Work Mode: Hybrid 3+ days per week in our Dublin office
Department: Security
LearnUpon partners with over 1,600 organisations globally to unlock the potential of employees, customers & members through learning that's easy, scalable and focused on results.
Read more about life at LearnUpon here.
The Security team is responsible for the overall security and privacy posture at LearnUpon. We are a vibrant and growing team that engages with all parts of LearnUpon (including our customers), maintains our strong security culture and works on new and exciting initiatives. Our mission is to safeguard LearnUpon, Luppers, our services, and our customers' data—providing a competitive advantage that enables us to meet our business objectives and ensure that we can continue to grow at scale.
As our Senior Information Security Officer based in Dublin, you will play a critical role in safeguarding our global learning platform and protecting customer trust. You will take a hands-on approach to managing risk, driving compliance across key frameworks, and streamlining customer security questionnaires at volume. This role acts as a strategic catalyst for our security posture by blending governance and technical security concepts, allowing us to deliver robust protection and support LearnUpon's growth in key global markets.
In addition, you'll be responsible for:
- Security Operations & Tooling: Manage and enhance our Cloud SIEM (including pipeline configuration, alerting, and sensitive data scanning), maintain security dashboards, and explore AI-powered alerting and automation within our security tooling
- Cloud Security Posture: Support our Cloud security posture management and collaborate with SRE on infrastructure security improvements
- Incident Response & Risk Management: Participate in incident response activities and ad-hoc security events, identify and manage information security risks within the organization, and develop strategic mitigation plans
- Compliance & Governance: Ensure compliance with relevant laws, regulations, and industry standards (including GDPR, ISO 27001, ISO 27701, and SOC2), while maintaining associated policies, procedures, and guidelines
- Customer Assurance & Trust: Work with prospects and customers to provide assurance on how we protect their data, assist in completing RFPs, RFIs, and due diligence documentation, and partner with internal Legal teams to meet contractual obligations
- Third-Party & Vendor Risk: Perform third-party security risk assessments and provide guidance on how to securely implement new software solutions
- Security Championship: Work with stakeholders across the organisation to incorporate security requirements into new initiatives and support other teams in delivering strong security and privacy practices
Must-Haves
- 5+ years of professional experience in a relevant information security role, with at least 2 of those years in a governance, risk, and/or compliance-related role
- Strong understanding of security frameworks and compliance standards such as SOC 2, ISO 27001, and GDPR
- Hands-on experience with SIEM platforms (such as Datadog cloud SIEM, Splunk, etc.)
- Familiarity with cloud security (AWS preferred), including SecurityHub, IAM, S3 security, and VPC
- Proven experience completing and automating customer security questionnaires, RFPs, and RFIs at volume
- A strong understanding of technical security concepts and the application of these in real-world environments
- Experience working in a security incident management, vulnerability management, and/or threat intelligence role
- Excellent written and verbal communication skills, with the ability to work independently, collaborate cross-functionally, and manage stakeholders effectively
- Experience using AI tools to streamline tasks and improve efficiencies
Nice-to-Haves
- A Bachelor's Degree in a relevant discipline (e.g., Computer Science, Information Technology, etc.)
- Experience with security automation, such as scripting, workflow automation, or building security bots/agents
- Experience with data privacy and subprocessor management (GDPR, DPA reviews)
- Experience designing and implementing security controls in cloud environments (e.g., AWS) and an understanding of SaaS security best practices
- Relevant professional certifications: CISSP, CISM, CompTIA Security+, or equivalent
- Experience in the design and implementation of cross-functional security measures
- If you don't tick every box but believe this role is a mutually good fit, please don't hesitate to apply. We'd love to hear from you.
From comprehensive rewards and generous time off to meaningful investment in your growth and development, LearnUpon gives you the support, trust, and opportunity to do the most impactful work of your career.
Learn more here.
- Qualified applicants may be invited to an initial screening call with a member of our TA Team
- Successful candidates will be invited to a series of practical interviews
- Finally, candidates will have an interview with our COO
- Successful candidates will be contacted with an offer to join our team
Note: At LearnUpon, we utilise AI to enhance the speed and quality of our screening and assessment practices, but our hiring decisions are always human.
LearnUpon is an Equal Opportunities Employer.
We do not discriminate on the basis of gender, marital status, family status, age disability, sexual orientation, race, religion, membership of the Traveller community, or any other legally protected status.
Check out our Careers site and Instagram to learn more about working at LearnUpon.
By submitting your application, you agree to LearnUpon's Privacy Policy.
