29 Security Analyst jobs in Ireland
Security Analyst

Posted 6 days ago
Job Viewed
Job Description
In the Americas, SMBC Group has a presence in the US, Canada, Ireland, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization's extensive global network. The Group's operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.
+ This is a hybrid role, requiring the successful candidate to attend our Tralee office.
+ Current hours of support begin at 7am through until 10pm Monday - Friday, working 7.5 hours each day on a shift rotation basis which changes each week
**Role Description**
SMBC are seeking a detail-oriented and proactive Security Analyst to join our Identity & Access Management (IAM) team. This role is responsible for protecting the integrity, confidentiality, and availability of information by ensuring appropriate security controls are enforced on company assets, while maintaining high standards of availability, resilience, and performance.
The Security Analyst will focus on managing Active Directory, creating and maintaining access packages, and analysing unstructured ServiceNow tickets to support access governance and security operations. The ideal candidate will have at least 2 years of experience in a similar role and a strong understanding of IAM principles. This position works closely with the IAM Engineering team to ensure secure and efficient access management across the organization.
The successful candidate will be process-oriented, possess strong communication skills, and be comfortable liaising with stakeholders at all levels. This role is part of a global support team within a multinational financial services company. Support hours run from 7:00 AM to 10:00 PM (Monday-Friday), with 7.5-hour shifts on a weekly rotation. Occasional planned Saturday work (approximately 5 times per year) and coverage during local bank holidays may be required to support global operations.
This role will report to the Team Lead of Security Analyst Team.
**Role Objectives: Delivery**
+ Manage and maintain Active Directory user and group configurations.
+ Design, implement, and manage access packages and entitlement workflows.
+ Analyse and triage unstructured ServiceNow tickets related to access requests, incidents, and provisioning issues.
+ Collaborate closely with the IAM Engineering team to support automation, policy enforcement, and system enhancements.
+ Ensure compliance with internal security policies and external regulatory requirements.
+ Participate in access reviews, audits, and remediation efforts.
+ Document processes, procedures, and technical configurations for knowledge sharing and audit readiness.
+ Contribute to process improvement initiatives (e.g., Lean) and assist with automation to reduce manual work.
+ Provide an escalation point to IT Support teams for users with access and identification issues. Assist with audits of network and data access to ensure user rights assignments are applied correctly and kept in appropriate scope according to technology policy.
**Qualifications and Skills**
+ 2+ years of experience in a Security Analyst or IAM-related role.
+ Hands-on experience with Active Directory (in Entra & On Prem) and access management tools.
+ Proficiency in ServiceNow, especially in analysing and resolving unstructured tickets.
+ Familiarity with IAM concepts such as least privilege, RBAC, and access lifecycle management.
+ Strong analytical and problem-solving skills.
+ Have strong verbal and written communication skills.
+ Ability to demonstrate a self-motivated and disciplined approach to learning and working.
+ Demonstrate basic knowledge of polices and controls regarding data sharing and access restrictions between restricted parties.
+ Willingness to learn and grow within a team environment
+ Ability to work in a team environment and demonstrate leadership skills when needed.
+ Possess a highly developed sense of personal accountability and follow-through with an ability to effectively prioritize multiple personal tasks, projects, and goals.
**Additional Requirements**
SMBC's employees participate in a hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process.
SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at
Cyber Security Analyst

Posted 6 days ago
Job Viewed
Job Description
In the Americas, SMBC Group has a presence in the US, Canada, Ireland, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization's extensive global network. The Group's operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.
+ This is a hybrid role, requiring the successful candidate to attend our Tralee office.
**Role Description**
SMBC is seeking a Cyber Security Analyst who has a strong passion for Information Security Operations and is interested in building a career at a fast growing and reputable Bank. The Cyber Security Analyst will assist with monitoring, reviewing and performance of audits on security lists. The successful candidate will access logs, policy compliance reports and threat detection. They will be given opportunities to participate in monitoring network traffic for signs of irregular activity that may indicate a breach. You will provide incident response and support in the event of a cyber security event. You will play a key role in troubleshooting and remediate any issues and analyze threats once they have been contained. This role will report to the Cyber Monitoring & Response Team Lead.
