Security Engineering Service Manager

Amach is an industry-leading technology driven company with headquarters located in Dublin and remote teams in UK and Europe. Our blended teams of local and nearshore talent are optimised to deliver high quality and collaborative solutions. Established in 2013, we specialise in cloud migration and development, digital transformation including agile software development, DevOps, automation, data and machine learning…

We are seeking a skilled Security Engineering Service Manager to enhance and safeguard our customer's applications and systems. The successful candidate will be responsible for managing the secure design, development, implementation and assurance of best-in-class cybersecurity practices. This role focuses on strengthening our digital infrastructure to protect against evolving threats, maintaining compliance with industry standards, and aligning our security measures with strategic business objectives. The ideal candidate will be able to operate at both strategic and technical levels, ensuring that our customer builds strong internal security capabilities, provides effective management of external partners, while collaborating with cross-functional teams. Please note this role operates in a hybrid model with candidates expected to be able and willing to work from our customer's Dublin office once per week.

• Experience managing third-party security teams or working with managed service providers
• Extensive experience in cybersecurity, security engineering, and risk management
• Robust management and strategic thinking skills
• Expertise in security frameworks, compliance, and threat intelligence
• Proven ability to manage teams, vendors, and security initiatives successfully
• Manage strategic external partners to ensure services fulfil our customer's security requirements and business objectives
• Influence and guide senior leadership on security direction and best practices
• Manage the design and implementation of advanced cybersecurity solutions, infrastructure, and processes, aligned with the organisation's strategic goals and industry best practices
• Collaborate with cross-functional teams to build a Secure SDLC by integrating security measures into architecture, development, infrastructure, and business operations, emphasising the strategic impact of security
• Maintain a forward-looking approach to identify and integrate emerging technologies and threat intelligence into our strategic cybersecurity architecture
• By leading the charge in cybersecurity engineering, assurance, horizon scanning, and threat intelligence, you will ensure the organisation's resilience, safeguard its strategic interests, and foster a culture of proactive cybersecurity
• Provide deep technical insight and hands-on leadership in implementing security solutions
• Oversee regular security assessments, audits, and penetration testing, translating findings into strategic cybersecurity enhancements for the organisation
• Develop and implement assurance processes that not only ensure compliance but also enhance strategic resilience against evolving threats
• Working closely with our customer's Security Operations Centre (SOC) to establish comprehensive security logging to support incident response efforts and guide strategic remediation actions in the event of a security breach, mitigating potential damage
• Evaluate and integrate new technologies, products, and solutions to address emerging security challenges
• Manage a comprehensive vulnerability management program, identifying, prioritising, and remediating vulnerabilities across the organisation's digital landscape
• Collaborate with application and engineering teams to ensure timely and effective vulnerability remediation
• Stay informed about the latest threats and vulnerabilities, applying a strategic approach to mitigate risks
• Develop and implement vulnerability management processes and procedures
• Conduct regular horizon scanning of the cybersecurity landscape, staying informed about emerging threats, trends, and industry best practices
• Develop and implement a comprehensive threat intelligence program, gathering, analysing, and sharing threat data to enhance cybersecurity decision-making
• Collaborate with external partners, organisations, and cybersecurity networks to build a robust threat intelligence network
• Develop and enforce strategic cybersecurity policies and procedures, ensuring alignment with legal and industry standards
• Conduct regular compliance audits with a focus on enhancing the strategic elements of our cybersecurity governance
• Stay up to date with relevant industry security standards, regulations, and frameworks (NIST CSF, ISO 27001, CIS, GDPR)
• Ensure compliance with security standards and regulations such as OWASP, PCI DSS, and GDPR
• Develop and execute a strategic training program for engineering and application teams to enhance cybersecurity awareness and skills
• Conduct security awareness and training sessions for employees to promote a culture of security and ensure compliance with security policies
• Lead initiatives to measure and improve the organisation's cybersecurity culture and behaviour, ensuring alignment with strategic goals

• An opportunity to join a fast-growing company
• Options for career advancement
• Learning and development opportunities
• Flexible working environment
• Competitive salaries based on experience

Equal Opportunity Employer: Amach is an equal opportunity employer and makes employment decisions on the basis of merit. We celebrate diversity and are committed to creating an inclusive environment for all employees. This job description is intended to convey essential responsibilities and qualifications for this role, but it is not an exhaustive list of tasks that an employee may be required to perform.

Amach will process your personal information in accordance with the EU's General Data Protection Regulation (GDPR). We will comply with data protection law and principles, which means that your data will be:

• Used lawfully, fairly and in a transparent way
• Collected only for valid purposes and not used in any way that is incompatible with those purposes
• Relevant to the purposes we have told you about and limited only to those purposes
• Accurate and kept up to date
• Kept only as long as necessary for the purposes we have told you about
• Kept securely

If you would like to contact us about your data, please use the following address:

Mid-Senior level

Full-time

Engineering and Information Technology

Technology, Information and Internet