
Head of Information Security – Operational Resilience
CoinJar
full-time
Posted on:
Location Type: Hybrid
Location: Dublin • 🇮🇪 Ireland
Visit company websiteJob Level
Lead
Tech Stack
AWSCloudCyber SecurityRTOS
About the role
- Lead the implementation and maintenance of CoinJar Europe's ICT Risk Management Framework in line with DORA requirements
- Oversee the monitoring and reporting of Key Risk Indicators (KRIs) and ICT risk exposures
- Continuously develop and align ICT governance with DORA standards and Central Bank of Ireland guidance
- As a member of the Risk Management Committee, lead on ICT risk reviews and assessments
- Support vendor due diligence and ongoing monitoring of ICT third-party risks
- Utilise the Vanta platform for continuous control monitoring and evidence collection
- Own the Implementation and testing responsibilities of the disaster recovery plans for critical ICT systems
- Coordinate BCP/DR testing exercises and document lessons learned
- Maintain and monitor Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) for critical functions
- Manage incident response procedures and contribute to post-incident reviews
- Support emergency recovery planning and crisis management protocols
- Maintain security frameworks covering identity and access management (IAM), network security, and endpoint protection
- Monitor access control policies ensuring least-privilege principles
- Oversee vulnerability management programs and coordinate penetration testing activities
- Manage security monitoring tools (SIEM) and respond to security alerts
- Conduct regular security assessments and drive remediation efforts
- Review and approve changes to critical ICT systems affecting CoinJar Europe
- Prepare regular reports for Board of Directors and Senior Management on ICT security and resilience
- Support Internal Audit with ICT control validation and audit evidence
- Develop and Maintain ICT documentation, policies, and procedures
- Liaise with Compliance team on regulatory reporting requirements
Requirements
- Bachelor's degree in computer science, information technology, cybersecurity, or a related field
- 5-8 years of experience in IT security, infrastructure management, or risk management roles
- Hands-on experience designing and testing business continuity/disaster recovery plans
- Practical knowledge of security frameworks (e.g., ISO 27001, NIST) and access control implementation
- Understanding of cloud infrastructure (AWS preferred) and security monitoring tools
- Familiarity with data privacy regulations (GDPR) and security best practices
- Strong problem-solving skills and ability to work independently
- Excellent communication skills with ability to explain technical concepts to non-technical stakeholders
Benefits
- Dynamic work environment within a global platform
- Innovative company looking to grow globally
- Flexible working arrangements
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
ICT Risk Management FrameworkKey Risk Indicators (KRIs)disaster recovery plansvulnerability managementpenetration testingsecurity assessmentsbusiness continuity planningsecurity frameworksaccess control implementationcloud infrastructure
Soft skills
problem-solvingindependent workcommunicationleadershiporganizational skillscollaborationreportinganalytical thinkingattention to detailcrisis management
Certifications
Bachelor's degree in computer scienceBachelor's degree in information technologyBachelor's degree in cybersecurityISO 27001NIST