Information Security Officer

Base Location: Leopardstown, Dublin

Contract Type: Permanent, Full-time

Seniority Level: Experienced

Reporting To: Digital & IT Director, Ayvens Ireland Chief Information Officer, Ayvens Insurance

Who are Ayvens?

Ayvens is a global leader, managing over 3.3 million vehicles across 42+ countries. We specialise in full-service leasing, flexible subscription services, fleet management, and multi mobility solutions. Serving a diverse client base from large corporations to SMEs and individuals we are committed to achieving net-zero emissions and driving digital transformation within our industry. Our solutions are cutting-edge, and we embrace values like authenticity, curiosity, commitment, and collaboration, fostering an inclusive environment where diversity of thought and experience is celebrated.

Ayvens is closely aligned with our majority shareholder, Société Générale, a top-tier European bank, with over 119,000 employees across 62 countries. Together, we deliver innovation, sustainability, and a customer-centric approach to the global market.

Where does this role fit in?

The Information Security Officer plays a critical role as part of Ayvens’ first line of defense (LOD1). As a key player in Ayvens’ cybersecurity strategy, the successful applicant will help drive security best practices and create a culture of compliance, playing an integral role in protecting our customers, our employees, and our brand. The successful applicant will ensure Ayvens Ireland and Ayvens Insurance demonstrably adhere to cybersecurity policies, information security standards, regulatory requirements, and internal rules. The role is split 50/50 between the two business units with dual reporting lines, offering a unique opportunity to influence and lead security across two closely aligned organisations.

Who are Ayvens Ireland?

Located in Leopardstown, with a secondary office in Ballymount, Ayvens Ireland is a market leader in vehicle leasing and fleet management. We manage 20,000 vehicles on Irish roads, and with a team of over 100 employees, we operate as a small, agile local team, fully integrated with Ayvens and Société Générale. We combine the flexibility of an SME with the governance and reach of a multinational.

Who are Ayvens Insurance?

Based in Leopardstown, Ayvens Insurance is an international motor insurance company active in 29 countries, providing competitive coverage for Ayvens fleet clients. Our mission is to deliver an integrated direct insurance service fully embedded in fleet management. Our vision is to become a data-driven, driver-centric insurer that innovates to manage risk and serve emerging mobility segments.

What will you be doing?

IT Risk Management

• Identify, assess, and document IT risks across applications, infrastructure, and business processes for both business units.
• Maintain comprehensive risk registers and track mitigation actions.
• Conduct risk assessments and provide actionable treatment plans.
• Implement, monitor, and maintain Level 1 permanent controls in line with global security standards.
• Act as a key escalation point for non-compliance, leading remediation and continuous improvement efforts.

Policy & Standards Alignment

• Ensure compliance with global IT security policies and local regulatory frameworks (ISO 27001, GDPR, NIST, etc).
• Serve as the primary point of contact for the enforcement of group security frameworks within both business units, ensuring local implementations align with global objectives.

Security Operations & Incident Support

• Lead IT security incident response, escalation, and resolution for both business units.
• Support user access governance, manage privileged accounts and conduct identity reviews, strengthening the overall security posture of the organisation.
• Design and deliver security awareness training to enhance organisational security culture.

Reporting & Documentation

• Develop and maintain comprehensive dashboards and security reports for both business units, ensuring key stakeholders are kept informed of the IT risk landscape.
• Provide clear, regular updates on IT risk status and control effectiveness to both line managers and senior leadership.

What would our ideal candidate have?

• A minimum of 3 years' experience in IT risk, security operations, or IT compliance.
• Strong knowledge of IT general controls, cybersecurity frameworks (ISO 27001, NIST, etc), and regulatory environments such as GDPR.
• Experience managing IT risk across multiple business units or working with diverse stakeholder teams, balancing different needs and priorities.
• Strong organisational skills with the ability to manage dual reporting lines and prioritize tasks effectively across both business units.
• Excellent communication and stakeholder management skills, with the ability to simplify complex security concepts for non-technical audiences.
• Proactive, results-driven approach with meticulous attention to detail.
• Ability to work independently and collaboratively, adapting to established processes and ensuring quality delivery.

What qualifications or background would be useful?

• A bachelor’s degree in IT, Information Security, or a related field would be ideal.
• Certifications in relevant IT security frameworks, such as ISO 27001, CISM, or CompTIA Security+, are desirable.

What does Ayvens offer you?

• A collaborative, innovative work environment supporting learning and career growth.
• Work-life balance through flexible working options.
• Training and development opportunities aiding personal and professional growth.
• Competitive salary and benefits, including a bonus scheme tied to achievable targets.
• Pension scheme and additional perks for a comprehensive employee experience.

How do I apply?

Ready to make an impact at Ayvens? We’d love to hear from you.

Submit your resume and cover letter to [email protected], telling us why you're the right fit for the role.