search Browse Jobs
Information Security ManagerNew Consumer Solutions · Dublin, Dublin 1, Ireland
New Consumer Solutions logo

New Consumer Solutions

company page ↗

Information Security Manager

🗓️ Posted 2026-09-15 Dublin, Dublin 1, Ireland Part-time Hybrid General
💰 Salary 4,100 EUR–4,600 EUR/mo (49,200 EUR–55,200 EUR/yr) 📊 Market NA

About the Company

At Susquehanna, we approach quantitative finance with a deep commitment to scientific rigor and innovation. Our research leverages vast and diverse datasets, applying cutting-edge machine learning to uncover actionable insights and driving data-informed decisions from predictive modeling to strategic execution. Today, Susquehanna has over 3,500 employees in 16+ global locations. While we have grown in size and expanded our reach, our collaborative culture and love for gaming remains. Financial Services Specialties: Proprietary Trading, Institutional Sales & Research, Technology, Private Equity & Venture Capital, Quantitative Research

Responsibilities

  • ● Position: Information Security Manager (part time employee)
  • ● Reports to: Director of Engineering - DevOps, IT, Security and Privacy
  • ● Status: Part-time employee, initially 20 hours a week with the potential for extension based on business needs and performance
  • ● About the position:
  • ● Manage our information security management system. Decide, propose, delegate, and keep us audit-ready without being asked.
  • ● SleepScore is ISO 27001 certified and in the maintenance phase of the standard. The management system, policies and risk register are in place and working. The programmes underneath them are at varying stages of maturity, and that is where most of the interesting work is. We need someone to manage the operational reality: to see where the risk actually sits, decide what to do, and make it happen, either directly or by placing the work with the team that should carry it.
  • ● You report to the Director of Engineering, who owns the ISMS day to day.
  • ● It is not a clean handover. Engineering leadership stays involved and will keep carrying some of this work, so you need to be able to pick up any part of it, and the split will flex with what is in front of us. What you manage, you manage properly: bringing proposals rather than questions, forming a view we can agree, then running it. Ultimate responsibility to senior management stays with us, as the standard requires.
  • ● A substantial part of this role is raising capability rather than sustaining it. Asset and endpoint management, access management, vulnerability management, business continuity and incident response, training and exercises, and the improvement programme itself are examples of areas that work today but are less mature than we want them, and they are not the only ones. You would assess where each stands, propose where it should get to, and then implement that: designing the process, building the tooling or configuration behind it, and embedding it with the team that runs it day to day.
  • ● You'll Get To:
  • ● What You'd Manage:
  • ● Audit readiness: internal audits and external surveillance. Finding the findings before the auditor does, and closing them with evidence.
  • ● Risk register: honest, current and defensible, with treatment plans that actually move.
  • ● Third-party and vendor security: assessments, the supplier register, and a real existing backlog to clear.
  • ● Vulnerability follow-through: findings tracked to remediation against agreed SLAs, with the numbers reported honestly.
  • ● Access and asset reviews: periodic, evidenced, across both sites, including portable media.
  • ● Policies and procedures: current, reviewed on cycle, gaps drafted and proposed.