Information Security Analyst

Project overview

​

Information Security Analyst contractor required , hybrid , Dublin City Centre. Your role will encompass ability to Identify, design, and implement process improvements across all areas of responsibility to enhance efficiency, control effectiveness, and operational resilience. Good working knowledge of ISO27001 ,ITIL, NIS2, PCI-DSS4, GDPR and the EU AI Directive. Oversee the effective operation and continual improvement of the Information Security Management System (ISMS) in alignment with ISO 27001:2022, NIS2, PCI-DSS v4, GDPR, and other relevant regulatory or industry frameworks.

Lead and coordinate internal and external security and compliance audits, ensuring organisational readiness and adherence to required standards.

Call Lindsay O’Leary for further spec details. 00 353 86 8311808

#LI-LO1

• Investigate, resolve, and report on information security incidents, vulnerabilities, and compliance issues.
• Support and participate in internal audit activities, including ISO 27001, PCI DSS, GDPR, and audits of key third‑party service providers, ensuring alignment with best practice controls.
• Provide risk management support for core business services and new project initiatives, including risk identification, assessment, mitigation planning, and documentation.
• Analyse, document, and report on compliance with organisational information security policies, procedures, and control requirements.
• Assist with the execution, review, and follow‑up of vulnerability assessments and penetration tests, collaborating with technical teams to ensure timely remediation of findings.
• Manage and maintain the organisation’s cybersecurity and enterprise risk posture, including Business Continuity and Disaster Recovery (BCDR) considerations.
• Collaborate with the Data Protection Officer on matters relating to data protection, privacy compliance, and personal data handling.
• Maintain and update the ISMS Risk Register and other organisational risk registers, conducting periodic risk assessments of business units against defined control standards and previous audit outcomes.
• Monitor, investigate, and report on fraudulent or malicious activity, including phishing, smishing, and other social engineering threats.
• Drive digitisation and automation of tasks using available organisational tools and platforms.
• Evaluate and recommend new technologies, including AI‑driven solutions, that can support automation, risk reduction, or improved security outcomes.
• Streamline workflows by consolidating overlapping activities, eliminating inefficiencies, and removing tasks that do not contribute meaningful value.
• Good Knowledge of networks, system architectures and IS controls.

Project details

• Start: flexible
• Location: Dublin, IE, IE