Head of Resilience

About ComReg

At ComReg, we work at the heart of Ireland’s digital world.

Our role is to help ensure that people and businesses benefit from reliable connectivity, competitive services and continued innovation across communications and digital infrastructure.

This is an exciting time to build a career with us. As technology continues to evolve, so does our work. Alongside our established responsibilities, we are taking on new areas including cybersecurity, resilience, data, cloud services, AI and digital trust, giving our people the opportunity to work on some of the most important issues shaping Ireland’s digital future.

What makes ComReg unique is its people -the variety of expertise and perspectives we bring together. We are diverse, multidisciplinary and enjoy collaborating and learning from one another. Our teams work closely with counterparts across Europe, contributing to solutions for complex challenges in a fast-moving digital environment.

While the technologies and issues we address continue to change, our purpose remains the same: helping to create a connected, trusted and innovative digital ecosystem that supports people, communities and businesses every day.

If you are looking for meaningful work with great colleagues, continuous learning and the opportunity to make a real impact, ComReg offers a rewarding career at the centre of Ireland’s digital future.

Cybersecurity and Resilience Division

ComReg has been designated as the NIS2 Directive National Competent Authority for the Digital Infrastructure, Digital Provider, ICT Service Management and Space sectors. Additionally, ComReg has been designated as the CER Directive National Competent Authority for the Digital Infrastructure Sector.

The designation of ComReg as the National Competent Authority for NIS2 and CER requires a new division to execute these additional regulatory functions. This division is known as the Cybersecurity and Resilience Regulation Division.

The Cybersecurity and Resilience Regulation Division responsibilities will include:

• NIS2 supervision and enforcement
• CER functions – Identification of Critical Entities and National Resilience Strategy etc
• Engagement activities – national and international
• Strategic Planning

Full details on our NIS2 and CER responsibilities are here

The Role

The Head of Resilience is a critical role which sits at the intersection between the CER Directive and NIS2 Directive. This exciting role will be responsible for ComReg’s resilience activities and is an excellent opportunity for a technically strong leader to make a difference in digital sectors which are critical to the functioning of society and economy. This role will form part of the Senior Management team for the Cybersecurity and Resilience Regulation Division.

The Head of resilience will drive strategic risk-based security and resilience outcomes by combining expert technical knowledge with experienced leadership and communication skills to enhance cybersecurity and resilience in the critical digital sectors in Ireland and across the European Union.

The Head of Resilience will have an extensive senior role including:

• Lead the provision of expert cybersecurity and resilience technical advice to internal and external stakeholders;
• Provide leadership and support for complex technical cybersecurity and resilience inspections and audits for NIS2;
• Lead the delivery of CER Directive functions including identification of critical entities, input to national risk assessment and other operational functions using an all-hazard approach;
• Provide strategic leadership and governance of the ComReg information Security Management System (ISMS);
• Provide leadership and management for incident handling and post incident supervision activities;
• Leadership and management of multi-disciplinary team of operational resilience, business continuity, technical and GRC professionals.
• Actively shape a team culture of regulatory and technical excellence mirroring ComReg’s existing exemplary regulatory reputation;
• Represent ComReg at National and European working groups where required.

Please note: The above is a general guide to the key duties and responsibilities of the role and is not an exhaustive description, therefore other/additional duties and responsibilities appropriate to the role may be assigned.

Applicants should note there will be national and international travel required as part of this role.

