Information Security Specialist- Permanent Role

Willingness & flexibility to travel to UK locations, when required to support InfoSec work. (Very Occasional travel to Dublin HQ (Glasnevin) as needed to support audit work You'll report to and work closely with the Information Security Lead, as well as Cybersecurity Engineering, DevOps, IT, Data Governance, and AI Governance to embed secure-by-design practices across the organisation. Information security underpins all of our business activities , including AI development and compliance with Medical Device regulations This role is ideal for a hands-on security specialist who supports the ISMS, validates controls for themselves, and drives continuous improvement with energy and pragmatism. You'll work across the business as someone who meets challenges head-on, brings people with them, and makes security work in practice, not just on paper. Security operations is handled separately. This role involves protecting systems and data that directly support cancer diagnostics and drug development, security work with real-world consequence. We hold ISO 27001 certification across our core business units and are expanding coverage as we grow. Support the day-to-day running of the ISO 27001 ISMS across our Deciphex business units (Deciphex, Diagnexia & Patholytix) Assess which ISMS activities deliver measurable business value - and be willing to challenge or retire processes that aren't. Security Governance & Risk Maintain a live, decision-oriented risk register with owners and mitigation plans. Champion a risk-aware culture where decisions are informed by risk, not paralysed by it. Develop and maintain policies and procedures that reflect how the business actually operates (not a unworkable bottleneck) Support vendor and customer security due diligence in support of commercial and product needs. Maintain awareness of applicable regulatory requirements (EU AI Act, GDPR, HIPAA, MDR/IVD) and ensure the ISMS remains aligned with our other Certifications and Standards Awareness & Security Culture Build engaging security awareness training that changes behaviour, not just completion rates. Act as a visible, approachable point of contact for information security questions to enable change across the business Translate security requirements into plain language for non-technical audiences without losing accuracy or impact. 5+ years in Information Security / ISMS operations. ~ Familiarity with cloud security fundamentals Technical background and control implementation experience Responses to security reviews enable rather than delay business outcomes. Security risks are visible, owned, and actively managed. Security is seen as a trusted business partner with teams proactively involving security early in product and commercial decisions rather than at the end This role is likely to suit someone who enjoys working in a fast-paced, growing environment where resources may be more limited and priorities can shift quickly. Comfortable working with a high degree of autonomy - you naturally lead & take ownership of priorities and make progress without the need for close supervision or extensive direction. ~World-class talent, hyper-growth environment, zero mediocrity. A flexible, hybrid model that trusts you to manage your time like an adult. ✈️ Paid fairly, rewarded for performance. Competitive salary with annual increments tied to what you actually deliver. Generous annual leave plus a fully paid Christmas shutdown. Through the work that we do, the team at Deciphex helps pharma to accelerate the process of essential drug development and helps cancer patients get a timely and accurate diagnosis. Founded in Dublin in 2017, Deciphex has scaled rapidly to a team of over 230 people and counting who are providing software solutions to address the pathology gap in research pathology and clinical areas. We are software developers, clinical specialists, artificial intelligence engineers, operations professionals and so much more, all working as one team to support our customers and patients. All qualified applicants will be considered for employment without regard to age, race, religious beliefs, political views, gender identity, affectional or sexual orientation, national origin, family or marital status (including pregnancy), disability, membership of the travelling community or any other classification protected by applicable law. A copy of our Privacy Policy can be viewed here