Cyber Risk & GRC Analyst

Stage; Dublin; On-site; EUR 65,000 - 90,000; Full time

Job summary

KKR is seeking an Information Security Risk Analyst to join the Information Security Governance, Risk, and Compliance (GRC) team. The role will help build and operate cyber and technology governance processes, identify risk issues, support remediation strategies, and manage cyber regulatory initiatives.

You will work across Information Security, Technology, and control functions to strengthen governance, improve risk visibility, support security assessments, and enhance cyber risk reporting.

Qualifications

• Bachelor's degree in Information Security, Information Systems, Computer Science, Risk Management, or a related field—or equivalent work experience.
• Cybersecurity certification would be advantageous, such as CISSP, CompTIA Security+, or an equivalent industry-recognized certification(s).

Responsibilities

• Support the identification, assessment, documentation, and management of cyber and technology risk issues and develop appropriate remediation, mitigation, and risk management strategies.
• Monitor risk issues and remediation activities, helping ensure risks are appropriately governed through their lifecycle.
• Maintain and support workflows to help ensure cyber risk and exception processes operate consistently and effectively.
• Help develop and enhance cyber and technology governance frameworks, standards, procedures, and supporting documentation.
• Support the development and maintenance of a cyber control catalog and associated control documentation.
• Support improvements to governance tooling, workflow design, and documentation.
• Support security risk assessments of applications, systems, technologies, and technology changes.
• Participate in application security and system design assessments to identify security risks and control requirements.
• Collaborate with technical and business stakeholders to understand system designs, identify risks, and recommend proportionate security controls.
• Support the delivery and coordination of cyber regulatory initiatives in response to new and changing regulatory requirements.
• Help assess regulatory requirements and translate them into practical governance, risk, and control activities.
• Help ensure cyber governance processes remain aligned with applicable regulatory obligations and industry frameworks.
• Support the development and enhancement of cyber risk metrics, management information, dashboards, and reporting.
• Analyze risk and governance data to identify trends, themes, and areas requiring management attention.
• Help communicate cyber risk information clearly to technical, business, management, and control stakeholders.

Skills

Information Security

Risk Management

GRC

Stakeholder Management

Regulatory Compliance

Education

Bachelor's degree in Information Security or related field

Tools

GRC platforms

Workflow tools

Job description

KKR is seeking an Information Security Risk Analyst to join the Information Security Governance, Risk, and Compliance (GRC) team. The role will help build and operate cyber and technology governance processes, identify risk issues, support remediation strategies, and manage cyber regulatory initiatives.

You will work across Information Security, Technology, and control functions to strengthen governance, improve risk visibility, support security assessments, and enhance cyber risk reporting.