Head of InfoSec, ICT Risk

LemFi

. Own LemFi’s DORA ICT risk management framework end to end, including policies, risk appetite, control library and annual board review .

Posted 11/5/2026full-timeDublin • IrelandLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in ICT risk management, information security governance, and operational resilience within regulated financial services. Proficient in integrating GRC automation tools and managing third-party risk while ensuring compliance with regulatory standards.

Highest-signal resume keywords

ICT Risk ManagementInformation Security GovernanceISO 27001 ISMSGRC Automation PlatformsDORA Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

ICT RiskInformation SecurityOperational ResilienceIncident ReportingRoot Cause AnalysisThird-Party Risk ManagementVulnerability AssessmentsCloud IntegrationTechnical StandardsRegulatory Requirements

Soft Skills

Concise WritingDecision-Making

Tools & Technologies

GRC ToolsCloud SystemsIdentity ManagementTicketing SystemsAI Tools

Certifications & Qualifications

CISMCISSPCRISCISO 27001 Lead ImplementerISO 27001 Auditor

Industry Keywords

Central Bank of IrelandFinancial ServicesDORANIS2PCI DSSGDPR

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Own LemFi’s DORA ICT risk management framework end to end, including policies, risk appetite, control library and annual board review
Act as the independent ICT risk control function and provide second-line challenge to engineering and the business
Serve as the Central Bank of Ireland point of contact for information security, ICT risk and operational resilience
Manage information requests, inspections and remediation plans
Run major ICT incident classification and reporting within DORA timelines
Work with engineering on incident root cause analysis and remediation
Own ICT third-party risk, including the information register, due diligence, critical-provider contract terms and exit plans
Run the digital operational resilience testing programme, including vulnerability assessments and scenario tests
Track resilience findings through closure
Automate compliance by integrating GRC tooling with cloud, identity, HR and ticketing systems
Own information security policy, awareness training and the ISO 27001-aligned ISMS
Prepare security and resilience reporting for the board, leadership team and regulator, including key risk indicators, risk register and required decisions
Partner with security engineers to translate regulatory requirements into clear, testable controls
Report to the CTO

Requirements

What you’ll need

7+ years in information security, ICT risk or technology risk
At least 3 years in a regulated financial services firm
Experience owning information security or ICT risk governance at a Central Bank of Ireland regulated firm
Direct experience dealing with the Central Bank of Ireland
Working knowledge of DORA and its technical standards
Knowledge of Central Bank of Ireland expectations on operational resilience and outsourcing
Experience building or running an ISMS aligned to ISO 27001
Experience with GRC automation platforms such as Vanta or Drata
Experience integrating GRC platforms with cloud, identity and ticketing tools
Track record managing ICT third-party risk and incident reporting in a regulated environment
Technical understanding of cloud, identity and software delivery
Nice to have: NIS2, PCI DSS or GDPR experience, AWS familiarity, and a CISM, CISSP, CRISC or ISO 27001 Lead Implementer or Auditor certification
Ability to write concise, specific, decision-led materials for boards and regulators
Daily use of AI tools and interest in applying them to GRC work
Must be able to work in the described hybrid model and be based within commuting distance of Dublin, or relocate

Benefits

Comp & perks

Room to own real problems
Global impact
Team support and autonomy
AI tools and automation-focused work
Visa sponsorship may be provided case by case for some roles