Cyber Security Process Specialist

As a key member of the Generation Cybersecurity Team, this role supports the Generation Cybersecurity Manager in safeguarding Generation & Trading from cybersecurity threats and ensuring compliance with regulatory requirements, such as the NIS Directive. The role involves collaborating with the OT Cybersecurity Team (EMP) and local experts to develop and implement security measures and procedures that align with ESB's cybersecurity policies and external regulations. Additionally, the role promotes awareness of strategic initiatives and encourages the adoption of self-sustaining security practices within Generation teams. 

Key Responsibilities  

• Compliance Monitoring and Reporting: Support the compliance monitoring programme to assess adherence to established policies and standards. Regularly report findings to management team and provide recommendations for improvement. 

• Risk Management Oversight: Collaborate with risk management teams to identify, assess, and prioritise cybersecurity risks, ensuring effective controls and mitigations are in place and aligned with policy standards. 

• Training and Awareness: Design and deliver training programmes to promote security awareness among employees regarding security policies and compliance requirements. Foster a culture of accountability and continuous improvement in security practices. 

• Collaboration with Stakeholders: Work closely with relevant stakeholders to align cybersecurity standards with overall business objectives, ensuring a comprehensive approach to risk management and compliance. 

• Regulatory Compliance: Stay informed about relevant regulatory and industry requirements affecting cybersecurity governance. 

• Continuous Improvement: Assess the effectiveness of current policies and governance frameworks. Identify areas for enhancement and lead initiatives to refine processes, improve security posture, and mitigate risks. 

• Documentation Management: Maintain accurate documentation and website of all policies, procedures, and compliance reports to ensure transparency and accountability in governance practices. Prepare documentation for audits and compliance with Corporate and/or NIS Directive requirements, support interactions with internal audit and external regulators. 

• Support incident response and compliance activities, ensuring clear communication and effective coordination across domains. 

• Work closely with vendors on reviews, vulnerability assessments, mitigations, and implementation of cybersecurity-related activities. 

• Developing Business Case documentation for technical remediations to support the corrective action plans 

• Champion a practical, hands-on approach to problem-solving, demonstrating initiative and adaptability in a dynamic environment. 

Experience and Qualifications 

• A minimum of 5 years’ experience, including relevant IT/OT and/or cybersecurity experience 

• Relevant 3rd level degree 

• Excellent organisational, stakeholder management, negotiation, communication and analytical skills 

• Ability to plan, execute and document activities following established processes and procedures. Outstanding reporting, analytical and documentation/writing experience including MS Office 365 applications skills (PowerPoint, Excel, MS Word) 

• Ability to manage multiple work streams and work both independently as well as part of a team 

• Demonstrated ability to apply technology in solving business problems 

• Above all, applicants must be organised, innovative in their approach and able to demonstrate their ability to actively and independently contribute to a team that delivers results.  

• Full clean driving license and flexibility to travel nationally and internationally. 

Desirable 

• Cybersecurity certification e.g. CISSP, CGEIT, CISA or similar would be an advantage but not a requirement 

• Knowledge of cybersecurity principles and policies, regulatory requirements and compliance frameworks and standards including the NIS Directive, NIST CSF, and ISO 27001 

• Previous experience in Cybersecurity Governance, Risk, Compliance or Regulatory affairs 

• Previous experience working in a utility industry would be a bonus. 

 Location 

 This position will be based in F27, with occasional travel to ESB generation assets as required. 

 ESB is committed to smart working – combining digital tools with a culture of trust and empowerment to enable flexible ways of working. The successful candidate may work flexibly within their jurisdiction with attendance at the workplace for in-person collaboration on at least two anchor days per week. All smart working arrangements are subject to manager approval and ongoing review, based on the operational requirements of the role, the team, and the individual.  

Reporting To 

Cyber Security Manager, Asset Management, Generation and Trading 

Why Work with Us? 

·       Opportunity to lead Ireland’s transition to net zero carbon future 

·       Progressive, hybrid working model 

·       Career development through mentoring and training  

·       Corporate Social Responsibility Opportunities 

·       Sports and Social Clubs