Cybersecurity Engineering & Compliance Lead

Our client, an established, regulated organisation based in Dublin, is hiring a hands-on Cybersecurity Engineering & Compliance Lead. This senior, technical role sits within the IT function, reporting to the Head of IT, and covers the full spectrum of security engineering, operations, and compliance for a hybrid on-premise and cloud environment.

This is not an advisory or oversight-only position - you'll be the one implementing, administering, and monitoring the security platforms that protect the business day to day.

What You'll Do

• Design, procure, and implement technical controls to protect the confidentiality, integrity, and availability of information systems
• Maintain and improve secure firewall rules and policies - this is a core, hands-on part of the role
• Administer and monitor endpoint detection and response (EDR/XDR) solutions
• Investigate and respond to SIEM/SOC incidents, continuously improving detection capabilities
• Administer and improve Web Application Firewall (WAF) configuration
• Manage the application patching platform and coordinate vulnerability remediation
• Administer security aspects of Azure Cloud (IaaS/PaaS), VMware vSphere, and Windows Server/Active Directory
• Coordinate regular network and application vulnerability scans and remediation
• Develop, maintain, and improve system hardening standards and procedures
• Conduct periodic user access reviews
• Develop, maintain, and improve the Information Security Management System (ISMS)
• Maintain ISO 27001 certification, liaising with the external certification body
• Facilitate annual cybersecurity incident response tabletop exercises (TTX) and support disaster recovery testing
• Perform risk assessments on information assets and support company-wide security audits and remediation plans
• Support security training and awareness initiatives across the business

What You'll Bring

Essential:

• 8+ years' experience in cybersecurity or infrastructure roles
• Hands-on firewall engineering experience is essential - you should be comfortable designing, implementing, and maintaining firewall rules and policies, ideally with a networking or network security background underpinning this
• Experience implementing and maintaining an Information Security Management System (ISMS) for ISO 27001
• Experience administering Windows Server and Active Directory security
• Experience in security operations: platform administration, incident handling, vulnerability management, system patching, log analysis, intrusion detection
• Experience with enterprise EDR/XDR security platforms
• Experience administering security aspects of Azure Cloud tenancies (IaaS, PaaS, SaaS)
• Understanding of firewalls, proxies, SIEM, XDR, and IDPS concepts
• Understanding of network security architectures, TCP/IP, the OSI model, and remote access security techniques
• Knowledge of data storage, encryption, HTTPS, TLS, and PKI
• Knowledge of GDPR data privacy legislation
• A relevant cybersecurity certification (or working toward one) - e.g. CompTIA Security+/SecurityX, SSCP, CISM, CISA, CISSP
• A self-starter, comfortable taking ownership of tasks and managing time effectively with minimal supervision

Nice to have:

• Understanding of PCI DSS requirements and experience implementing related controls
• Experience with computer network and application penetration testing
• Project management experience
• A third-level computer science degree or related discipline

Why Apply

• Join a small, collaborative team of developers, infrastructure, and IT support professionals
• Genuine ownership of the security engineering and compliance function - not a documentation-only role
• Competitive salary: €90,000 - €110,000
• Hybrid working - 2-3 days onsite in Dublin

Reperio Human Capital acts as an Employment Agency and an Employment Business.