**Role Objectives: Delivery**
+ Act as a core member of the Cyber Monitoring & Response in support of the bank
+ Analyze security alerts and respond to security events and incidents.
+ Maintain and update monitoring & response playbooks.
+ Conduct proactive threat hunting.
+ Develop expertise in our monitoring systems and technology and support Threat Detection team developing new detection ideas.
+ Identify opportunities for efficiency, work hand in hand with Security Automation team to automate and improve our response processes.
+ Assist in the implementation and ongoing support of security systems.
+ Execute tasks or support projects to enhance team's capabilities.
+ Follow standards for security excellence within the SOC.
+ Bring a positive outlook and seek to motivate and inspire your fellow team members.
+ Demonstrate understanding of cyber security best practices, risk vectors, mitigation techniques and protection software.
+ Display basic knowledge of network security concepts such as firewalls, proxy servers, email security and suspicious traffic flows.
+ Exhibit proficiency to quickly identify potential cyber security threats from logs and monitoring, and follow steps to minimize impact.
+ Show ability to convey cyber security polices and concepts to employees and conduct training efforts to ensure all employees follow recommended best practices relating to cyber security.
+ Understanding of MITRE Cyber Kill Chain and similar frameworks.
+ Knowledge of security controls related to the detection, analysis, and response (SIEM, EDR, NDR, XDR, UEBA).
+ Knowledge of Windows and Linux systems, Active Directory, Cloud technologies.
**Qualifications and Skills**
+ Bachelors Degree in Cyber Security.
+ Strong organizational, analytical, and problem-solving skills.
+ Have strong verbal and written communication skills.
+ Ability to demonstrate a self-motivated and disciplined approach to learning and working.
+ Ability to work in a team environment and demonstrate leadership skills when needed.
+ Possess a highly developed sense of personal accountability and follow-through with an ability to effectively prioritize multiple personal tasks, projects, and goals.
+ 1- 3 years of experience highly desired
**Additional Requirements**
SMBC's employees participate in a hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process.
SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at
Cyber Security Analyst

Posted 6 days ago
Job Viewed
Job Description
In the Americas, SMBC Group has a presence in the US, Canada, Ireland, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization's extensive global network. The Group's operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.
+ This is a hybrid role, requiring the successful candidate to attend our Tralee office.
**Role Description**
SMBC is seeking a Cyber Security Analyst who has a strong passion for Cyber Resilience and is interested in building a career at a fast growing and reputable Bank. The Cyber Security Analyst will review policy compliance, access logs, and threat detection reports to identify patterns and potential risks. The role involves conducting assessments using frameworks such as NIST SP 800-53, the CRI Profile, and NIST SP 800-160 Volume 2, with a focus on applying threat modeling and threat intelligence to evaluate control effectiveness and organizational resilience. This is a non-technical, analysis-driven position that emphasizes understanding threats and aligning controls to resilience strategies through collaboration and reporting.
This role will report to the Vice President of Cyber Operations.
**Role Objectives: Delivery**
+ Analytical delivery of cybersecurity and resilience assessments.
+ Evaluate control implementation, identify gaps, and support alignment with resilience engineering principles.
+ Synthesizing threat intelligence, interpreting policy compliance data, and contributing to strategic recommendations.
+ Produce executive-level reporting using Power BI, Excel, and PowerPoint, and will track and manage tasks using tools such as ServiceNow, Jira, and other project management platforms.
+ Engagement with internal stakeholders ensures that findings are actionable and support broader organizational objectives related to cyber resilience and compliance.
+ Reporting using tools and project tracking systems is also important, as the analyst will play a key role in communicating insights and supporting resilience planning across the organization.
**Qualifications and Skills**
+ Recommended experience is 3 years in a cybersecurity, risk analysis, or resilience-focused role.
