COMPANY BACKGROUND

Ayvens is a leading provider of mobility services worldwide with 3.3 million vehicles under management. The Ayvens brand was launched in 2023, following the merger of the ALD and LeasePlan leasing groups to create a market leader in mobility. Ayvens is part of the Societe Generale Group.
In Ireland Ayvens operates leasing and insurance units. Ayvens is seeking an Information Security Officer to oversee information security risk in its Irish units.

SKILLS REQUIRED

• University level education
• 3+ years of relevant experience.
• CISSP and CISM (or equivalent) accredited or obtain these in the short-term (1-2 years).
• Up to date CPD for qualification held (where applicable)
• A background in Information Security and a strong affinity with IT is preferred.
• Strong analytical skills. You will need to be able to quickly get to the bottom of the most important vulnerabilities, threats, and potential controls.
• Experience in providing advice on data protection best practices
• Previous experience of working within the three lines of defense model
• Ability to develop and maintain valuable stakeholder relationships
• Good communication and presentation skills. Comfortable and experience in addressing groups, subject matter experts and middle / senior / top level management. Know when to listen.
• English (fluent, spoken and written)

JOB PURPOSE AND REPORTING LINE

The Information Security Officer role forms part of the second line of defense Risk Function. The role is responsible for oversight of information security policies, standards and processes and for providing subject matter expertise and guidance on security risks, their assessment and relevant mitigating actions. The Information Security Officer role will form part of the Risk Function.
This position constitutes a controlled function under the Central Bank of Ireland Fitness and Probity Standards and the role is subject to approval pursuant to such Standards.

SCOPE OF RESPONSIBILITIES

The Information Security Officer is responsible for:

Defining and monitoring the implementation of policies on topics related to IT, information and cyber risks.

• Align policies with local regulations, including DORA
• Oversee the implementation of the framework for managing IT, information, and cyber risks
• Oversee information risk management when undertaking projects and report as required
• Review and monitor training on IT, information and cyber risks
• Create awareness in the first line relating to information risk rules, policies and procedures
• Challenge and analyse systems for managing and monitoring IT, information and cyber risks
• Provide an opinion on implementation of policies, standards and procedures.
• Leading the second-line role in relation to DORA and providing guidance, advice and challenge in relation to compliance with same.