Information Security Lead

About AMCS Group

AMCS Group is a leader in sustainability software, headquartered in Ireland with presence across Europe, the USA, and Australasia. Employing over 1,300 experts in 22 countries, AMCS provides technology solutions aimed at advancing a carbon neutral future.

Our SaaS platforms enhance efficiency and sustainability in resource-driven industries. More than 5,000 customers in 23 countries use our Performance Sustainability software to improve profitability and environmental resilience worldwide.

We foster a collaborative and innovative company culture rooted in Irish beginnings, emphasizing connection among our team, clients, and community.

Role Summary

The Information Security Lead plays a critical role in overseeing and advancing the Information Security Management System (ISMS). This leadership position is responsible for governance, auditing, risk management, vendor risk, and fostering security awareness. This is a hybrid position, requiring a minimum of three days per week onsite at the Limerick headquarters.

Core Responsibilities

• Oversee and enhance the ISMS adhering to ISO 27001, SOC 2, and PCI standards.
• Develop and sustain policies, procedures, and comprehensive, audit-ready documentation, including maintaining the Statement of Applicability and control framework.
• Support internal and external audits for ISO 27001, SOC 2, and PCI standards, coordinate customer audits and security questionnaires, and manage remediation of audit findings.
• Conduct risk and threat assessments; manage asset and risk registers; collaborate with business stakeholders and IT teams on risk mitigation; evaluate security of new technologies and systems.
• Contribute to the development of AI governance frameworks; evaluate AI tools and use cases for security and compliance risks.
• Perform vendor security assessments aligned with compliance requirements and maintain vendor risk documentation.
• Assist with security incident response and business continuity planning.
• Design and implement security awareness and training initiatives to promote a robust security culture across the organization.

Qualifications and Experience

• A degree in IT, Cyber Security, Business Informatics, Law, or a related field.
• Proven experience in information security, preferably within SaaS or cloud environments.
• Hands-on expertise with ISMS and standards such as ISO 27001, SOC 2, and PCI.
• Strong knowledge of GDPR, EU Data Act, and NIS framework.
• Experience conducting ISO, SOC, and PCI audits.
• Exposure to AI governance and cloud security considerations.

Key Competencies

• Highly structured and detail-focused approach.
• Integrity and accountability in handling sensitive information.
• Effective communication skills in English.