About this role
About Origina Origina is a rapidly growing global challenger technology company on a mission to stop unnecessary technology change by helping enterprises to extend, protect and enhance their software assets. We believe organisations should be free to run their systems for as long as they choose - without being pushed into costly, unwanted upgrades that don’t align with their strategy, so we step in to provide an alternative from the original vendor.
We’re scaling fast, with a clear path to €0.5 billion in the next five years, and expanding our presence across Europe, the US, and Australia. As a leading force in independent enterprise software support, we help the world’s largest organisations take back control of their technology roadmap and unlock genuine commercial freedom.
If you’re energised by growth, excited by change, and motivated to help customers challenge long-standing industry norms, this is the team to join. At Origina, you’ll be part of a bold, fast-moving global business where your impact will be felt immediately.
Role Purpose
Act as Origina's senior technical and operational cyber-security lead and principal deputy to the Head of Information Security.
This is a senior practitioner role requiring the technical depth and judgement to independently manage significant security activities, lead technical incident response, provide security architecture expertise and deputise for the Head across core information and cyber-security responsibilities.
Key Responsibilities
Security Operations & Architecture
· Lead day-to-day security monitoring, investigation and technical incident response.
· Operate and improve Microsoft Sentinel/SIEM, Defender XDR and associated monitoring capabilities.
· Maintain detection, alerting, threat analytics and escalation processes.
· Provide security architecture expertise across Microsoft 365, Azure, SaaS, endpoints and applications.
· Lead technical implementation across Entra ID, Conditional Access, Zero Trust, privileged access, Defender, Purview and Global Secure Access.
Threat, Vulnerability & Incident Management
· Coordinate vulnerability scanning, penetration testing and remediation.
· Assess emerging threats and Origina's exposure to significant vulnerabilities.
· Lead technical investigation, containment, recovery and root-cause analysis during incidents.
· Maintain security runbooks and track corrective actions.
DevSecOps & Application Security
· Work with Development and Product teams to embed security throughout the development lifecycle.
· Conduct threat modelling and security architecture reviews.
· Support SAST, SCA, DAST, secrets management, API security, CI/CD security, logging and vulnerability testing.
· Support production security gates and security-exception management.
AI Security
· Implement Origina's AI security controls and support the Head in AI governance.
· Review AI applications, agents, identities, permissions and data access.
· Support human-in-the-loop controls, AI monitoring and shadow-AI discovery.
· Assess prompt-injection, data-leakage and excessive-permission risks.
· Support Agent 365, Purview DSPM for AI and relevant Defender capabilities.
· Escalate higher-risk AI use cases and exceptions.
Governance, Risk & Assurance
· Support ISO 27001, Cyber Essentials and ISMS activities.
· Maintain technical evidence for audits and assurance.
· Support risk assessments, customer security reviews, contractual requirements and vendor assessments.
· Provide practical security guidance across the business.
Business Continuity & Deputising
· Support Business Impact Analysis, Disaster Recovery, continuity exercises and resilience testing.
· Act as delegated security or continuity lead when required.
· Represent the security function in operational, architecture, development and customer discussions in the Head's absence.
· Escalate material risks, policy exceptions and significant incidents appropriately.
Experience & Knowledge
· Significant hands-on information and cyber-security experience. ~10 years.
· Strong Microsoft Entra, Defender, Purview, Azure and Sentinel/SIEM expertise.
· Strong incident-response, vulnerability-management and security-monitoring experience.
· Zero Trust, identity and cloud-security expertise.
· Application security, DevSecOps and secure-development experience.
· ISO 27001/GRC and security-assurance knowledge.
· AI security and governance experience or strong transferable cloud/application-security expertise.
· Ability to operate independently and communicate effectively with technical, customer and senior stakeholders.
Required: At least one of the following: CISSP, CISM, CCSP, SC-100, SC-200, AZ-500, ISO 27001 lead and equivalent technical experience.
What We Offer
• Competitive compensation that rewards achievement
• Hybrid, flexible working model
• Family Health, Dental & Vision Insurance from day 1
• Life insurance & Income Protection
• 23 days Annual Leave plus 2 company days with additional days earned based on your tenure
• Generous Maternity & Paternity leave policies
• 6% Pension match
• €200 annual wellness benefits
• €1,000 professional development benefit
• Flexibility of working remotely from anywhere for up to 4 weeks per year
• A dedicated Volunteer Day to give back to your community and support meaningful causes
• Employee Assistance Programme
• An inclusive environment with regular events organised by Engagement, and Diversity Committees
Don't meet all the requirements? If you feel you'd be a great fit, we'd love to hear from you. At Origina, the most important ingredient is culture fit and recognising those who want to live our high-performance values of Fairness, Trust, Relationships, and Opportunities.
Origina is an equal opportunity employer. We're proud of our ongoing efforts to foster inclusion in the workplace. Individuals seeking employment are considered without regard to race, colour, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, disability, military or veteran status, or any other characteristic protected by applicable law.