Cyber Security GRC Senior Manager

About Dunnes Stores

Dunnes Stores is recognized as Ireland’s top retailer, excelling in food, fashion, and home retail sectors. We pride ourselves on delivering a broad selection of premium products and continuously enhancing customer experience through technological innovations. Our adoption of advanced IT solutions like IoT-enabled Scan & Go, Queue Busting checkout systems, Digital Displays, Smart Shelves, and Smart Trolleys integrated with mobile devices showcases our commitment to innovation.

Our modern IT infrastructure supports rapid expansion by onboarding new stores, product categories, and cutting-edge technologies, enabling swift adaptation to market dynamics while upholding strict security and compliance standards. This environment presents opportunities for professionals to lead change and address cybersecurity challenges to safeguard and grow our business.

Role Overview

We are seeking a knowledgeable Cybersecurity Strategy, Governance, Risk, and Compliance Senior Manager. This leadership role entails crafting and executing our cybersecurity strategy, ensuring alignment with relevant legal frameworks and industry best practices. You'll oversee governance, risk management, and compliance activities to protect company information and mitigate cyber risks. The position is based at our Dublin city centre head office and reports directly to the Chief Information Security Officer.

Key Responsibilities

• Formulate and uphold a comprehensive cybersecurity strategy and framework that aligns with business goals and acceptable risk levels.
• Direct the creation, deployment, and continuous update of cybersecurity policies, standards, and procedures.
• Lead the cybersecurity risk management program, including assessments, mitigation plans, and ongoing monitoring.
• Ensure full compliance with applicable laws, regulations, and standards such as GDPR, PCI DSS, and ISO 27001.
• Assess cybersecurity risks posed by third-party vendors and partners.
• Coordinate audits from internal and external parties, addressing findings promptly and thoroughly.
• Manage cybersecurity training initiatives to educate employees and stakeholders about their security responsibilities.
• Inform senior leadership and the board about cybersecurity threats, trends, and program effectiveness.
• Work collaboratively with IT and business units to embed cybersecurity governance, risk, and compliance within projects and operational processes.
• Maintain productive relationships with regulatory agencies, industry bodies, and external partners.
• Provide regular updates on the company’s cybersecurity posture to senior management and relevant stakeholders.

Qualifications and Experience

• Bachelor’s or Master’s degree in fields related to Information Security, Cybersecurity, or Computer Science.
• Professional certifications such as CISM, CRISC, CGEIT, or equivalent credentials.
• Extensive experience in cybersecurity strategy, governance, risk, and compliance, ideally within the retail sector.
• Strong familiarity with cybersecurity frameworks such as NIST and COBIT, alongside regulatory compliance requirements.
• Exceptional leadership, strategic planning, and communication abilities.
• Capability to translate technical cybersecurity matters into clear business perspectives and influence decision-making.

Competency Profile

• Technical and professional expertise
• Relationship building skills
• Results-driven mindset
• Advocacy for change

Benefits

• Competitive remuneration package
• Comprehensive employee benefits including discounts
• Opportunities for professional growth and career advancement
• A dynamic, collaborative atmosphere focused on innovation and continual development