Cyber Security Operations Manager

About IndraIndra is one of the world's leading technology and consulting companies, serving as a technological partner for the core business operations of customers worldwide. The company is a global leader in providing proprietary solutions across the Transport and Defence sectors, as well as in Digital Transformation Consulting and Information Technology through its affiliate, Minsait, particularly in Spain and Latin America.Indra's business model is built around a comprehensive portfolio of proprietary products and solutions, with a strong focus on innovation and high-value technology. In the 2023 financial year, Indra achieved revenues of €4.34 billion, employing more than 58,000 people across over 46 countries, with business operations in more than 140 countries.At Indra, innovation is in our DNA. We are committed to advancing the digitalisation of transport to deliver more sustainable, safe, reliable, resilient and accessible mobility and infrastructure. Our solutions help reduce accidents, improve safety and protect passengers and critical infrastructure. We also support more efficient and environmentally responsible transport management by optimising public resources, reducing carbon emissions, promoting sustainable mobility and improving air quality.Our approach is underpinned by four key principles:Leadership - Generating real impact through tangible resultsFlexibility - Enhancing proximity to customers and differentiating Indra from its competitorsFocus - Providing clear direction and driving specialisation across our businessReliability - Building trust and long-term relationships through experience and excellenceAs part of a recently awarded ticketing project, Indra has an exciting opportunity for an experienced Cyber Security Operations Manager to join its growing team in Dublin, Ireland.Role OverviewIndra is seeking an experienced Cyber Security Operations Manager to join its growing team in Ireland, supporting the delivery and ongoing operation of its Next Generation Ticketing (NGT) Managed Service.The role will be responsible for coordinating and overseeing operational information security across live IT infrastructure, cloud environments, networks and payment systems. Working closely with internal service delivery, engineering and operational teams, as well as external security providers, the successful candidate will ensure that security controls are effectively implemented, monitored and continually improved.A key aspect of the position will be maintaining a secure, compliant and resilient operational environment, with particular emphasis on payment security, PCI DSS and P2PE compliance, vulnerability management, incident coordination and security governance.The successful candidate will combine strong technical security knowledge with the ability to coordinate operational activities, manage risk and engage effectively with a range of technical and business stakeholders.Key ResponsibilitiesCyber Security Operations & Service ManagementLead and coordinate day-to-day operational security activities across live IT, cloud, infrastructure, network, end-user and payment environmentsEnsure agreed security controls are implemented, maintained and operating effectively across AWS, on-premises infrastructure and payment systemsWork closely with service delivery and engineering teams to identify security requirements and ensure appropriate controls are incorporated into operational processesProvide security oversight across incident, problem, change and release management activities, ensuring security risks and actions are appropriately addressedDevelop and maintain operational security procedures, technical documentation, runbooks and control recordsCoordinate operational security governance activities, ensuring risks, incidents, remediation plans and improvement initiatives are regularly reviewed and reportedSecurity Monitoring & Incident ManagementCoordinate the response to security alerts and incidents, including initial triage, investigation, escalation, evidence collection and incident documentationManage the operational relationship with Security Operations Centre (SOC) providers, ensuring effective monitoring, communication and incident responseMonitor SOC performance, identify recurring issues and coordinate appropriate service improvementsWork with technical teams and security providers to improve monitoring coverage, threat detection and incident response capabilitiesEnsure lessons learned from security incidents are incorporated into operational procedures and security controlsRisk & Vulnerability ManagementCoordinate the identification, assessment and ongoing management of operational cybersecurity risksOversee vulnerability management activities, including reviewing scan results, prioritising findings, assigning remediation actions and monitoring progressEnsure vulnerabilities and security weaknesses are addressed within agreed timescales, escalating overdue actions and significant risks where necessaryMaintain accurate records of security risks, remediation activities, accepted exceptions and supporting evidenceCoordinate cyber threat intelligence activities, assessing emerging threats and their potential impact on organisational infrastructure, suppliers and payment environmentsPayment Security & ComplianceOversee operational security controls within Cardholder Data Environments (CDE), including access management, logging, monitoring and vulnerability managementSupport ongoing compliance with PCI DSS and Point-to-Point Encryption (P2PE) requirementsMaintain security control evidence and coordinate audit activities, external assessments and requests from compliance assessorsTrack audit findings and corrective actions, ensuring remediation is completed and appropriately evidencedEnsure approved cryptographic and key-management procedures are followed across payment environmentsMonitor adherence to identity and access management requirements, including Multi-Factor Authentication (MFA) and privileged access controlsProduce and present cybersecurity performance reports, including KPIs, KRIs, incident trends, vulnerability metrics and compliance statusThird-Party Management & Continuous ImprovementCoordinate operational security reviews of third-party suppliers and service providers, assessing security controls and tracking agreed improvement actionsWork with internal and external stakeholders to maintain appropriate security standards, procedures and operational documentationCoordinate third-party penetration testing and security assessments, ensuring findings are prioritised and remediation actions are completedProvide security guidance and assurance for projects, cloud deployments, infrastructure changes and payment system enhancementsReview proposed technical designs and changes to ensure alignment with organisational security standards and compliance requirementsCoordinate security awareness initiatives and phishing simulations, promoting good security practices across operational and business teamsIdentify opportunities to improve security processes, strengthen operational controls and automate repeatable activitiesSupport compliance with relevant regulatory and information security requirements, including NIS2, DORA and PCI DSSRequirementsDegree in Computer Science, Information Technology, Cybersecurity or a related discipline, or equivalent practical experienceMinimum of 7-10 years' experience within information security, cybersecurity operations, IT operations or a related technical environmentExperience coordinating operational security activities and working with technical teams, service providers and business stakeholdersPractical experience of security monitoring, SIEM platforms, security incident management and alert triageExperience managing vulnerability assessments, remediation activities and operational security risksGood understanding of cloud and infrastructure security, particularly AWS, alongside network security and endpoint protectionKnowledge of identity and access management, including MFA, privileged access management, logging and monitoring controlsAbility to interpret security findings, assess operational risks and coordinate appropriate remediation activitiesStrong communication and organisational skills, with the ability to manage competing priorities and maintain accurate technical documentation and audit evidenceDesirable RequirementsProfessional cybersecurity qualification such as CISSP, CISM or equivalentExperience working within PCI DSS or P2PE-compliant environmentsPrevious experience supporting payment systems, payment devices or financial transaction environmentsKnowledge of ISO 27001 and familiarity with NIS2 and DORA regulatory requirementsExperience working with managed SOC providers, SIEM platforms, infrastructure service providers or external security assessorsExperience supporting security audits, penetration testing and regulatory compliance assessmentsPrevious experience within a managed services, transport, ticketing or other business-critical operational environmentExpected OutcomesEffective coordination and management of day-to-day operational cybersecurity activitiesSecurity incidents and alerts are appropriately investigated, escalated and documentedVulnerabilities, operational risks and remediation actions are actively managed, with clear ownership and reportingPCI DSS and P2PE security controls remain operationally effective, with appropriate evidence maintained for audits and assessmentsThird-party security providers and suppliers are effectively managed, with service performance and improvement actions monitoredSecurity procedures, monitoring capabilities and operational controls are continually reviewed and improvedA secure, resilient and compliant environment is maintained across Indra's live IT and payment servicesBenefitsComprehensive Employee Benefits PackageAnnual Leave: 24 days per annum + Irish bank holidays (options to buy/sell days) Pension - 7% employee and 7% employer Private medical insurance (including dental & optical)Flexible/hybrid working optionsCharitable initiatives;Learning and development programsTravel & expense allowances; andInnovative & collaborative work environment