Cyber Security Architect

Applications are invited for the following position:

Title of Post: Cyber Security Architect

JOB SYNOPSIS

We are seeking an experienced Cyber Security Architect to design, develop and implement robust security architectures that protect the organisation’s systems, networks, applications and data. The role is responsible for defining security standards, identifying and mitigating cyber risks, and ensuring security is embedded across technology projects and business operations.

Office of the Director of Information Technology

Information Technology Division

Contract Type: Permanent

Salary Scale: €70,551 - €113,366 p.a.

University of Limerick is a research-led, energetic and enterprising institution with a proud record of innovation and excellence in education and scholarships. We value creativity, curiosity and excellence in our inclusive community which is committed to social good. Our motto Eagna chun Gnímh translates as Wisdom for Action reflecting our mission to contribute to the discovery of new knowledge for a better world.

Informal enquiries regarding the post may be directed to:

Mr Bob Loftus

Head of Cyber Security

Information Technology Division

University of Limerick

Email: [email protected]

The closing date for receipt of applications is Monday, 30th November 2026

Applications must be completed online before 12 noon, Irish Standard Time on the closing date.

Please note your application must include:

A letter of introduction and a current CV indicating how you meet the criteria outlined in the Job description.

A completed online application form.

Are you currently legally entitled to work and reside in Ireland?

If you are not currently an EEA Citizen and have stated that you are currently legally entitled to work and reside in Ireland, you MUST upload a copy of your current Visa and Work permit in the attachments section application form. Unfortunately, if the attachment, as noted, is required and not provided your application cannot be processed.

Please note your current work authorisation status must allow you to fulfil the terms of the contract on offer.

Please email [email protected] if you experience any difficulties

Applications are welcome from suitably qualified candidates.

Further information for applicants and application material is available online from: University of Limerick Vacancies

We are committed to upholding the principles of fairness, equality, and transparency in pay, in line with the EU Pay Transparency Directive (Directive (EU) 2023/970)

Many thanks for your interest in this role.

TITLE OF POST: Cyber Security Architect LOCATION: University of Limerick REPORTS TO: Head of Cyber Security CONTRACT TYPE: Permanent SALARY SCALE: €70,551 - €113,366 p.a.

JOB DESCRIPTION

JOB SYNOPSIS:

We are seeking an experienced Cyber Security Architect to design, develop and implement robust security architectures that protect the organisation’s systems, networks, applications and data. The role is responsible for defining security standards, identifying and mitigating cyber risks, and ensuring security is embedded across technology projects and business operations.

PURPOSE OF JOB:

The Cyber Security Architect will be a member of the IT Security Team and will be accountable for ensuring security is built into the organization's technology landscape. The Cyber Security Architect will play a key role in designing and implementing robust cybersecurity solutions. The Cyber Security Architect will work closely with IT implementation teams to ensure that security principles, standards, and frameworks are embedded across IT environments to protect UL systems and data. They will define security related requirements and provide security guidance. The Cyber Security Architect will identify and communicate risks, propose mitigation strategies, and deliver architecture solutions across multiple technical areas. This is a hands-on, design-led role and the incumbent will be involved in decision-making, from early threat modelling and risk assessment through to architecture assurance and implementation guidance.

KEY ACCOUNTABILITIES:

Maintain and Enhance Security Architecture Across Operational Environments

• Define, maintain, and continuously improve security architectures for infrastructure, cloud platforms, applications, and security technologies. • Ensure security controls remain effective, resilient, and aligned to business and regulatory requirements. • Provide architectural guidance for projects, operational changes and service improvements.

Security Control Assurance and Governance

• Continuously evaluate the operational environment against emerging threats, documenting architectural risks and presenting mitigation trade-offs to leadership. • Review and assess the effectiveness of security controls including endpoint security, SIEM and cloud security solutions. • Ensure operational platforms comply with security standards, policies, and design principles. • Manage security exceptions and recommend compensating controls where necessary.

Operational Risk Management and Vulnerability Remediation

• Identify, assess, and prioritize security risks arising from vulnerabilities, technology changes, emerging threats, and operational activities. • Provide architectural recommendations to reduce risk and support remediation activities. • Operationalize threat modelling. Conduct continuous threat modelling on active production systems to identify architectural flaws before they can be exploited by adversaries. • Conduct risk assessments based on identified vulnerabilities and issues across the university or as part of the Secure by Design process • Support risk management and assurance reporting.

