Senior Information Security Officer

Work Mode: Hybrid 3+ days per week in our Dublin office

Department: Security

 

About the Company 

LearnUpon partners with over 1,600 organisations globally to unlock the potential of employees, customers & members through learning that’s easy, scalable and focused on results.

Read more about life at LearnUpon here. 

 

About the Team

The Security team is responsible for the overall security and privacy posture at LearnUpon. We are a vibrant and growing team that engages with all parts of LearnUpon (including our customers), maintains our strong security culture and works on new and exciting initiatives. Our mission is to safeguard LearnUpon, Luppers, our services, and our customers' data—providing a competitive advantage that enables us to meet our business objectives and ensure that we can continue to grow at scale.

 

About the Opportunity

As our Senior Information Security Officer based in Dublin, you will play a critical role in safeguarding our global learning platform and protecting customer trust. You will take a hands-on approach to managing risk, driving compliance across key frameworks, and streamlining customer security questionnaires at volume. This role acts as a strategic catalyst for our security posture by blending governance and technical security concepts, allowing us to deliver robust protection and support LearnUpon's growth in key global markets.

 

In addition, you'll be responsible for:

• Security Operations & Tooling: Manage and enhance our Cloud SIEM (including pipeline configuration, alerting, and sensitive data scanning), maintain security dashboards, and explore AI-powered alerting and automation within our security tooling
• Cloud Security Posture: Support our Cloud security posture management and collaborate with SRE on infrastructure security improvements
• Incident Response & Risk Management: Participate in incident response activities and ad-hoc security events, identify and manage information security risks within the organization, and develop strategic mitigation plans
• Compliance & Governance: Ensure compliance with relevant laws, regulations, and industry standards (including GDPR, ISO 27001, ISO 27701, and SOC2), while maintaining associated policies, procedures, and guidelines
• Customer Assurance & Trust: Work with prospects and customers to provide assurance on how we protect their data, assist in completing RFPs, RFIs, and due diligence documentation, and partner with internal Legal teams to meet contractual obligations
• Third-Party & Vendor Risk: Perform third-party security risk assessments and provide guidance on how to securely implement new software solutions
• Security Championship: Work with stakeholders across the organisation to incorporate security requirements into new initiatives and support other teams in delivering strong security and privacy practices

 

Skills & Experience 

Must-Haves

• 5+ years of professional experience in a relevant information security role, with at least 2 of those years in a governance, risk, and/or compliance-related role
• Strong understanding of security frameworks and compliance standards such as SOC 2, ISO 27001, and GDPR
• Hands-on experience with SIEM platforms (such as Datadog cloud SIEM, Splunk, etc.)
• Familiarity with cloud security (AWS preferred), including SecurityHub, IAM, S3 security, and VPC
• Proven experience completing and automating customer security questionnaires, RFPs, and RFIs at volume
• A strong understanding of technical security concepts and the application of these in real-world environments
• Experience working in a security incident management, vulnerability management, and/or threat intelligence role
• Excellent written and verbal communication skills, with the ability to work independently, collaborate cross-functionally, and manage stakeholders effectively
• Experience using AI tools to streamline tasks and improve efficiencies

 

Nice-to-Haves

• A Bachelor's Degree in a relevant discipline (e.g., Computer Science, Information Technology, etc.)
• Experience with security automation, such as scripting, workflow automation, or building security bots/agents
• Experience with data privacy and subprocessor management (GDPR, DPA reviews)
• Experience designing and implementing security controls in cloud environments (e.g., AWS)