Cyber Controls Analyst

Unijobs on behalf of our public sector client have a requirement for a Cyber Controls Analyst to join their team. The duration of this post is 12 months initially with likely extensions thereafter. This role will be Flexible/Hybrid Working - The successful candidate must be able to attend client sites as required.

Working 35 hours per week, the successful candidate will be employed as an agency employee and will be paid an hourly rate of €33.52 per hour based on an annualised salary of €61,219. You will accrue 30 days annual leave per year and paid Bank Holidays.

Principal Duties and Responsibilities

• Active involvement in the operation and continuous improvement of the Cyber Controls function through technical assessment, artefacts and evidence review, practical control validation, and risk identification and assessment.
• Work directly with network, infrastructure, platform and system administration teams to understand, and seek agreement on, how technical controls are designed, configured, monitored and maintained.
• Assess whether cybersecurity controls are operating effectively across networks, servers, endpoints, identity platforms, cloud services, administrative tooling ,supporting ICT services.
• Assess cyber controls and risk exposure associated with unmanaged devices, legacy systems and other ICT assets that may not be fully covered by standard endpoint, patching, monitoring or asset management controls.
• Support the development of clear control findings, remediation actions and control improvement plans that can be understood by both technical and non-technical stakeholders.
• Ensure assurance activity is aligned to recognised cybersecurity frameworks and obligations, including the NIST Cybersecurity Framework, ISO/IEC 27001, CIS Controls, NIS2 and other relevant cyber control or compliance requirements.
• Support the implementation and operation of the cyber controls framework, including technical, organisational, and procedural safeguards.
• Assist with the identification, mapping, alignment and validation of controls to recognised standards and statutory obligations (e.g. ISO/IEC 27001 Annex A, NIST 800-53, NIS2 Annex I).
• Active involvement in the deployment and operational use of cyber control tooling (e.g. cyber GRC platforms, control libraries, automation dashboards).
• Collaborate with technical teams, project managers, and procurement leads to ensure controls are embedded in delivery activities, system lifecycles, and supply chain engagements.
• Build strong working relationships across the team to enable consistent application of cyber GRC principles and build a shared understanding of cyber risk and compliance requirements including but not limited to, the following stakeholders
• Network operations and network architecture teams.
• System administration, server, endpoint, identity and cloud platform teams.
• Asset management, endpoint management, medical device support and local ICT teams where unmanaged device risks are identified.

Eligibility Criteria

• A minimum of three years’ relevant experience in cybersecurity, ICT operations, infrastructure support, network operations, system administration, technical assurance or a closely related area.
• A minimum of three years’ practical experience working with technical ICT teams, including network, infrastructure, endpoint, platform or system administration teams.
• A degree or postgraduate qualification in Cyber Security, Information Security, Computer Science, Networking, Infrastructure, Information Technology or a related discipline, or equivalent professional experience.
• Strong technical understanding of system administration controls, including secure configuration, patching, directory services, group policy, privileged access, service accounts, logging, monitoring and endpoint protection.
• Experience reviewing technical artefacts and evidence, identifying control gaps, assessing risk and documenting clear findings, actions and remediation requirements.
• Deep knowledge of unmanaged devices, legacy systems or specialist ICT equipment, including the cyber risks created where assets are not fully covered by standard patching, endpoint protection, monitoring or asset management controls.

Highly Desirable

• Experience in a healthcare, public sector or large complex ICT environment.

Professional Knowledge & Experience - The successful candidate will demonstrate:

• Strong practical knowledge of cybersecurity controls in complex ICT environments, with an understanding of how controls are designed, implemented, assessed, monitored and evidenced.
• Experience working with network, infrastructure, endpoint, platform or system administration teams to review technical controls and support control improvement activity.
• Experience reviewing technical artefact and evidence, identifying control weaknesses and preparing clear findings, remediation actions and risk-based recommendations.
• In-depth awareness of the cyber risks associated with unmanaged devices, legacy systems and specialist ICT equipment, including where standard patching, endpoint protection, monitoring or asset management controls may not fully apply.

*This position may be subject to Garda Vetting and Foreign Police Clearance, if applicable you will be required to obtain these prior to commencing in this role*

Unijobs is an equal opportunities employer