Cyber Security Officer

Unijobs on behalf of our public sector client have a requirement for a suitably skilled Cyber Security Officer to join their team. The duration of this post is 12 months initially with possible extensions thereafter. This role will be Flexible/Hybrid Working – The successful candidate must be able to attend client sites as required. Flexibility in working hours to meet the needs of the service is essential.

Working 35 hours per week, the successful candidate will be employed as an agency employee and will be paid an hourly rate of €32.86 per hour based on an annualised salary of €60,013. You will accrue 30 days annual leave per year and paid Bank Holidays.

Principal Duites and Responsibilities

• Supporting the development and operationalisation of cybersecurity governance frameworks, policies, procedures, and control mechanisms.
• Contributing to the implementation of compliance and assurance activities aligned with statutory obligations and national frameworks.
• Monitoring and reporting on the effectiveness of cyber GRC activities using defined metrics such as key performance indicators (KPIs), key risk indicators (KRIs), and control effectiveness assessments.
• Supporting stakeholder engagement and communications with governing and regulatory bodies, including the NCSC and other competent authorities.
• Supporting the integration of cybersecurity requirements into projects, procurements, and business processes through collaboration with ICT, legal, enterprise risk, and assurance teams.
• Support the development and maintenance of governance artefacts (e.g. policies, standards, templates), ensuring alignment with legal and regulatory expectations.
• Assist with the coordination, tracking, and closure of internal and external cyber audit actions, regulatory findings, and assurance items.
• Maintain awareness of emerging regulatory trends (e.g. NIS2, national policies) and assist in assessing their impact on client cyber governance practices.
• Conduct cyber risk assessments across business units, systems, and projects; guide the identification and mitigation of cyber risks.
• Operate and maintain the Cyber Risk Register, ensuring risks are clearly documented, assessed, reviewed, and linked to mitigation plans.
• Support the implementation and operation of the client’s cyber controls framework, including technical, organisational, and procedural safeguards.
• Assist with the identification, mapping, and validation of controls to recognised standards and statutory obligations (e.g. ISO/IEC 27001 Annex A, NIST 800-53, NIS2 Annex I).
• Support the deployment and operational use of cyber control tooling (e.g. cyber GRC platforms, control libraries, automation dashboards).
• Act as a liaison between the cyber GRC function and business areas, ICT, project teams, and external partners to promote consistent cybersecurity practices.
• Support engagement with national authorities (e.g. NCSC) on regulatory reporting, NIS2 compliance, and incident management as required.
• Build strong working relationships across the client to enable consistent application of cyber GRC principles and build a shared understanding of cyber risk and compliance requirements.
• Assist in the preparation of dashboards, reports, and insights for senior management, executive groups, and external authorities.
• Assist in evaluating and implementing improvements to cyber GRC tooling, processes, and documentation as part of continual improvement.

Eligibility Criteria

• Demonstrate a minimum of three years’ experience of working in cybersecurity, risk management, audit, and / or compliance in a complex or regulated environment, and this must be clearly demonstrated in the submission.
• Demonstrate experience of working collaboratively with multiple internal and external stakeholders in a healthcare, public sector or cybersecurity or ICT environment.

Desirable:

• A professional or third level qualification in cybersecurity, risk certifications or regulatory compliance or computer related discipline (e.g. CISSP, CISM, CRISC, ISO 27001).

Professional Knowledge & Experience

• The ability to analyse risks, identify controls, and assess compliance in line with relevant frameworks.
• Knowledge of cybersecurity regulations and frameworks including NIS and NIS2, NIST CSF and ISO 27001 and how to apply them in practice.
• Significant experience in a healthcare, public or complex enterprise environment.
• An understanding of the security risk implications associated with engagements with a wide range of stakeholders.
• Extensive written communications experience and skills, including the production of reports and briefings.
• Strong communication skills with the ability to work effectively with and influence stakeholders.
• Highly proficient in the Microsoft 365 suite, including MS Word, Excel and Outlook

*This position may be subject to Garda Vetting and Foreign Police Clearance, if applicable you will be required to obtain these prior to commencing in this role*

Unijobs is an equal opportunities employer