Head of Cyber Security

Role Purpose

The Head of Cyber Security takes end-to-end accountability for NVD's security posture. This role drives strategic technology adoption, ensures strict regulatory and ISO quality compliance, and manages technical risks across multi-site logistics operations in Ireland and the UK. The post-holder leads operational security workflows, guides cross-functional technical teams, and communicates security priorities clearly to executive leadership.

This role requires occasional travel to our UK and Republic of Ireland sites to support business operations.

Pay and Benefits

Pension Scheme

Death In Service Benefit

Digital GP Service

Employee Assistance Programme

Annual Leave Purchase Programme

Long Service Awards

Staff Purchase Schemes:

o Tyres

o Tools

Bike to Work

Discounted Gym Membership

Key Accountabilities & Competency Mapping

1. Technological Adaptability & Innovation

Train, onboard, and guide operational teams on endpoint management tools (MDM/EDR), zero trust architecture, and secure cloud environments (AWS).

Identify opportunities to leverage modern security technologies including zero trust zoning, API-based EDI modernization, and modern SIEM capabilities to streamline IT workflows.

Transition security operations from passive alert triage to proactive threat detection and continuous security monitoring.

2. Quality Focus & Continuous Improvement

Lead the end-to-end ISO 27001 implementation, establishing the Information Security Management System (ISMS), policy framework, and risk register from the ground up.

Conduct root-cause analysis on security incidents and quality deviations to drive corrective action and continuous operational improvement.

Enforce team adherence to ISO quality standards, customer security requirements, and internal policy frameworks across all digital endpoints (600+ devices).

3. Operational Excellence

Optimise resource allocation and daily security management across endpoint infrastructure, cloud environments, and internal network architecture.

Oversee critical technical delivery programmes including Wi-Fi upgrades, zero trust network segmentation, and EDI/customer integration modernisations.

Monitor security KPIs to maintain operational integrity, meet service timelines, and reduce systemic vulnerability risks.

4. Adaptability, Flexibility & Risk Management

Maintain operational stability and business continuity across critical vehicle logistics operations during cyber disruptions or technical incidents.

Own, maintain, and execute the Incident Response Plan, coordinating annual Business Continuity / Disaster Recovery (BC/DR) testing.

Adapt operational capacity and security protocols during shifts in OEM customer integration requirements or regional regulatory frameworks (e.g., NIS2).

5. Communication & Leadership

Communicate operational security priorities, risk exposure, and governance requirements clearly to the CTO, non-technical executive teams, and the Audit Committee.

Guide, mentor, and motivate IT, operations, and technical teams to achieve security performance targets and embrace a culture of security awareness.

Facilitate seamless cross-departmental communication to resolve technical roadblocks between security, infrastructure, and business applications.

6. Customer-Centricity & Relationship Management

Evaluate and address customer cyber security requirements in tender responses and formal contracts.

Build and maintain strong operational relationships with key external stakeholders, supply chain partners, and third-party technology vendors.

Assess third-party supply chain risks to safeguard client data integrity and build trust in NVD’s service delivery.

Essential Qualifications & Experience

ISO 27001 Expertise: Certified ISO 27001 Lead Implementer or Lead Auditor with proven success delivering certification from a low-maturity baseline.

Professional

Experience

• Minimum 7 years in information security, including at least 3 years in a senior or lead capacity.

• Technical Mastery: Practical experience with SIEM platforms, endpoint management systems (MDM/EDR), cloud infrastructure (AWS preferred), and Zero Trust Architecture

• Operational Background: Experience working within logistics, supply chain, or operationally intensive, low-downtime environments.

• Communication: Proven ability to translate technical security risks into clear, actionable reporting for executive management.

Desirable Qualifications

Professional certifications such as CISSP, CISM, or equivalent.

Familiarity with NIS2 compliance frameworks and OEM/Automotive industry cybersecurity expectations.

Equal Opportunities Statement

National Vehicle Distribution is an equal opportunity employer committed to fostering a diverse and inclusive workplace. We value openness, innovation, customer focus, and operational excellence. Our organisation actively promotes equality and prohibits discrimination based on gender, marital/civil status, family status, age, disability, sexual orientation, race, religion, or membership of the Traveller community, in accordance with Irish and UK equality legislation. We encourage applications from all qualified individuals and are dedicated to creating an environment where everyone can thrive and contribute to our shared success.

IND2