Information Security Engineer – UK or Ireland
Remote
Permanent
Remote
Negotiable
Ref: E19138NB
Job Description
My client is looking for an Information Security Engineer to join their team on a permanent basis. This role offers both remote and hybrid working options in either Ireland or the UK.
My client is looking for an Information Security Engineer to join their team on a permanent basis. This role offers both remote and hybrid working options. You must be living in either Ireland or the UK.
In this role, you will anticipate and defend the company against information security risks. You will build security infrastructure from scratch or update existing systems in response to ongoing changes in the security landscape, including new risks and adherence to applicable regulations, whether on premise or cloud based.
You will also recommend security controls and identify solutions that support the business objective, provide specialist advice and recommend approaches across teams and various stakeholders.
Job Responsibilities
- You will oversee, manage, and report on all risks associated with information security, including all forms of cyber risk and all risks relating to the protection of personal data throughout the business in all locations
- You will perform & supervise vulnerability testing, risk analyses and security assessments
- Review and approve installation of firewalls, VPN, routers, IDS scanning technologies and servers
- You will secure infrastructure, containers, CI/CD pipelines, and introduce guardrails aligned with DevSecOps principles
- Respond immediately to security-related incidents and provide thorough remedial solutions and analysis
- Assist in the assessment of risk to the security of information, assets, and personnel
- You will test security systems to ensure they behave as expected
- Plan, research and deploy robust security controls for any IT project
- Identify and communicate current and emerging security threats and you will deploy security controls to mitigate threats as they emerge
- You will train users in implementation or conversion of systems
- You will identify security design gaps in existing and proposed deployments and recommend changes or enhancements
- Develop & monitor Key Risk Indicators (KRI) and Key Performance Indicators (KPI), relating to the information security controls of the business
- You will define, implement and maintain corporate security policies and procedures
- Assist in management of cyber risk including risk reviews and mitigation planning
- System/application testing validation
- Assistance with audits to ensure smooth progress and least business disruption
- Ensure complete and accurate risk register in place and monitored
- Regularly communicate vital information, security needs and priorities to upper management
Experience Required
- 5+ years’ experience in Information Security
- Strong experience in security tools, solutions, and reporting
- Excellent understanding of Microsoft Azure / Microsoft 365 cloud technologies
- Experience in management of information systems or information security
Essential and Desirable Skills
- Demonstrated ability to identify risks associated with business processes, operations, technology projects and information security programs
- Ability to act as an enterprise security subject matter expert who can explain complex topics to those without a technical background
- Process mapping and data analysis skills
- Analytical skills with an ability to interpret quantitative and qualitative information to achieve objective and produces effective solutions to problems
- Effective verbal and written communication skills
Educational Requirements
- Relevant third level degree qualification in IT
- Relevant certification is preferred (CISSP, CISM, CASP+, MCP)
Working Hours & Benefits
- Remote or hybrid working options
- 37.5 hour work week
- Bonus
- Healthcare
- Pension contribution
- Life assurance
- Additional annual leave