+ Proficiency in Power BI, Excel, PowerPoint, and tools such as ServiceNow and Jira is required.
+ Familiarity with NIST SP 800-53, the CRI Profile, and NIST SP 800-160 Volume 2 is essential, along with the ability to apply threat intelligence in a strategic context.
+ Candidates should have strong analytical skills, with the ability to interpret technical data and engage with business stakeholders.
+ Familiarity with threat modeling, threat intelligence, and resilience engineering principles is desired
+ Experience with cybersecurity principles, resilience frameworks and threat modeling is preferred, and a demonstrated ability to learn and apply new methodologies is essential.
+ Have strong verbal and written communication skills.
+ Ability to demonstrate a self-motivated and disciplined approach to learning and working.
+ Ability to work in a team environment and demonstrate leadership skills when needed.
+ Possess a highly developed sense of personal accountability and follow-through with an ability to effectively prioritize multiple personal tasks, projects, and goals
**Additional Requirements**
SMBC's employees participate in a hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process.
SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at
Senior Security Analyst

Posted 6 days ago
Job Viewed
Job Description
Location: Cork, Ireland - Hybrid (2 days a week on site)
The Cybersecurity GRC Analyst is responsible for providing Governance, Risk and Compliance support to the Cybersecurity team. This position will report to the Head of IT GRC and will be based at the Cork office located in Ireland.
**Your Contribution:**
Be Yourself. Be Open. Stay Hungry and Humble. Collaborate. Challenge. Decide and just Do. Share our passion for Equality and the Environment. These are the behaviors you'll need for success at Logitech. In this role you will:
+ Identify and document business risks, and coordinate remediation of vulnerabilities and threats using repeatable risk assessment methodologies and processes. This may include producing and analyzing output from infrastructure, database, data classifications or web application vulnerability assessments and developing spreadsheets, diagrams, Word documents and reports as requested.
+ Communicate effectively with management, engineers, customers and others regarding the need of cybersecurity and in the implementation and maintenance of appropriate controls (ISO 27001, NIST 800-53) to mitigate significant risks.
+ Train assigned team members on security best practices.
+ Identify and communicate recommended security and control deficiencies for business units. Document and monitor the implementation of controls for technology and business project plans.
+ Help drive the Cybersecurity Compliance and Governance program.
+ Develops and maintains a data inventory, conducting regular reviews and risk assessments.
+ Develops, implements and maintains the data security plan according to Cybersecurity Leadership guidance.
+ Maintains contact and coordination with internal/external audit and prepares responses to audit reports.
+ Provides guidance and risk assessments of new and existing solutions, services, and business processes.
+ Becomes an expert and provides direction around the administration of the GRC platform to ensure compliance program operates efficiently with minimal impact on control owner
+ Develop policy documents with supporting procedures in support of compliance programs.
**Key Qualifications:**
For consideration, you must bring the following minimum skills and behaviors to our team:
+ 3 years of security, information technology or technology risk management related work experience.
+ Two years of GRC experience with a strong understanding of how to design and execute compliance activities
**In addition,** **preferable** **skills and behaviors include:**
+ Strong communication and organizational skills, ability to multitask, strong attention to details, excellent problem solving and follow-up skills required.
+ Work independently, make decisions and multi-task effectively in a very diverse, project oriented environment.
+ Excellent written communication and time management abilities
+ Program Management (using frameworks, establishing policies and controls for compliance requirements)
+ Comfort working with a globally dispersed team relying heavily on communication/collaboration tools
**Education:**
+ A Bachelor's Degree (or equivalent) and 3+ years of experience in one of the following functions: Corporate/Risk Governance, Compliance, Project Management or related areas.
Across Logitech we empower collaboration and foster play. We help teams collaborate/learn from anywhere, without compromising on productivity or continuity so it should be no surprise that most of our jobs are open to work from home from most locations. Our hybrid work model allows some employees to work remotely while others work on-premises. Within this structure, you may have teams or departments split between working remotely and working in-house.
