IT Security & Risk Manager

Tirlán

Tirlán, currently partnering with a 3rd party service provider for the provision of IT services, is about to embark on a significant IT transformation programme to stand up its own IT capability. The initial focus will be on enabling projects and will involve close collaboration with our partner. This will require a number of new and exciting roles to join the Tirlán IT team, working in a dynamic & collaborative environment. ​

Tirlán is a world-class food and nutrition co-operative, with a diverse portfolio of quality ingredients, leading consumer and agri brands.

Tirlán owns leading brands such as Avonmore, Kilmeaden Cheese, Millac, Solmiko, Truly Grass Fed, Premier Milk, Wexford, mymilkman.ie and GAIN Animal Nutrition.

We nurture a talented team across Ireland, the US, MEA and China, delivering annual revenues of over €3 billion, and over 2,300 people to manage our network of 11 processing plants and 52 agri branches. Our purpose is to nourish the world, while safeguarding our environment for future generations

Overview

Reporting to the Head of IT, the IT Security and Risk Manager will be responsible for leading the development and implementation of the organisation’s IT security and risk management strategies. This role is critical in safeguarding the integrity of IT systems, ensuring compliance with regulatory requirements, and supporting a culture of security awareness across the business. The role includes managing a team of internal specialists and managing third-party providers to conduct assessments, implement controls, and maintain robust security policies, procedures, and standards.

Key Responsibilities

Strategic Leadership & Governance

· Develop, implement, and oversee a strategic, comprehensive enterprise IT & OT security and risk management program aligned with business objectives

· Define and maintain IT & OT security and risk governance frameworks, policies, and standards (e.g., COBIT), ensuring alignment with Tirlán Policies and regulatory requirements

· Lead the development and execution of the IT & OT security strategy and roadmap, ensuring continuous improvement and maturity of the security postur

Risk Management & Compliance

· Responsible for the process of identifying, assessing, and managing internal and third-party IT risks in collaboration with key stakeholders

· Oversee the process for defining and applying a practical, comprehensive risk assessment methodology, including due diligence processes and supporting tools

· Monitor and report on compliance with security controls and regulatory requirements, ensuring timely remediation of gaps

· Schedule and oversee IT risk and compliance audits; track outcomes and direct issues to appropriate owners for resolution

· Manage assurance monitoring and evidence retention to support audit readiness and compliance

Security Operations & Controls

· Support the implementation and maintenance of a comprehensive IT & OT control framework

· Assist IT and business teams in defining and executing action plans to mitigate identified risks

· Monitor the effectiveness of implemented controls and report on compliance progress

· Conduct security assessments, vulnerability scanning, and incident response planning

· Lead or support investigations of security incidents and ensure appropriate follow-up actions are complete

Stakeholder Engagement & Advisory

· Provide expert guidance to business and IT teams on security and risk considerations for operations, projects, and third-party engagements

· Ensure security requirements are defined and embedded in new and changing business initiatives based on risk assessments

· Engage with internal and external auditors, regulators, and other assurance functions as needed

Awareness & Capability Building

· Design and deliver IT security training and awareness programs to promote a risk-aware culture across the organisation

· Foster strong business engagement to ensure security and risk management are integrated into day-to-day operations

Team & Vendor Management

· Manage internal IT Security & Risk team members and coordinate with external managed service providers to ensure effective delivery of service

Key Requirements:

· 8+ years’ experience in a combination of risk management, IT security and IT jobs

· 2+ years’ experience in reporting on security posture to the company’s executive team

· Understanding of controls to protect both on-premise and cloud based applications and infrastructure technologies including Data Loss Prevention, Identity Access Management, Advanced Threat Detection and Prevention, Cloud and Mobile Computing

· Industry Knowledge of ISO 27000 series of standards, NIST Cybersecurity Framework, CIS Critical Security Controls

· Experience in Information Security, IT Audit, and Supplier Security Assessments 

· Knowledge of security related products and Information Security Management Systems 

· Knowledge of information security and risk strategies 

· Ability to collaborate with and influence stakeholders

· Experience leading a security and risk team

· Experience with contract and vendor negotiations and management including managed services

· Experience working for an organisation with a significant OT footprint advantageous

· Strong team player with a growth mindset

About us

Through our expertise in research and development, customer insights, food safety and state-of-the-art manufacturing we bring innovative food and nutrition solutions to a global market. Our new and vibrant headquarters in Kilkenny City operates as a collaboration hub where multi-functional teams come together in a hybrid work environment.

Commitment to Diversity & InclusionWe believe in the value of difference. We know that different perspectives, life experience and backgrounds can drive innovation and deliver growth.

We welcome people from all walks of life without regard to race, colour, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, or disability status. 

Join our Talent Pool

Considering a new career in Tirlán but this isn’t the role for you? Join our talent community and sign up for job notifications at www.tirlan.com/careers