IT GRC Lead

The GRC Lead will be responsible for establishing, implementing and continuously maturing an enterprise-wide Governance, Risk & Compliance (GRC) programme. The role will focus on managing and reducing high-priority technology and cybersecurity risks, including Disaster Recovery readiness, Identity Governance, Third-Party Cyber Risk and regulatory compliance requirements such as ISO 27001 and Cyber Essentials+

Must-Have Skills

• 6+ years’ experience across GRC, IT Risk, Cybersecurity Risk, Internal Audit or Enterprise Risk Management.
• Strong knowledge of GRC frameworks, enterprise risk management, ISO 27001/27002 or NIST CSF.
• Proven ability to develop and maintain governance frameworks, policies, standards and processes aligned to business, regulatory and contractual requirements.
• Strong capability in IT and cybersecurity risk assessment, including risk registers, risk treatment, remediation and ongoing monitoring.
• Strong understanding of Disaster Recovery and resilience, including RPO/RTO, testing, documentation and assurance.
• Knowledge of Identity Governance, Joiner/Mover/Leaver controls and credentials/access risk.
• Strong understanding of Third-Party Cyber Risk, supplier due diligence and contract-related security risks.
• Experience managing ISO 27001, Cyber Essentials+ and regulatory compliance, including audit preparation and evidence management.
• Strong understanding of IT infrastructure, cloud, ERP, identity platforms and security controls, with the ability to translate technical risks into business recommendations.
• Excellent stakeholder management, communication and influencing skills, with the ability to advise CIO/Executive stakeholders and drive remediation across IT and business teams.

Nice-to-Have Skills

• CISA, CRISC, CISSP or ISO 27001 Lead Implementer/Lead Auditor certification.
• Knowledge of ISO 31000, SOC frameworks and global privacy regulations.
• Background in building or maturing an enterprise GRC function.
• Previous responsibility for leading or mentoring GRC professionals.
• Experience producing KRIs, risk dashboards and executive/Board-level reporting.
• Knowledge of IAM/IGA, PAM and cloud security governance across Azure, AWS or GCP.
• Experience with ERP security, security control testing, cyber resilience and incident response governance.
• Background within a regulated, multinational or complex enterprise environment.
• Ability to develop and deliver GRC awareness, compliance training, policies, standards and internal guidance.
• Commitment to ongoing CPD, including GRC forums, industry events, regulatory updates, vendor training and capability planning.

Must hold Stamp 4, EU or Irish passport - this is fully onsite North Dublin