Information Security & Risk Lead
€70-95k, 15% Bonus, pension, healthcare, 25 days holidays
**This role will be hybrid in Dublin 2 days per week**
A leading global financial services organisation is seeking an Information Security & Risk Lead to support its investment management division across Ireland and the EMEA region.
This is a strategic role acting as the dedicated information security and risk for the investment management business providing oversight, governance, and advisory services.
The position will ensure compliance with internal control frameworks and emerging regulatory requirements such as DORA.
The successful candidate will combine strong risk and governance expertise with excellent stakeholder management and communication skills, capable of embedding themselves within the business and influencing at senior levels.
Key Responsibilities
- Lead and mature the Information Security and IT Risk Management framework for the company.
- Oversee IT control governance, evidence testing and remediation tracking to ensure compliance with internal and external requirements.
- Define and monitor key security and risk metrics (KPIs/KRIs) aligned with enterprise standards.
- Provide subject matter expertise on information security policies, standards, and risk classification processes.
Experience and Skills
- In depth experience in Information Security, IT Risk or Audit/Compliance within a financial services or regulated environment.
- Proven ability to govern and enhance IT control frameworks (e.g., NIST, SOX or similar).
- Strong communication and relationship-building skills, able to engage with senior stakeholders and influence effectively.
- Experience with GRC tools
- Knowledge of DORA or other operational resilience frameworks.
- Excellent written and verbal English skills.
- Strong analytical and reporting capability; ability to work independently and deliver results.
Preferred:
- Familiarity with investment management or financial markets.
- Professional certification (e.g., CISA, CISM, CISSP, CRISC) beneficial but not essential.