Incident Response and Architectural Remediation

• Provide security architecture expertise during major incidents, investigations, and post-incident reviews. • Perform root cause analysis of security control failures and identify long-term corrective actions. • Ensure lessons learned are translated into architectural improvements

Key Working Relationships

The post holder will maintain effective working relationships with:

• Infrastructure Team • Networks Team • Enterprise Architecture team • ITD leadership • System and Service Owners • Data Protection Officer, Risk & Compliance functions • Academic staff, researchers and professional service units • External vendors, partners and sectoral groups

Job Boundaries

The role is primarily computer-based and may require prolonged periods working at a workstation and detailed analysis of technical information. The post holder may need to respond to incidents under time pressure and manage competing priorities while maintaining accuracy and sound judgement. The role may require access to security-sensitive systems and privileged information. Such access must be used only for authorized purposes and in accordance with organizational policies, least-privilege principles, acceptable-use requirements and relevant legal obligations. The post holder is not normally responsible for the day-to-day management of staff, but may lead technical activities, coordinate incident or remediation work and provide specialist advice to colleagues and service owners.

Knowledge

• Knowledge of cyber security principles, threats, attack techniques, vulnerabilities and defensive controls, including confidentiality, integrity, availability, least privilege and defence-in-depth - Essential • Knowledge of security monitoring, incident response, vulnerability management and security risk assessment - Essential • Knowledge of security governance, policies, risk management, information assurance and relevant legal, regulatory and organizational requirements - Essential

Education/Qualifications

• Primary degree in a relevant discipline (or equivalent experience) - Essential • A Postgraduate qualification or relevant professional certification would be desirable (e.g. cloud, architecture, governance) - Desirable

Experience

• Over 5 years’ experience in cyber security, information security, security engineering, infrastructure security, SOC operations, vulnerability management or a closely related field - Essential • Demonstrable experience investigating and responding to security incidents, vulnerabilities or other cyber security events in a complex IT environment - Essential • Experience applying security controls and risk-based recommendations across infrastructure, applications, endpoints, networks or cloud services - Essential • Experience working collaboratively with technical and non-technical stakeholders and communicating complex security issues in a clear, practical and proportionate manner - Essential

Work Environment

The role is primarily based within ITD, with engagement across academic, research, professional services and technical communities. Occasional work outside normal office hours may be required.

BEHAVIOURAL COMPETENCIES:

Customer Focus

• Translates operational feedback into strategic improvements - acts decisively to address inefficient or underperforming areas of the business. • Sets service targets and monitors progress to drive up service standards. • Acts as role model in personal approach to customer focus. • Creates an environment where team/s are empowered to focus on the customer.

Managing the Relationship with the Business

• Manages the quality and effectiveness of relationship management activities. • Provides support for business relationship management activities. • Supports business change, acting as a single point of contact for senior stakeholders, facilitating relationships between them. • Ensures that stakeholders understand available IT services and promotes financial and commercial awareness to deliver value-for- money. • Conducts analysis of demand for services and influences stakeholders to ensure that the necessary investments are made to deliver required services. • Negotiates at senior level on technical and commercial issues, to ensure that customers, suppliers and other stakeholders understand and agree what will meet their needs, and that appropriate service level agreements are defined. • Oversees monitoring of relationships including lessons learned and appropriate feedback • Initiates improvement in services, products and systems.

Plan & Deliver

• Has defined authority and responsibility for a significant area of work, including technical, financial and quality aspects. • Establishes objectives, delegates responsibilities. • Is accountable for actions and decisions taken by self and subordinates. • Deals firmly and promptly with performance issues; lets people know what is expected of them and when (where appropriate) • Clarifies business priorities, allocates resources appropriately • Agrees roles and responsibilities of staff and stakeholders, secures resources. • Anticipates risk/high impact and acts swiftly to mitigate. • Initiates and drives forward projects for area. • Develops operational plans for team/area, contributes to strategy.

Problem Solving & Decision Making

• Makes decisions which impact the work of ITD, achievement of organisational objectives and financial performance. • Encourages others to implement optimal decisions. • Supplies a transparent audit trail of solutions. • Makes decisions through weighing up the cost-benefit and risk implications. Provides specialist/authoritative advice to others as required to enable them to make decisions.

IT Governance

• Understands and communicates the role and impact of IT in UL. • Promotes compliance with relevant governance and strategies. • Influences/develops IT standards, processes, policy and procedures. • Provides advice and makes decisions appropriate to role.

Professional Development

• Has a broad understanding of all aspects of IT and deep understanding of own specialism(s) • Advises on training. • Removes barriers to personal development of others in own area of accountability • Evaluates impact of learning, initiates/influences T&D. • Coordinates the identification and assessment of new and emerging hardware, software and communication technologies, products, methods and techniques. Evaluates relevance of these Provides regular briefings to staff and management.