Logitech is an amazing place to work because it is full of authentic people who are inclusive by nature as well as by design. Being a global company, we value our diversity and celebrate all our differences. Don't meet every single requirement? Not a problem. If you feel you are the right candidate for the opportunity, we strongly recommend that you apply. We want to meet you!
We offer comprehensive and competitive benefits packages and working environments that are designed to be flexible and help you to care for yourself and your loved ones, now and in the future. We believe that good health means more than getting medical care when you need it. Logitech supports a culture that encourages individuals to achieve good physical, financial, emotional, intellectual and social wellbeing so we all can create, achieve and enjoy more and support our families. We can't wait to tell you more about them being that there are too many to list here and they vary based on location.
All qualified applicants will receive consideration for employment without regard to race, sex, age, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.
If you require an accommodation to complete any part of the application process, are limited in the ability, are unable to access or use this online application process and need an alternative method for applying, you may contact us toll free at for assistance and we will get back to you as soon as possible.
Security Analyst (OT)
Posted 7 days ago
Job Viewed
Job Description
Security Risk Analyst II
Posted 5 days ago
Job Viewed
Job Description
_Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential._
**Title and Summary**
Security Risk Analyst II
Overview
The Mastercard Technology Risk Team is looking for a security analyst to support the implementation of international standards, processes, best practices and IT frameworks thereby helping the organization to enhance its current security posture.
Responsibilities:
- Oversee compliance and the implementation of design (up-to-date standard operating procedures) and operational effectiveness (testing the validity of procedures periodically).
- Participate in the gathering, documenting, monitoring and preliminary analysis of the information security and technology metrics.
- Identify, test, and report security weaknesses in systems and applications. Participate in the risk management process, including documenting, reviewing and updating systems on a regular basis; contribute in the preparations of internal risk reports.
- Maintaining an understanding of security policies and regulatory compliance (i.e. ISO 27001, PCI, GDPR)
- Monitor technology risk and compliance, and develop, deliver, maintain and monitor IT policies, standards, and best practices.
- Oversee governance and compliance of vulnerability remediation enterprise wide.
- Support special projects as requested; provides ad-hoc support to management.
- Develop effective working relationships with internal and external stakeholders, auditors, process and control owners and functional staff
- Understand and interact with related disciplines through different committees to ensure the consistent application of policies and standards across all technology functions.
Experience Required
- Experience supporting information security, IT audit and/or IT risk management principles.
- Familiarity with risk management processes (e.g., methods for assessing and mitigating risk)
- Conceptual understanding of IT and security controls, networking and information security technologies.
- Knowledge of Risk and Control Framework standards such as ISO 27001, NIST CSF, PCI-DSS.
- Background in developing, and maintaining security policies, processes, procedures and standards.
- Strong analytical and problem-solving skills for design, creation and testing of security controls and systems.
Nice to have
- Experience creating ISMS documentation to integrate the ISO 27001 requirements within the overall organization.
- Successfully completed ISO 27001:2022 Lead Auditor/Lead Implementer certification.
- Successfully completed CISA/CISM Certification.
- Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and IT management (e.g., GDPR, NY DFS Part 500 , MAS TRM etc.)
- Knowledge of Mastercard products and technology, security and other risk management programs and practices. (desired, not required)
- Experience using RSA Archer or equivalent risk tool sets.
Qualifications and Skills
- Bachelor's degree or equivalent combination of education and experience/bachelor's degree in information systems management, computer science, information technology or related field preferred
- Experience in handling certifications, compliance and internal/external information security/cyber security audits.
- Excellent written as well as verbal communication skills. Strong interpersonal skills, including good communication with the ability to articulate ideas in a 2 of 2 precise and concise manner.
- Contribute to work environment that encourages knowledge of, respect for and development of skills to engage with those of other cultures and backgrounds.
- Ability to handle multiple tasks simultaneously and switch between tasks quickly
**Corporate Security Responsibility**
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
+ Abide by Mastercard's security policies and practices;
+ Ensure the confidentiality and integrity of the information being accessed;
+ Report any suspected information security violation or breach, and
+ Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.
