Information Security Officer

Information Security Officer

Salary: €87,510 - €109,216

Role and Responsibilities

The role of Information Security Officer is an existing role in TII. Successful applicants can expect a challenging, diverse and progressive environment.

In any given year, TII is accountable for the management, oversight and delivery of a wide portfolio of projects, programmes and operations across Ireland’s national roads and light rail public transport networks. TII works with a wide range of third-party service providers in the delivery of its statutory functions.

As for most organisations, IT systems and information security are critical to TII operations. Cyber attack and network/systems breaches have been identified as two of the key risks to TII at an enterprise level. With increased focus on risk management, data protection and IT security in the public sector and a continuously evolving compliance environment, the role of Information Security Officer is a key resource in the management of cyber risk and assists the organisation in achieving compliance and best practice in this area.

The successful candidate will be a member of TII’s Governance & Legal Team and, in collaboration with TII’s IT Team, will be responsible for further developing information security strategies, policies, controls and assessments and for planning cyber incident responses. The role provides assurance to TII’s Executive team, Board and Audit & Risk Committee on information security across the organisation.

Key areas of responsibilities for this role:

The principal duties of the position will include:

· Ensure consistency of approach to Information Security across all of TII;

· Develop information security strategies, policies, controls and cyber incident response plan-ning;

· Develop and manage enterprise-wide cyber security assurance programs covering both TII’s owned systems and infrastructure and services and solutions provided by third parties;

· Create and deliver enterprise-wide security training and awareness programs for TII staff and third parties;

· Reporting issues\concerns and progress to the Head of Governance and Legal;

· Deliver and maintain a security framework that supports compliance with the Public Sector Cyber Security Standards and the NIS2 Directive;

· Run exercises such as phishing simulations to assess the security awareness of TII’s user base;

· Work directly on information security issues within Divisions. In doing so he/she will need to work closely with the Corporate Risk Manager, Data Protection Officer and the Head of IT.

· Work with relevant contract managers to assist and advise on appropriate levels of assurance in information security reporting by third parties;

· Work with internal teams to ensure appropriate contractual requirements regarding Infor-mation Security is provided for all employees and third parties

· Review investigations after breaches or incidents, including impact analysis and recommen-dations for avoiding similar vulnerabilities;

· Where necessary, brief the executive team on status and risks, including taking the role of champion for the overall strategy and necessary budget; and

· Attend, as required, Board/Audit and Risk Committee meetings to provide relevant updates on issues of Information Security and chair the Cyber Security Committee;

· Network with other Public Sector Agencies or groups to keep abreast of developments and initiatives relating to cybersecurity.

· Undertaking such tasks and duties as may be assigned appropriate to the grade.

All the divisions within TII have inter-dependent responsibilities and close cooperation, collaboration and teamwork are required across the whole organisation to meet tight deadlines.

Education & Experience

The successful candidate will be required to demonstrate the key competencies for a Grade 1 position, as well as the following experience and job-specific requirements:

· A third level qualification (NFQ Level 8 or equivalent) in Engineering, Mathematics, Computer Science, Information Systems or other related discipline deemed relevant to the role.

· 7 years’ experience working in an IT related role of which 3 years must be information security related.

· Experience of working with an Information Security standard such as ISO 27001/02 or the NIST Framework

· Previous exposure to a wide range of technologies including the following

o Anti-virus\Malware Protection

o Active Directory and Azure Active Directory

o Mobile Device Management

o Wireless Technologies

o Cloud Services such as AWS and Azure

o Firewalls

o Network Traffic Monitoring and Intrusion Detection\Prevention

o Vulnerability scanning and Penetration Testing tools

· Effective decision maker and ability to work on own initiative

· Experience developing and / or delivering information security training programs

· Proven leadership skills and effective people and relationship management ability

· Good report writing skills

· Excellent communication skills, both written and oral

· Fluency in the English language, both written and oral

Desirable although not essential

· A current specific Security Certification such as Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP).

To apply for, or to locate further information on, these posts please visit our website: https://www.tii.ie/careers/

The closing date for applications is Wednesday 4th November at 12pm.

Transport Infrastructure Ireland is committed to a policy of equal opportunity.