Information Security & Compliance Manager

About Cityswift

CitySwift is the world’s leading performance optimisation platform for public transport, enabling data-driven decision-making for some of the largest transport networks globally. Backed by over €15 million in venture capital funding, we partner with major public transport operators and government authorities, including Go-Ahead Group, Transport for London, and many more. CitySwift is experiencing accelerated growth, with 117% year-over-year revenue growth in 2025.

Our mission is to increase the adoption of sustainable public transport worldwide. Today, our platform optimises more than 3 billion passenger journeys annually, and our target is to reach 10 billion journeys by the end of 2026.

At CitySwift, you’ll have the opportunity to take ownership, make a measurable impact, and grow professionally as part of a collaborative, mission-driven team. Join us in shaping the future of public transport by driving the next phase of CitySwift’s growth.

About the role

We're pursuing two certifications in parallel, and public-sector and enterprise customers are increasingly gating contract award on compliance answers, not just product fit. Today that work from policy ownership, the vendor and risk registers, audit evidence, bid compliance questionnaires, and the ongoing cycle of access reviews, training and renewals sits as a side-of-desk function with no named owner.

This role owns compliance end to end: the management system that governs how we handle data, security and customer commitments not the IT infrastructure itself. You'll act as our Information Security Manager and own the governance framework that underpins our security and quality management systems. You'll partner closely with Engineering and DevOps for technical evidence, but you own the governance, not the infrastructure.

What you'll do

• Lead us through ISO 27001 and ISO 9001 certification, working with our external consultancy and certification body.
• Plan and run the programme, bringing together control owners across Engineering, Commercial, Finance and the People team to keep evidence and actions on schedule.
• Own and maintain our Integrated Management System, covering information security and quality management, including policies, processes, risk registers, internal audits, management reviews and the recurring cycle of reviews and training.
• Run security reviews of new and existing suppliers, including AI tooling vendors.
• Own our answers to customer security questionnaires and the compliance sections of tenders.
• Track compliance commitments in customer contracts and flag any gap between what we promise and what's in place.
• Report progress and risks to the senior leadership team.
• Document how the function runs so it doesn't depend on one person.

What you'll bring

• Practical experience implementing or managing an ISO 27001 or ISO 9001 management system, ideally having supported an organisation through certification and external audit.
• A track record of running cross-functional programmes and influencing people without line authority.
• Experience managing auditors, consultancies or certification bodies.
• Experience with vendor risk and customer security questionnaires, ideally in B2B SaaS or for public-sector customers.
• Confidence working with engineers and assessing technical evidence.

Nice to have

Experience with both standards or an integrated management system, working knowledge of GDPR, or a qualification such as ISO 27001 or ISO 9001 Lead Implementer or Lead Auditor, CISM or CRISC.

We value, recognise and reward our people

• A role with real scope, where your impact is visible, your salary is reviewed as we grow, and there are career progression opportunities as the company scales and internationalises.
• Comprehensive health and life insurance through Laya Healthcare in Ireland and Aviva in the UK.
• Flexible working with hybrid working as the default in Ireland, core hours of 10am to 4pm, remote options depending on role and a work abroad programme of up to 6 weeks.
• 25 days annual leave from day one, increasing by half a day per year of service, plus company days off, a half day before public holidays and an end of year shutdown.
• Enhanced family leave, including 6 months fully paid maternity leave and 3 weeks paid paternity leave after 18 months’ service (and wedding leave!)
• And on top of all of this, the usuals done well. A matching pension scheme that increases with service, paid sick leave, bike to work scheme, wellbeing supports, and an employee referral programme with rewards of up to €4,000 (or equivalent) per referral.