Cyber Security Vulnerability Analyst
Posted 10 days ago
Job Viewed
Job Description
Be The First To Know
About the latest Security analyst Jobs in Ireland !
Technology & Cybersecurity Risk Management
Posted 1 day ago
Job Viewed
Job Description
Dublin, Ireland
**Hours:**
35
**Line of Business:**
Risk Management
**Pay Details:**
We're committed to providing fair and equitable compensation to all our colleagues. As a candidate, we encourage you to have an open dialogue with a member of our HR Team and ask compensation related questions, including pay details for this role.
**Job Description:**
**Department: TDGF, Technology and Cybersecurity Risk Management**
**Job title: Vice President, Technology & Data Risk Management**
**Level: 10**
**Location: Dublin, Ireland**
**Job Summary**
Technology and Data Risk Management (TDRM), performs the second line oversight of technology and Cybersecurity Operational Risks for TDGF. The successful candidate will provide independent oversight and challenge to the 1st line of defense and ensures that the risk profiles of the region and legal entities is properly understood and operating in line with Operational Risk Appetite.
The role will report into the Head of TDRM (Europe and Asia-Pacific).
**Accountabilities**
The successful candidate is expected to perform the following activities:
+ Support the Head of Operational Risk in all technology and cyber risk management oversight activities
+ Oversee consistent and effective implementation of the Technology and Cyebersecurity risk management framework and initiatives in TDGF, supporting in broader EAP entities where necessary.
+ Manage the establishment and monitoring of regional and legal entity risk profiles and risk appetite statements
+ Promote a culture of risk management and control, supported by training, tools and advice to the first line in carrying out its accountabilities
+ Review and challenge of Technology Risk Control Self-Assessments (RCSA), Control Testing, Technology Asset Risk Assessments and results, including to ensure that risks and key controls are properly identified and assessed
+ Review, challenge and reporting of Technology and Cyber related Internal Loss events. Establish root cause analysis/deep dives where appropriate and ensure timely remediation of gaps
+ Support Issues Management oversight and analysis and 2A validation of remediation, where required
+ Review of change governance initiatives or projects impacting the EU Entity, providing second line challenge of risks related to in-scope change
+ Represent TDRM in participating in various local and regional meetings/ working groups including the Banking Licence application programme
+ Stay updated on Technology and Cyber Risk developments, regulations, and industry best practices and identify opportunities for continuous improvement.
**Attributes**
The person should possess the following attributes:
+ Excellent communication skills to clearly articulate issues and ideas to different levels of stakeholders
+ Strong analytical and excel skills with an ability to understand complex workflows and excellent attention to detail
+ Strong corporate governance, regulatory knowledge, and time management skills
+ Good interpersonal and teamwork skills to collaborate and build strong relationship with key partners globally and stakeholders across functions
**Requirements**
+ Bachelor's degree from a recognized university or equivalent experience.
+ At least 10 years of relevant experience within the Financial Services industry spent either within 1st line Technology & Control Function
+ At least 3 years in Operational Risk Management (2nd line ORM)
+ Familiarity with the Wholesale Banking Regulatory Environment.
+ Experience in operating in and engaging with technical SMEs across a range of topics including Incident Management, Change Management, Problem Management and technical Control Standards.
**Who We Are**
TD is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we deliver legendary customer experiences to over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to the Bank, those we serve, and the economies we support. We are guided by our vision to Be the Better Bank and our purpose to enrich the lives of our customers, communities and colleagues.
TD is deeply committed to being a leader in customer experience, that is why we believe that all colleagues, no matter where they work, are customer facing. As we build our business and deliver on our strategy, we are innovating to enhance the customer experience and build capabilities to shape the future of banking. Whether you've got years of banking experience or are just starting your career in financial services, we can help you realize your potential. Through regular leadership and development conversations to mentorship and training programs, we're here to support you towards your goals. As an organization, we keep growing - and so will you.