Essential criteria

• An Honours degree (equivalent to level 8 on the National Framework of Qualifications – NFQ), third level qualification or significant relevant senior experience, in Cybersecurity, science, technology, engineering, or other equivalent area/s;
• Proven current and extensive experience in senior role/s with demonstrable evidence of working within a regulatory/regulated environment in the area of cybersecurity and/or resilience. Candidates should have a focus on operational aspects including cybersecurity advisory/assurance, risk management leadership or enterprise security– within the Digital Infrastructure, Digital Providers, ICT Service Management and Space sectors is advantageous;
• Experience working within an Enterprise Risk Management Framework.
• Extensive experience applying cybersecurity, risk and regulatory frameworks (e.g. ISO 27001, IEC/ISA 62443, NIST- CSF, DORA) in complex environments.
• Proven experience of building, leading and managing a high-performing team of subject matter experts
• Excellent understanding of cybersecurity and resilience domains (including, but not limited to, Operational Resilience, Business Continuity Management (BCM) and crisis management, Incident Management, Disaster Recovery)
• Professional cybersecurity related accreditations such as CISSP, CISM, CRISC, or CISA or ISO 27001 Lead Auditor, with senior experience in cybersecurity risk assessment, cybersecurity audit or IT audit.
• Proven ability to provide representation to Director, Board, CISO or Commissioner level with excellent communication, interpersonal, and negotiation skills, and the ability to influence stakeholders at all levels; Demonstrate an ability to identify, research and develop expertise in emerging technologies, translating new developments into practical insights and innovative solutions

Desired criteria

• Master’s degree (equivalent to level 9 on the NFQ) in science, technology, engineering, data analytics or another equivalent area/s and/or Cybersecurity leadership qualification;
• Experience working with European Union regulatory legislation including NIS, NIS2, DORA, GDPR? or sectoral cybersecurity legislation.
• Demonstratable senior level experience of regulatory supervision and enforcement in a cybersecurity and/or resilience environment;
• Experienced in senior level engagements regarding cybersecurity and/or resilience, in particular with central government departments, NCSC and EU bodies/agencies.
• Proven experience in the governance and management of financial planning budgeting, and forecasting processes to ensure fiscal responsibility and sustainability for a divisional structure.
• Project management qualifications and experience an advantage.

Competencies

• Strategy and Leadership – Articulates future developments and applies this to operational situations. Creates a climate of cooperation and respect, where people strive to achieve common organisational goals and share knowledge. Takes a broad view.
• Communication and Influencing – Communicates clearly, confidently and respectfully. Engages and influences others to follow a particular course of action. Ensures all relevant parties are appropriately updated and notified.
• Decision Making and Judgement – Effectively uses evidence to support the decision-making process. Assesses alternative positions while using sound judgement to adapt to specific and challenging requirements of the organisation.
• Analytical and Critical Thinking – Objectively analyses and evaluates information in order to identify patterns between situations that are not obviously related. Develops and clearly articulates solutions to complex problems.
• Technical Knowledge & Continuous Improvement – Possesses a command over the technical and professional skills for a particular discipline. Keeps an open mind. Demonstrates commitment to continuous improvement.
• Teamwork – Promotes and enhances team performance through working collaboratively and in cooperation with others to achieve goals. Interacts in a manner that builds respect and fosters trust.

Our Package 

We are offering an attractive package:

• Salary €110,955.62 – €137,585.58 *(Pay increases will be awarded annually subject to satisfactory performance)
• Dublin city centre location – IFSC
• Blended working environment
• 28 days Annual Leave per year increases with service
• Fully paid Maternity, Paternity and Parent’s leave
• Income protection scheme
• Education assistance and Training Opportunities
• Professional membership fee payment
• Attractive pension scheme
• ComReg Wellbeing Programme
• Travel tax saver scheme,
• Access to Cycle to Work Scheme
• Access to Employee Assistance Programme
• Access to a members’ run sports and social club

*(entry will be at the minimum point and the rate of remuneration may be adjusted from time to time in line with Government pay policy.)

Please Note (1)

We hope that our recruitment process supports applications from candidates with diverse backgrounds, experiences and perspectives. We understand that having a diverse workforce contributes to making us stronger as an organisation. We are committed to positively supporting candidates with disabilities.

Please let us know if there are any reasonable accommodations we can make to enable you to take part in the process by creating the environment to give you the best opportunity to show your strengths and competencies. Rest assured that whatever information you disclose will only be used to enable us to provide the necessary support and will never have a bearing on the outcome of the process.

Please Note (2)

ComReg assesses all applicants fairly based on the requirements for the role. Due to the high volume of applications we receive for positions, we are unable to provide feedback to candidates who are not shortlisted for interview. If you are short-listed for interview, and are subsequently unsuccessful, you can request verbal feedback from your recruitment contact – if you are represented by an agency.