search Browse Jobs
Information Security OfficerNew Consumer Solutions · Dublin, Dublin 1, Ireland
New Consumer Solutions logo

New Consumer Solutions

company page ↗

Information Security Officer

🗓️ Posted 2026-09-15 Dublin, Dublin 1, Ireland Part-time Hybrid General
💰 Salary 4,100 EUR–4,600 EUR/mo (49,200 EUR–55,200 EUR/yr) 📊 Market NA

About the Company

At Susquehanna, we approach quantitative finance with a deep commitment to scientific rigor and innovation. Our research leverages vast and diverse datasets, applying cutting-edge machine learning to uncover actionable insights and driving data-informed decisions from predictive modeling to strategic execution. Today, Susquehanna has over 3,500 employees in 16+ global locations. While we have grown in size and expanded our reach, our collaborative culture and love for gaming remains. Financial Services Specialties: Proprietary Trading, Institutional Sales & Research, Technology, Private Equity & Venture Capital, Quantitative Research

Responsibilities

  • ● Position: Information Security Officer (part-time employee)
  • ● Reports to: Director of Engineering - DevOps, IT, Security and Privacy
  • ● Employee Status: Part-time employee/20 hours a week with the potential for extension based on business needs and performance.
  • ● About the position:
  • ● Hold a designated Security Officer role for an ISO 27001 certified company, and use the standing it gives you to keep the management system honest.
  • ● SleepScore is ISO 27001 certified and in the maintenance phase of the standard. The management system, policies and risk register are in place and working. The programmes underneath them sit at varying maturity, and that is where most of the interesting work is.
  • ● You report to the Director of Engineering, who owns the ISMS day to day.
  • ● It is not a clean handover. Engineering leadership stays involved and will keep carrying some of this work, so you need to be able to pick up any part of it, and the split will flex with what is in front of us. What you manage, you manage properly: bringing proposals rather than questions, forming a view we can agree, then running it. Ultimate responsibility to senior management stays with us, as the standard requires.
  • ● A substantial part of this role is raising capability rather than sustaining it. Asset and endpoint management, access management, vulnerability management, business continuity and incident response, training and exercises, and the improvement programme itself are examples of areas that work today but are less mature than we want them, and they are not the only ones. You would assess where each stands, propose where it should get to, and then implement that: designing the process, building the tooling or configuration behind it, and embedding it with the team that runs it day to day.
  • ● You'll Get To:
  • ● What You'd Manage:
  • ● Audit readiness: internal audits and external surveillance. Finding the findings before the auditor does, and closing them with evidence.
  • ● ISMS governance: the operating rhythm, covering internal audit scheduling, management review inputs, the roles register, and keeping the Statement of Applicability truthful.
  • ● Risk register: honest, current and defensible, with treatment plans that actually move.
  • ● Third-party and vendor security: assessments, the supplier register, and a real existing backlog to clear.
  • ● Vulnerability follow-through: findings tracked to remediation against agreed SLAs, with the numbers reported honestly.