**Our Total Rewards Package**
Our Total Rewards package reflects the investment we make in our colleagues to help them, and their families achieve their well-being goals. Total Rewards at TD includes a base salary and several other key plans such as health and well-being benefits, including medical coverage, paid time off, career development, and reward and recognition programs.
**Additional Information:**
We're delighted that you're considering building a career with TD. Through regular development conversations, training programs, and a competitive benefits plan, we're committed to providing the support our colleagues need to thrive both at work and at home.
**Colleague Development**
If you're interested in a specific career path or are looking to build certain skills, we want to help you succeed. You'll have regular career, development, and performance conversations with your manager, as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities. Whether you have a passion for helping customers and want to expand your experience, or you want to coach and inspire your colleagues, there are many different career paths within our organization at TD - and we're committed to helping you identify opportunities that support your goals.
**Training & Onboarding**
We will provide training and onboarding sessions to ensure that you've got everything you need to succeed in your new role.
**Interview Process**
We'll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.
**Accommodation**
If you require an accommodation for the recruitment / interview process (including alternate formats of materials, or accessible meeting rooms or other accommodation), please let us know and we will work with you to meet your needs.
Federal law prohibits job discrimination based on race, color, sex, sexual orientation, gender identity, national origin, religion, age, equal pay, disability and genetic information.
Risk Management and Controls

Posted 6 days ago
Job Viewed
Job Description
At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.
**The Role**
Kyndryl is the world's largest provider of IT infrastructure services.
**Europe Regulatory Office Mission:** Responsible for the implementation, administration, and oversight of a regulatory and governance program supporting our compliance with EU DORA, NIS 2 and UK CTP Regime.
**Job Summary:** Senior Lead, Risk Management and Controls will be responsible for identifying relevant, regulated accounts and onboarding them to our regulatory compliance program. This role involves participating and coordinating governance activities across first, second, and third lines of defense functions ensuring an integrated approach to compliance. Additionally, the role includes performing regular reviews and controls assessments to identify improvements and track progress as well as playing a key role in regulator examinations. The ideal candidate will have strong skills in risk management, communication and IT security control frameworks.
**Key Responsibilities** **:**
+ Account Identification: Identify relevant, regulated customers, using automation where possible, and provide guidance to those account teams in the onboarding process.
+ Governance: Establish, participate and coordinate governance activities across first (Delivery/Accounts), Second (Security Assurance, Business Controls), and Third (Corporate Audit) lines of defense driving alignment and establishing best practices.
+ Reviews and Controls Assessments: Perform regular reviews of governance/risk activities (MSAC, QCM, SOC) as well as ICT security controls assessments. Design improvements where appropriate and track implementation.
+ Risk Management: Develop and implement risk management strategies to mitigate potential threats and vulnerabilities.
+ ICT Security Controls: Leverage knowledge of ICT security control frameworks to enhance security measures on regulated accounts and infrastructure.
+ Collaboration: Work closely with various stakeholders (BC, CAS, CISO, S&R, Delivery) on cohesive risk management practices.
+ Reporting: Develop, prepare and present appropriate compliance metrics and reporting to senior management and exam teams.
**Who You Are**
Qualifications/Skills:
+ Strong understanding of ICT security control frameworks (NIST; ISO 27002)
+ Excellent analytical, and communication skills.
+ 7+ years experience with corporate governance and related activities.
+ Strong understanding of risk management principles and practices.
+ Ability to work collaboratively with cross-functional teams.
Preferred Certifications/experience:
+ Project Management Professional (PMP)
+ Certification in Risk and Information Systems Control (CRISC)
+ Certified Information Security Manager (CISM)
**Being You**
Diversity is a whole lot more than what we look like or where we come from, it's how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we're not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you - and everyone next to you - the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That's the Kyndryl Way.
**What You Can Expect**
With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter - wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.
**Get Referred!**
If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.
Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. Kyndryl is also committed to compliance with all fair employment practices regarding citizenship and immigration status.
Audit Manager - Information Security and Risk Management
Posted 20 days ago
Job Viewed