PFH Technology Group

Security Engineer

• Lead the cloud security strategy, ensuring robust configuration, monitoring, and protection of HSE’s cloud infrastructure ensuring alignment with national digital health, cybersecurity policies and the overall cybersecurity strategy
• Act as primary contact for senior executives on cyber security matters, delivering clarity, confidence, and actionable insights.
• Represent the CISO’s office in senior governance forums, technical steering groups, and inter-agency security initiatives
• Demonstrated success in leading teams, managing projects, and influencing stakeholders at all levels, including board and executive committees.
• Influence cross-functional and cross-business units to accomplish strategic goals and are able to think rigorously and make hard decisions and trade-offs
• Provides complementary expertise, support, monitoring, and challenge related to security initiatives and risk appetite.
• Oversee the design of secure systems and review application and infrastructure security architectures, ensuring scalability and adherence to security by design principles.
• Oversee the team responsible for day-to-day security operations, including attack surface monitoring and management.
• Work closely with the Engineering team and other technical departments to ensure security is integrated into all development and operational processes.
• Continuously evolve security architecture covering network monitoring, identity management, intrusion detection, and data protection.
• Strengthen the company’s cyber resilience posture through continuous improvement, innovation, and overseeing threat-led testing.
• Ensure all Microsoft cloud solutions comply with relevant global and other EU standards and regulations (e.g. GDPR, NIS2 , EU AI Act, ISO/IEC 42001, etc).
• Review and lead the development of governance frameworks, policies, and risk management procedures for cloud security and resilience.
• Maintain strong oversight of third-party partners and vendors to guarantee quality, resilience, and compliance.
• Hybrid model with regular presence in Dublin office. National travel (1–2 days/month) as required. Availability for critical security incidents as required.

Associate Director, ICT Security