Cybersecurity Governance, Risk & Compliance Advisor/Inspector

ComReg Overview 

At ComReg, we work at the heart of Ireland’s digital world.

Our role is to help ensure that people and businesses benefit from reliable connectivity, competitive services and continued innovation across communications and digital infrastructure.

This is an exciting time to build a career with us. As technology continues to evolve, so does our work. Alongside our established responsibilities, we are taking on new areas including cybersecurity, resilience, data, cloud services, AI and digital trust, giving our people the opportunity to work on some of the most important issues shaping Ireland’s digital future.

What makes ComReg unique is its people -the variety of expertise and perspectives we bring together. We are diverse, multidisciplinary and enjoy collaborating and learning from one another. Our teams work closely with counterparts across Europe, contributing to solutions for complex challenges in a fast-moving digital environment.

While the technologies and issues we address continue to change, our purpose remains the same: helping to create a connected, trusted and innovative digital ecosystem that supports people, communities and businesses every day.

If you are looking for meaningful work with great colleagues, continuous learning and the opportunity to make a real impact, ComReg offers a rewarding career at the centre of Ireland’s digital future.

Cybersecurity and Resilience Regulation Division

ComReg has been proposed as the NIS2 Directive National Competent Authority for the Digital Infrastructure, Digital Provider, ICT Service Management and Space sectors. Additionally, ComReg has been designated as the CER Directive National Competent Authority for the Digital Infrastructure Sector.

The proposal of ComReg as the National Competent Authority for NIS2 and CER requires a new division to execute these additional regulatory functions. This division is known as the Cybersecurity and Resilience Regulation Division.

The Cybersecurity and Resilience Regulation Division responsibilities will include:

• NIS2 supervision and enforcement
• CER functions – Identification of Critical Entities and National Resilience Strategy etc
• Engagement activities – national and international
• Strategic Planning

Full details on our NIS2 and CER responsibilities are here

The Role

This role represents a unique opportunity to apply your technical expertise to matters of national importance.

As a Cybersecurity GRC Advisor/Inspector within the Cybersecurity and Resilience Regulation Division of ComReg, you will play a key role in strengthening the cyber security and resilience of critical digital infrastructure and services that underpin society, the economy and public trust. Working within a multidisciplinary supervision and enforcement team, you will support building the cyber security and resilience across Ireland and the EU.

This position provides an exceptional opportunity to develop a broad perspective across multiple sectors, technologies and risk environments. You will engage directly with senior technical and regulatory leaders, security architects and executives across industry, gaining insight into emerging technologies, complex infrastructure ecosystems and leading cyber security practices. The team will include cybersecurity governance, risk and compliance, assurance and technical assessment capabilities.

The role offers the opportunity to make a tangible difference at national and European levels. You will contribute to the supervision and implementation of major cybersecurity frameworks, including NIS2, collaborate with domestic and international partners, and help shape regulatory approaches that enhance the security and resilience of critical services.

This is an ideal opportunity for an experienced cybersecurity professional seeking to broaden their impact beyond a single organisation, expand their professional network, and further develop expertise across regulatory, technical and strategic domains. You will work alongside highly experienced specialists working in cybersecurity, legal, policy, economic and enforcement and you will gain exposure to complex challenges at the intersection of technology, regulation and public policy.

We are committed to supporting professional development and continuous learning. The successful candidate will have opportunities to deepen their technical expertise, contribute to strategic initiatives, engage with European and international cybersecurity communities, and develop as a recognised subject matter expert in the field of cyber resilience and digital infrastructure security.

Reporting to the Head of Cybersecurity Assessment and Audit, the Cybersecurity GRC Advisor/Inspector will have responsibility for:

• Maintain expert level awareness of evolving cybersecurity risk management practices in support of regulatory compliance.
• Support the planning and development of supervisory audit management frameworks including assessment of cybersecurity governance, risk management, controls and technical security measures.
• Plan, scope, and lead cybersecurity assessments and audits of regulated entities
• Undertake ex-post investigations, compliance reviews and assurance activities following incidents, notifications or other regulatory concerns.
• Assess compliance with NIS2 cybersecurity regulations, applicable standards and sector-specific obligations.
• Prepare audit plans, assessment reports, supervisory findings, and enforcement recommendations.
• Support enforcement actions through evidence collection, analysis and expert opinion.
• Engage with legal, policy, technical, and operational specialists within multi-disciplinary teams.
• Maintain awareness of the evolving regulatory landscape.
• Maintain awareness of evolving technologies and cybersecurity threats.
• Develop and maintain cybersecurity best practices, guidelines and awareness publications.
• Complete technical research in support of evolving technologies and threats.

