About Indra

Indra is one of the world's leading technology and consulting companies, serving as a technological partner for the core business operations of customers worldwide. The company is a global leader in providing proprietary solutions across the Transport and Defence sectors, as well as in Digital Transformation Consulting and Information Technology through its affiliate, Minsait, particularly in Spain and Latin America.

Indra's business model is built around a comprehensive portfolio of proprietary products and solutions, with a strong focus on innovation and high-value technology. In the 2023 financial year, Indra achieved revenues of €4.34 billion, employing more than 58,000 people across over 46 countries, with business operations in more than 140 countries.

At Indra, innovation is in our DNA. We are committed to advancing the digitalisation of transport to deliver more sustainable, safe, reliable, resilient and accessible mobility and infrastructure. Our solutions help reduce accidents, improve safety and protect passengers and critical infrastructure. We also support more efficient and environmentally responsible transport management by optimising public resources, reducing carbon emissions, promoting sustainable mobility and improving air quality.

Our approach is underpinned by four key principles:

Leadership – Generating real impact through tangible results.
Flexibility – Enhancing proximity to customers and differentiating Indra from its competitors.
Focus – Providing clear direction and driving specialisation across our business.
Reliability – Building trust and long-term relationships through experience and excellence.

As part of a recently awarded ticketing project, Indra has an exciting opportunity for an experienced Cyber Security Operations Manager to join its growing team in Dublin, Ireland.

Role Overview

Indra is seeking an experienced Cyber Security Operations Manager to join its growing team in Ireland, supporting the delivery and ongoing operation of its Next Generation Ticketing (NGT) Managed Service.

The role will be responsible for coordinating and overseeing operational information security across live IT infrastructure, cloud environments, networks and payment systems. Working closely with internal service delivery, engineering and operational teams, as well as external security providers, the successful candidate will ensure that security controls are effectively implemented, monitored and continually improved.

A key aspect of the position will be maintaining a secure, compliant and resilient operational environment, with particular emphasis on payment security, PCI DSS and P2PE compliance, vulnerability management, incident coordination and security governance.

The successful candidate will combine strong technical security knowledge with the ability to coordinate operational activities, manage risk and engage effectively with a range of technical and business stakeholders.

Key Responsibilities

Cyber Security Operations & Service Management

Lead and coordinate day-to-day operational security activities across live IT, cloud, infrastructure, network, end-user and payment environments.
Ensure agreed security controls are implemented, maintained and operating effectively across AWS, on-premises infrastructure and payment systems.
Work closely with service delivery and engineering teams to identify security requirements and ensure appropriate controls are incorporated into operational processes.
Provide security oversight across incident, problem, change and release management activities, ensuring security risks and actions are appropriately addressed.
Develop and maintain operational security procedures, technical documentation, runbooks and control records.
Coordinate operational security governance activities, ensuring risks, incidents, remediation plans and improvement initiatives are regularly reviewed and reported.

Security Monitoring & Incident Management

Coordinate the response to security alerts and incidents, including initial triage, investigation, escalation, evidence collection and incident documentation.
Manage the operational relationship with Security Operations Centre (SOC) providers, ensuring effective monitoring, communication and incident response.
Monitor SOC performance, identify recurring issues and coordinate appropriate service improvements.
Work with technical teams and security providers to improve monitoring coverage, threat detection and incident response capabilities.
Ensure lessons learned from security incidents are incorporated into operational procedures and security controls.

Risk & Vulnerability Management

Coordinate the identification, assessment and ongoing management of operational cybersecurity risks.
Oversee vulnerability management activities, including reviewing scan results, prioritising findings, assigning remediation actions and monitoring progress.
Ensure vulnerabilities and security weaknesses are addressed within agreed timescales, escalating overdue actions and significant risks where necessary.
Maintain accurate records of security risks, remediation activities, accepted exceptions and supporting evidence.
Coordinate cyber threat intelligence activities, assessing emerging threats and their potential impact on organisational infrastructure, suppliers and payment environments.

Payment Security & Compliance

Oversee operational security controls within Cardholder Data Environments (CDE), including access management, logging, monitoring and vulnerability management.
Support ongoing compliance with PCI DSS and Point-to-Point Encryption (P2PE) requirements.
Maintain security control evidence and coordinate audit activities, external assessments and requests from compliance assessors.
Track audit findings and corrective actions, ensuring remediation is completed and appropriately evidenced.
Ensure approved cryptographic and key-management procedures are followed across payment environments.
Monitor adherence to identity and access management requirements, including Multi-Factor Authentication (MFA) and privileged access controls.