Cyber Risk Manager

Role overview

A public sector organisation is looking for an experienced Cyber Risk Manager to join its Cyber Governance, Risk and Compliance function. This is a 12-month temporary assignment with a possibility of being extended beyond the initial term. The role follows a hybrid working arrangement, with onsite attendance required for meetings when needed.

The position is based on a 35-hour working week and is offered through an agency employment arrangement. The pay is €45.49 per hour, equivalent to an annualised salary of €83,081. The successful candidate will also receive 30 days of annual leave each year plus public holidays.

Eligibility

Applicants must already have permission to work in Ireland at the time they apply.

Role purpose

The Cyber Risk Manager will take ownership of the cyber risk function, guiding the team, allocating work effectively, reviewing output quality, and supporting staff growth. This person will be a key escalation point and will help ensure the function delivers against cyber maturity, risk management, and regulatory compliance goals.

Core duties

The role focuses on strengthening cyber risk management across the organisation and ensuring that risks are handled in line with risk appetite, legal obligations, and recognised industry practice.

• Lead the development and continuous improvement of cyber risk management capability.
• Ensure cyber risks are identified, analysed, treated, and reported in accordance with organisational risk appetite, regulatory requirements such as NIS2, and standards including the NIST Cybersecurity Framework.
• Direct and review cyber risk assessments across the organisation, making sure the approach is consistent, relevant stakeholders are involved, mitigation plans are practical, and significant risks are escalated promptly.
• Support the design of a cyber risk programme of work and help review existing risk management practices.
• Work with clinical, operational, digital, and executive stakeholders to help safeguard patient information, clinical systems, and essential health services.
• Act as a dependable professional who demonstrates strong integrity, accountability, and ownership of the cyber risk function.
• Encourage a proactive risk culture across the CISO Office and delivery teams, aligned to organisational strategy and defined risk appetite.
• Build team capability through mentoring, knowledge sharing, identification of training needs, and consistent use of risk methodology, reporting, and escalation processes.
• Oversee the Cyber Risk Governance Group and the Cyber Risk Review Board, ensuring risks are clearly explained, understood, prioritised, and actively managed by senior leaders.
• Lead governance activity for material cyber risks, including decision-making and escalation.
• Develop strong relationships across the organisation so cyber risk management is embedded into strategic projects, procurement activity, and operational delivery.
• Partner with ICT, technical, and compliance teams to assess the effectiveness of security controls and risk treatments.

Experience and qualifications

• A minimum of 5 years’ hands-on experience managing cyber risk in an organisation is required, ideally within the health sector.
• Substantial experience leading a cyber risk, information security risk, technology risk, or similar governance function, including staff management, work prioritisation, output quality review, and engagement with senior decision-makers.
• Practical experience with cyber risk identification, assessment, analysis, and mitigation recommendations.
• Working knowledge of cyber risk frameworks, standards, and regulatory requirements such as NIST CSF, ISO 27001, and NIS2, or comparable equivalents.
• Experience in healthcare or the public sector is an advantage.
• Ability to create or deliver cyber risk training, awareness content, guidance, or communities of practice is desirable.
• A degree or MSc in Cyber Security, Information Security, Risk Management, IT, or a related subject is preferred, although equivalent professional experience may also be accepted.
• Professional certifications such as CRISC, CISM, or CISSP are highly desirable.

Additional conditions

This role may require Garda Vetting and, where relevant, Foreign Police Clearance. If these checks apply, they must be completed before starting work.

The employer is an equal opportunities organisation.