Essential Qualifications & Experience:

• Proven experience in senior roles of cybersecurity assessment and audit.
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Engineering, Information Systems, Audit, Risk or a related discipline or alternative equivalent experience.
• Professional certifications such as CISM, CISA, CRISC, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer or equivalent.
• Expert working knowledge of cybersecurity risk management frameworks including ISO/IEC 27001, OWASP, NIST Cybersecurity Framework, IEC/ISA 62443, Cyber Fundamentals and CIS Controls.
• Practical experience planning, participating and leading cybersecurity assessment and audits.
• Strong written and verbal communication skills with experience presenting technical findings to non-technical/executive level audiences.
• Project management experience.
• Experience of managing or working within technology teams.

·        Ability to work as part of a multi-disciplinary team.

Desirable Qualifications & Experience:

• Experience of or familiarity with EU regulatory regimes including for example NIS2, DORA, the Cybersecurity Resilience Act and GDPR.
• Experience of both public and private sectors, with regulatory experience advantageous.
• Experience working in a regulated environment.
• Hands-on experience using GRC management tools.
• High level understanding of commonly used cybersecurity controls and tools.
• Previous experience managing or coordinating outsourced audit resources.
• Experience within telecommunications, cloud services, managed service providers, data centres, critical national infrastructure or regulated industries.

Core Competencies & Skills for the Role:

• Analytical & Critical Thinking: Objectively analyses and evaluates information in order to identify patterns between situations that are not obviously related. Develops and clearly articulates solutions to complex problems.
• Planning & Organising: Establishes and monitors priorities, systematically differentiating between urgent, important and unimportant tasks. Plans and manages activities to consistently deliver results. Meets objectives within agreed predetermined time frames and deals with urgent operational situations expeditiously.
• Technical Knowledge & Continuous Improvement: Possesses a command over the technical and professional skills for a particular discipline. Keeps an open mind. Demonstrates commitment to continuous improvement.
• Decision Making & Judgement: Effectively builds evidence base to support the decision-making process. Assesses alternative options. Uses judgement to adapt to specific and challenging requirements of the organisation.
• Communicating & Influencing: Communicates clearly, confidently and respectfully. Engages, persuades and convinces others to follow a particular course of action. Ensures all relevant parties are appropriately updated and notified.
• Teamwork: Promotes and enhances team performance through working collaboratively and in cooperation with others to achieve goals. Interacts in a manner that builds respect and fosters trust.

Our Package

We are offering an attractive package:

• Salary €89,722.80 – €112,170.71 * (Pay increases will be awarded annually subject to satisfactory performance)
• Dublin city centre location – IFSC
• Blended working environment
• 28 days Annual Leave per year increases with service
• Fully paid Maternity, Paternity and Parent’s leave
• Income protection scheme
• Education assistance and Training Opportunities
• Professional membership fee pay
• Attractive pension scheme
• ComReg Wellbeing Programme
• Travel tax saver scheme, Access to Cycle to Work Scheme
• Access to Employee Assistance Programme
• Access to a member’s run sports and social club

*(entry will be at the minimum point and the rate of remuneration may be adjusted from time to time in line with Government pay policy.)

Check out the Recruitment section of our Careers website if you have any questions or need further information about the role or the recruitment process -https://www.comreg.ie/about/careers/recruitment-faq/

Please Note (1)

We hope that our recruitment process supports applications from candidates with diverse backgrounds, experiences and perspectives. We understand that having a diverse workforce contributes to making us stronger as an organisation. We are committed to positively supporting candidates with disabilities.

Please let us know if there are any reasonable accommodations we can make to enable you to take part in the process by creating the environment to give you the best opportunity to show your strengths and competencies. Rest assured that whatever information you disclose will only be used to enable us to provide the necessary support and will never have a bearing on the outcome of the process.

Please Note (2)

ComReg assesses all applicants fairly based on the requirements for the role. Due to the high volume of applications we receive for positions, we are unable to provide feedback to candidates who are not shortlisted for interview. If you are short-listed for interview, and are subsequently unsuccessful, you can request verbal feedback from your recruitment contact – if you are represented by an agency.