Change, Flexibility, Adaptability

• Encourages others to incorporate continuous improvement as a way of approaching work. • Recognizes strategic application of IT, and initiates investigation and development of innovative methods of exploiting IT assets. • Plays an active role in improving the interface between the business and IT and supporting business change.

Communicate & Collaborate

• Absorbs complex technical information and communicates effectively at all levels to both technical and non-technical audiences. • Is persuasive, politically aware. • Develops strategic proposals and policies in a style and language necessary to guide, inform, and/or persuade. • Can develop high-level relationships with customers, suppliers and industry. • Encourages team working. Leadership

• Communicates the vision. Sets direction for own part of the business. • Gains commitment. • Monitors progress against goal achievement. • Recognises and celebrates others' contributions & achievements. • Works to provide a supportive environment by managing resources and removing blocks to effective working.

Further Information for Candidates:

Are you currently legally entitled to work and reside in Ireland?

If you are not currently an EEA Citizen and have stated, you are currently legally entitled to work and reside in Ireland. You MUST upload a copy of your current Visa and Work permit in the attachments section application form, or your application will not be processed. Please note your current work authorisation status must allow you to fulfil the terms of the contract on offer.

Recruitment Procedures used at University of Limerick (UL)

University of Limerick uses a three-stage recruitment procedure: screening, shortlisting and interview.

Screening: Initially, applications for an advertised position are screened to determine if applicants meet the ‘Essential Criteria’ as outlined in the advertised job description. It is only candidates who meet the ‘Essential Criteria’ that progress beyond this stage.

Shortlisting: Depending on the number of applications remaining, it may not be possible to interview every candidate who has passed the screening process. Therefore, at this stage the Selection Board may review the applications and select a final shortlist of candidates who, in their view, are most closely aligned to the post as advertised.

Interview: Once a shortlist has been finalised, all applicants will be notified of the status of their application. The final shortlist of candidates will then be invited to interview. We aim to provide at least two weeks’ notice to all candidates. The interview process will take the format of a standard interview and may include a presentation –you will be provided with details of this in your invitation to interview letter.

University of Limerick benefits to staff

Employees of the University of Limerick receive a variety of benefits including: • Supported professional development under the Researcher Development Programme and Staff Training Programmes.

• Membership of the Public Sector Single Public Service Pension Scheme.

• Membership of the Income Continuance Plan

• The opportunity to join the University’s Additional Life Cover plan.

• Coverage in the UL Sick Leave Scheme (available under “S” on the HR A- Z)

• Flexible working practices such as the Shorter Working Year Scheme.

• Preferential rates for health insurance.

• Employee wellness is a priority and a number of initiatives take place each year for the benefit of UL employees, see more at Be Well at UL.

• Preferential rates for access to the UL Arena swimming pool and fitness centre.

Additional Links: • Join the Team in UL Join the team in UL | University of Limerick • Link to website for new staff New To UL - Staff Roadmap

Equal Opportunities

University of Limerick holds a Silver Athena SWAN award in recognition of our commitment to advancing equality in higher education. University of Limerick is an equal opportunities employer and is committed to selection on merit, welcoming applicants from all sections of the community. UL is committed to developing and maintaining a positive working environment, in which all employees are treated with dignity & respect. In pursuit of this, it is the policy of the University to provide all employees with an environment which is free from bullying, harassment or victimisation of any form. You can read more about UL’s commitment to equality, diversity and inclusion here.

Culture Charter A positive culture within an organisation is a shared system of values and behaviours that influence and reflect how its people behave and interact with each other and the wider community. It is shaped by the everyday actions, behaviours and words that are used. The values and behaviours outlined in UL’s Culture Charter should guide how we act, interact and connect with one another in the challenges and successes of university life.

Pension Abatement If an appointee has previously been employed in the Civil or Public Service and that appointee is entitled to or in receipt of a pension from the Civil or Public Service or where a Civil/Public Service pension comes into payment during the appointee’s re-employment that pension will be subject to abatement in accordance with Section 52 of the Public Service Pensions (Single Scheme and other Provisions) Act 2012. Please note: In applying for this position you are acknowledging that you understand that the abatement provisions, where relevant, will apply. It is not envisaged that the employing Department/Office/Body will support an application for an abatement waiver in respect of appointments to this position.

Qualifications Please take note of the essential qualifications for this position as listed in the job description. If you are successful in being offered this position, the offer will be made pending the Chair of the selection committee verifying your qualifications. Therefore, after the interview, you will be required to forward your transcripts to the Chair by email. No contract of employment will be issued until all required documentation is received.