Principal Architect - Cyber & Information Security
- Dublin
- IT Management
- ICON Full Service & Corporate Support
TA Business Partner
- Full Service Division
About the role
This vacancy has now expired. Please see similar roles below...
Senior Manager, Cyber & Information Security - Ireland, Dublin Hybrid: Office/Remote
ICON plc is a world-leading healthcare intelligence and clinical research organization. We’re proud to foster an inclusive environment driving innovation and excellence, and we welcome you to join us on our mission to shape the future of clinical development.
We are currently seeking a Cybersecurity Manager to join our diverse and dynamic team. The Cybersecurity Manager will be responsible for overseeing the internal and third-party cyber risk management program at ICON. This is a crucial role in ICON’s security program and is expected to deliver key initiatives, provide guidance and expertise to team members and business stakeholders and contribute to shaping the Information Security program and budget.
What You Will Be Doing:- Maintain an internal and third-party cyber risk management framework, policies, and business practices to ensure that a consistent and standardized methodology is implemented. Evaluate and define cyber risk appetite and risk tolerance throughout the organisation. Liaise with cybersecurity stakeholders (i.e., Red Team, Threat & Vulnerability Management, Cyber Threat Intelligence, Security Architecture, Security Engineering, Cyber Assurance) and IT stakeholders (i.e., IT Risk Management, SecOps, Technical Owners, Service Portfolio Managers) to ensure systemic cyber risks are identified, assessed, responded to and monitored. Ensure effective cyber risk assessments are performed and risk assessment results are communicated to Risk Owners and other stakeholders to elicit risk responses in a timely manner. Actively participate in IT Risk Oversight Committee meetings, steer risk remediation activities, and escalate risks where appropriate. Identify solutions to automate/enhance the effectiveness of cyber risk management lifecycle activities via IRM/GRC tools. Maintain a cybersecurity controls library using reputable control frameworks and tailoring/supplementing controls, as necessary. Ensure supplier security assessments are performed effectively and efficiently using a risk-based approach that drives the nature, timing, and extent of due diligence activities. Oversee the execution of continuous monitoring activities for key suppliers, which includes the use of security reputation service providers. Actively participate in the Supplier Risk Oversight Committee to communicate security concerns and initiatives that affect suppliers at ICON. Implement approaches to identify and address shadow IT/vendor activities across the organisation. Escalate supplier and nth-party cyber risks to ICON’s internal and external stakeholders. Advise on scoping new supplier services based on the inherent cyber risk to ICON and consult with Procurement and other Assessment Teams (e.g., Data Privacy, Quality Assurance, Legal & Compliance). Lead and facilitate cybersecurity incidents associated with suppliers or nth parties to ensure notable security incidents are appropriately addressed, and collaborate with ICON’s Cyber Resilience team and other departments (e.g., Data Privacy, Legal & Compliance) as necessary to comply with ICON’s contractual and regulatory obligations. Advise on contracts with suppliers, as necessary, to address cyber third-party risks pertaining to ICON. Lead a team of cybersecurity professionals and oversee operational execution of the risk management and supply chain security service functions. Lead other initiatives and miscellaneous activities within the organisation (e.g., technical security assessments/audits, program maturity assessments, mergers and acquisitions due diligence, security architecture initiatives), as needed. Occasional travel may be required.
- The successful candidate will gain experience of operating in a technically complex, fast-changing and dynamic environment. Working as part of a global security team, the Cybersecurity Senior Manager must be a proven self-starter, leader, and have excellent organisational and communications skills. The ideal candidate will have a genuine passion for Information Security and must have the ability to maintain composure under pressure and work calmly during an emergency. They should also have a solid understanding in the following areas: ISO/IEC 27001 Standards NIST Cybersecurity framework ISO 27005 / ISO 31000 NIST SP 800-39 MITRE ATT&CK Framework Information Security Standards NIST Secure Software Development Framework Strong understanding of Layered Security (defense-in-depth) Proven Problem-solving Skills Network, Cloud and Mobile Security experience is a plus Security Architecture knowledge is a plus At least 5 -10 years in a security related role Bachelor’s degree in computer science, programming, or other related program Significant experience with risk management methodologies, industry standards, managing an Information Security Management System (ISMS) and delivering key aspects of a security program in a regulated environmentInformation security risk & governance experienceSolid vendor management experience across a variety of servicesExperience with managing people and working directly with business and IT management positions (non-technical and technical)Demonstrate a strong awareness of the current threat landscape Nice to Haves: Certifications: Relevant certs e.g. (ISC)2 CISSP, ISACA CISM/CISA/CRISC, SANS GIAC, ISO27k LA/LI; Presented on security topics at security conferences; Familiar with the laws, regulations, industry standards and guidance pertaining to Data Protection and Information Security; Familiarity with pharma, biotech and/or CRO operations or health sector (e.g., H-ISAC experience a plus); IRM/GRC tool experience
What ICON can offer you:
Our success depends on the quality of our people. That’s why we’ve made it a priority to build a diverse culture that rewards high performance and nurtures talent.
In addition to your competitive salary, ICON offers a range of additional benefits. Our benefits are designed to be competitive within each country and are focused on well-being and work life balance opportunities for you and your family.
Our benefits examples include:
- Various annual leave entitlements
- A range of health insurance offerings to suit you and your family’s needs.
- Competitive retirement planning offerings to maximize savings and plan with confidence for the years ahead.
- Global Employee Assistance Programme, LifeWorks, offering 24-hour access to a global network of over 80,000 independent specialized professionals who are there to support you and your family’s well-being.
- Life assurance
- Flexible country-specific optional benefits, including childcare vouchers, bike purchase schemes, discounted gym memberships, subsidized travel passes, health assessments, among others.
Visit our careers site to read more about the benefits ICON offers.
ICON, including subsidiaries, is an equal opportunity and inclusive employer and is committed to providing a workplace free of discrimination and harassment. All qualified applicants will receive equal consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.
If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application process, or in order to perform the essential functions of a position, please let us know or submit a request here
Interested in the role, but unsure if you meet all of the requirements? We would encourage you to apply regardless – there’s every chance you’re exactly what we’re looking for here at ICON whether it is for this or other roles.
Are you a current ICON Employee? Please click here to apply
A better career. A better world. A better you.
Our people are our greatest strength, are the core of our culture and the driving force behind our success. Throughout all levels of the company, our people have a drive to succeed and a passion that ensures what we do, we do well. We help you build exciting and rewarding careers, deliver results to help bring life-changing medicine and devices to market and maintain ICON’s success as an industry leader. See all locations Read more
Day in the life
Similar jobs at ICON
Salary
Location
Ireland, Dublin
Department
Information technology
Location
Dublin
Remote Working
Hybrid: Office/Remote
Business Area
ICON Full Service & Corporate Support
Job Categories
IT Management
Job Type
Permanent
Description
ICON plc is a world-leading healthcare intelligence and clinical research organisation. From molecule to medicine, we advance clinical research providing outsourced services to pharmaceutical, biotech
Reference
JR116187
Expiry date
01/01/0001
Author
Damien KehirAuthor
Damien Kehir