example.
  2. Experience in Cybersecurity Governance, Risk and Compliance
    Experience in establishing and operating cybersecurity governance frameworks, including maintaining risk registers, supporting audit/compliance activities, and developing practical policies and standards.
  3. Experience in Third Party Risk Management (TPRM)
    Demonstrable experience in delivering third-party/vendor security risk assessments, including onboarding due diligence, ongoing vendor monitoring, and risk reporting. Experience using tools such as UpGuard (or equivalent platforms) will be considered advantageous.
  4. Experience in Security Operations Oversight and Incident Management
    Experience overseeing outsourced security services (e.g. MSSP/SOC providers), including reviewing incidents, alerting outputs, and vulnerability reporting. Experience in developing and managing incident response processes and coordinating responses to security incidents.
  5. Experience in Supplier Management and Multi-Vendor Environments
    Experience managing third-party IT and security providers, including performance oversight, escalation, and coordination across multiple suppliers operating within a shared responsibility model.
  6. Communication and Stakeholder Engagement Skills
    Experience communicating clearly and effectively with a range of stakeholders, including technical and non-technical audiences and senior management. The response should include examples of how the resource has managed competing priorities, explained risks/issues, and supported decision making.
 
Key Deliverables:
Cybersecurity Leadership & Governance
  • Act as lead cybersecurity professional, providing clear direction and ownership of cyber risk
  • Establish and operate a practical security governance framework aligned to size and risk profile
  • Define and maintain the Client / supplier operating model and responsibilities (RACI)
  • Develop and manage a prioritised cybersecurity roadmap
  • Provide regular executive-level reporting on risk, incidents, and overall security posture
 
Risk Management & Compliance
  • Own and maintain the IT and cybersecurity risk register, including risk identification, assessment, and treatment tracking
  • Conduct and facilitate risk assessments across systems and services
  • Provide support for audit and compliance activities (e.g. GDPR, NIS2 readiness, internal/external audit)
  • Maintain and evolve security policies, standards, and procedures in a pragmatic, implementable manner
 
Third-Party Risk Management
  • Establish and operate a structured third-party / vendor security risk management process
  • Lead delivery of third-party risk assessments across suppliers and service providers
  • Own and operate the UpGuard platform (or equivalent), including:
    • vendor onboarding and assessment
    • risk scoring and monitoring
    • remediation tracking
  • Work with internal stakeholders to ensure:
    • appropriate due diligence for new suppliers
    • ongoing monitoring of critical vendors
  • Provide clear reporting on third-party risk exposure and remediation status
 
Security Operations Oversight
  • Act as the primary interface with:
    • any existing or future MSSP providers
  • Review and challenge:
    • security incidents and reports
    • alerting and investigation outputs
    • vulnerability findings and remediation progress
  • Ensure that security issues impacting our client are:
    • understood
    • prioritised
    • actioned effectively
 
Incident Management & Response
  • Develop, maintain, and own the Incident Response Plan
  • Lead internal coordination during cybersecurity incidents
  • Act as escalation point between our client, OGCIO, and third parties
  • Conduct post-incident reviews and lessons learned activities
  • Plan and facilitate periodic incident response tabletop exercises
 
 
Supplier & Stakeholder Management
  • Manage security aspects of key third-party and managed service providers
  • Provide informed challenge and oversight to suppliers where required
  • Act as liaison between:
    • IT
    • business stakeholders
    • governance / compliance functions (e.g. DPO, Legal)
 
Hands-On Security & Project Support
  • Provide practical input into:
    • projects and new systems
    • architecture and design decisions
  • Review vulnerability outputs and track remediation progress
  • Identify and address security gaps not covered by shared services
 
---oOo---
 
Please apply with your CV in Word (preferred) for PDF format.
 
More details are available on successful application.
 
If you are interested in applying for this role, please do so via the relevant link. If you would like to discuss this role in confidence, please apply or contact Chris(dot)Byrne(at)eirbusiness(dot)ie (include your CV).
 
Ref: EBT8385
 
 
 
 
 
 
 



Candidates must be eligible to work full time and long term in the location specified or currently hold a valid appropriate long term work Visa to apply.
  
eir business talent, eir business and our clients are equal opportunity employers who seeks to recruit and appoint the best available person for a job regardless of marital / civil partnership status, sex (including pregnancy), age, religion, belief, race, nationality and ethnic or national origin, colour, sexual orientation or disability. eir business talent, eir business and our clients apply all relevant Data Protection laws when processing your Personal Data.
  
If you choose to apply to this opportunity and share your CV or other personal information with eir business talent, eir business and our clients, these details will be held by us in accordance with our privacy policy used by our recruitment team to contact you regarding this or other relevant opportunities at eir business talent and eir business.