Cyber Security Specialist

Cyber Security Specialist (Senior)

Location: Dublin 1 (Hybrid – 2-3 days on-site)

Contract Type: 12 months (Extendable) – Full-time, Monday to Friday, 9am – 6pm (excluding public holidays)

Start Date: 13th January 2025

Role Overview:

We are seeking a Cyber Security Specialist with a minimum of 7 years of professional experience to join a dynamic IT team supporting security infrastructure. As a senior-level resource, you will be instrumental in safeguarding the organization's systems, managing security incidents, and ensuring compliance with industry best practices. This hybrid role requires onsite work for 2-3 days a week.

You will play a key role in overseeing and implementing cyber security measures, managing security awareness programs, and advising senior management on security-related issues, including GDPR compliance and risk management. The role involves hands-on work with security solutions like MS 365 Defender, SIEM, and Azure PAM dashboards.

Key Responsibilities:

Security Policy & Awareness:

Continuously update and maintain the Information Security Policy (ISP), Standard (ISS), and associated procedures. Ensure user participation in security awareness programs.

Security Incident Management:

Manage the Security Information and Event Management (SIEM) system (MS 365 Defender) to monitor incidents and alerts daily. Ensure that all security incidents are handled according to established procedures and logged.

Gap Analysis & Remediation:

Perform annual security gap analyses and develop a project to remediate identified gaps. Provide management updates to the senior management team, Board of ABP, and Audit & Risk Committee.

Vulnerability & Risk Management:

Ensure adherence to the vulnerability management program and resolve vulnerabilities identified in security scans. Conduct risk assessments for all system acquisitions, developments, and maintenance projects to guarantee security-by-design approaches.

Collaboration with External Providers:

Liaise with Managed Service Providers (MSPs) on security issues. Engage with internal teams to provide guidance on security-related matters, including GDPR, system access, and privileged access management.

Security Upgrades & Projects:

Participate in ICT projects to ensure all systems are developed with a "secure by design" approach. Support the development of security-related systems and infrastructure.

Key Deliverables:

• Update and enforce ABP’s security policies and procedures.
• Maintain daily monitoring of security incidents via MS 365 Defender.
• Ensure high participation rates in security awareness programs.
• Conduct annual gap analyses and provide regular updates to senior management.
• Mitigate identified vulnerabilities through the management of a robust vulnerability program.
• Manage the Risk Management procedure for new system acquisitions.
• Provide regular updates on security incidents and planning.

Essential Qualifications & Skills:

Experience:

Minimum of 7+ years of professional experience in cyber security, with a proven ability to lead complex security projects.

Qualifications:

A degree in ICT or a related field.

English Proficiency:

Certificate under Common European Framework of Reference for Languages at C2 Mastery level or equivalent.

Security Solutions Expertise:

Minimum of 7+ years of hands-on experience with MS 365 Defender, SIEM, firewalls, anti-virus software, and vulnerability management.

Risk & Vulnerability Management:

Minimum of 7+ years of experience in implementing risk management strategies and resolving vulnerabilities in enterprise environments.

Network Security & User Access Management:

Minimum of 7+ years of experience in managing network security and user access management systems, including Azure PAM dashboards.

Desirable Skills:

• Familiarity with GDPR compliance and regulatory security requirements.
• 7+ years of experience with Azure, MS 365 security tools, and other cloud-based security platforms.
• Ability to mentor junior staff and transfer key skills to internal teams.
• Experience collaborating on tenders for outsourced security services.