Position Description

The Cybersecurity Compliance team oversees, evaluates, and supports the documentation, assessment, and authorisation processes necessary to assure that existing and new Information Technology (IT) and Operational Technology (OT) systems meet the organisation's cybersecurity compliance requirements. The team manages the cybersecurity compliance framework, conducts cybersecurity compliance assessments and ensures appropriate treatment of cybersecurity compliance issues, and assurance from internal and external perspectives. 

In this role you will be part of a team responsible for cybersecurity compliance activities and applying ESB's compliance management framework with regards to technology and cybersecurity. You will be involved in the analysis, assessment and reporting of cybersecurity compliance, the efficacy of relevant mitigating controls and driving positive data driven change in the control environment if deficiencies are identified. You will be part of a team leading and improving the end-to-end journey of cybersecurity compliance management including cybersecurity compliance framework management, cybersecurity compliance assessments, metric definition, collection and reporting, driving appropriate cybersecurity compliance improvements and reporting across the ESB.

At ESB, we operate one of the most advanced and critical technology landscapes in Ireland. We manage a vast array of enterprise IT and OT technologies. These technologies reside in our state-of-the art data centres, in our power generation plants, and in our critical operations centres. In addition to enterprise IT applications, databases and platforms, we also operate critical SCADA systems, OT and Plant/Industrial Controls Systems and critical Telecoms systems – all requiring the appropriate level of security to protect our business.

Key Responsibilities

Work as part of a team of cybersecurity compliance analysts to oversee, maintain and operate the ESB cybersecurity compliance framework and plan.
Support and develop ESB’s cybersecurity related external regulatory compliance requirements such as Network and Information Security Directive (NIS2), Critical Entities Resilience Directive (CER), Artificial Intelligence Act (AI Act), Digital Operational Resilience Act (DORA), Data Privacy Act (DPA) and other regulatory cybersecurity compliance requirements.
Support the management of ESB’s cybersecurity second line, helping business and technology teams embed in their processes the requirements necessary to operate and demonstrate compliance with ESB’s cyber policies and standards, across a large and diverse set of IT and OT assets, a large supply chain of third parties and partners supporting a wide array of activities.
Support first line activities completing self-assessments for external competent authorities to demonstrate NIS2 compliance and audits of ESBs national critical infrastructure assets.
Maintain and continuously improve ESBs cybersecurity compliance framework and process.
Communicate cybersecurity compliance issues clearly so that the ESB senior management and business leaders’ have an accurate assessment of cybersecurity control compliance and effectiveness.
Act as a subject matter expert for ‘Cybersecurity Compliance by Design’ within ESB technology teams (IT and OT), supporting system owners and projects, with a pragmatic approach to cybersecurity compliance issues in a large, complex environment, with a rapid pace of change and delivery.

Experience and Qualifications

Essential

Relevant 3rd level degree or equivalent work experience.
Hands-on risk and compliance knowledge.
Minimum 3+ years experience in a similar role.
Ability to plan, execute and document activities following established processes and procedures.
Presentation, verbal and written communication skills.
Ability to learn and communicate key cybersecurity & risk management concepts.
Strong proficiency of MS Office suite including Word, PowerPoint, Excel, Visio & SharePoint.

Desirable

Ability to multi-task and work both independently as well as part of a team.
Technical knowledge of a wide range of IT technologies, processes and controls.
Experience and knowledge of NIS2, CER, AI Act, DORA, DPA or other regulatory cybersecurity compliance requirements.
Experience of working in a regulatory compliance function.
Previous experience working in a utility industry would be a bonus.
CRISC, CISSP, CISA or similar certifications would be an advantage but not a requirement.
Knowledge of cybersecurity concepts technologies.

Location

This position will be based in ESB Head Office, 27 Fitzwilliam Street Lower, Dublin.

ESB is committed to smart working – combining digital tools with a culture of trust and empowerment to enable flexible ways of working. The successful candidate may work flexibly within their jurisdiction with attendance at the workplace for in-person collaboration on at least one anchor day per week. All smart working arrangements are subject to manager approval and ongoing review, based on the operational requirements of the role, the team, and the individual.

Reporting To

The successful candidate will report to the cybersecurity compliance team lead.

Why Work with Us?

Opportunity to lead Ireland’s transition to net zero carbon future
Career development through mentoring and training
Corporate Social Responsibility Opportunities
Sports and Social Clubs
Networking opportunities
Credit Union
Generous Pension
Access to staff well-being programmes
Generous parental leave entitlements
Strong values-based and inclusive culture
Strong commitment to diversity, equity and inclusion
Great team environment working to our Core Values: Courageous, Caring, Driven and Trusted

Salary

€48,100 - €56,600 per annum (depending on experience)

Closing Date

4th November 2025

Your application will be held in reserve for 6 months should you be suitable for the role.

CIO, Cybersecurity Compliance Team Member

Benefits

Job Description