Head of Resilience

The Head of Resilience is a critical role which sits at the intersection between the CER Directive and NIS2 Directive. This exciting role will be responsible for ComReg’s resilience activities and is an excellent opportunity for a technically strong leader to make a difference in digital sectors which are critical to the functioning of society and economy. This role will form part of the Senior Management team for the Cybersecurity and Resilience Regulation Division. The Head of Resilience will drive strategic risk-based security and resilience outcomes by combining expert technical knowledge with experienced leadership and communication skills to enhance cybersecurity and resilience in the critical digital sectors in Ireland and across the European Union. The Head of Resilience will have an extensive senior role including: - Lead the provision of expert cybersecurity and resilience technical advice to internal and external stakeholders; - Provide leadership and support for complex technical cybersecurity and resilience inspections and audits for NIS2; - Lead the delivery of CER Directive functions including identification of critical entities, input to national risk assessment and other operational functions using an all-hazard approach; - Provide strategic leadership and governance of the ComReg information Security Management System (ISMS); - Provide leadership and management for incident handling and post incident supervision activities; - Leadership and management of multi-disciplinary team of operational resilience, business continuity, technical and GRC professionals. - Actively shape a team culture of regulatory and technical excellence mirroring ComReg’s existing exemplary regulatory reputation; - Represent ComReg at National and European working groups where required. Please note: The above is a general guide to the key duties and responsibilities of the role and is not an exhaustive description, therefore other/additional duties and responsibilities appropriate to the role may be assigned. Applicants should note there will be national and international travel required as part of this role. Essential criteria - An Honours degree (equivalent to level 8 on the National Framework of Qualifications – NFQ), third level qualification or significant relevant senior experience, in Cybersecurity, science, technology, engineering, or other equivalent area/s; - Proven current and extensive experience in senior role/s with demonstrable evidence of working within a regulatory/regulated environment in the area of cybersecurity and/or resilience. Candidates should have a focus on operational aspects including cybersecurity advisory/assurance, risk management leadership or enterprise security– within the Digital Infrastructure, Digital Providers, ICT Service Management and Space sectors is advantageous; - Experience working within an Enterprise Risk Management Framework. - Extensive experience applying cybersecurity, risk and regulatory frameworks (e.g. ISO 27001, IEC/ISA 62443, NIST- CSF, DORA) in complex environments. - Proven experience of building, leading and managing a high-performing team of subject matter experts - Excellent understanding of cybersecurity and resilience domains (including, but not limited to, Operational Resilience, Business Continuity Management (BCM) and crisis management, Incident Management, Disaster Recovery) - Professional cybersecurity related accreditations such as CISSP, CISM, CRISC, or CISA or ISO 27001 Lead Auditor, with senior experience in cybersecurity risk assessment, cybersecurity audit or IT audit. - Proven ability to provide representation to Director, Board, CISO or Commissioner level with excellent communication, interpersonal, and negotiation skills, and the ability to influence stakeholders at all levels; Demonstrate an ability to identify, research and develop expertise in emerging technologies, translating new developments into practical insights and innovative solutions Desired criteria - Master’s degree (equivalent to level 9 on the NFQ) in science, technology, engineering, data analytics or another equivalent area/s and/or Cybersecurity leadership qualification; - Experience working with European Union regulatory legislation including NIS, NIS2, DORA, GDPR? or sectoral cybersecurity legislation. - Demonstratable senior level experience of regulatory supervision and enforcement in a cybersecurity and/or resilience environment; - Experienced in senior level engagements regarding cybersecurity and/or resilience, in particular with central government departments, NCSC and EU bodies/agencies. - Proven experience in the governance and management of financial planning budgeting, and forecasting processes to ensure fiscal responsibility and sustainability for a divisional structure. - Project management qualifications and experience an advantage.