Cyber Security GRC Specialist

GCS; Dublin; Vor Ort; EUR 90.000 - 120.000; Vollzeit

Zusammenfassung

GCS in Ireland is seeking an experienced Cyber Security GRC Specialist to strengthen governance, risk management and resilience across the organisation.

You will develop, review and implement policies, perform risk assessments, maintain risk registers and deliver governance reports to senior management. The role requires strong stakeholder engagement with executives and risk committees, and a solid background in ISO 27001, NIST CSF and related standards.

Qualifikationen

• Minimum 6 years of experience in Cyber Security GRC, information security risk or related field.
• Strong experience with ISO 27001, NIST, and NIST CSF or NIST 800 series.
• Proven ability to develop and document security policies, standards and procedures.
• Experience preparing risk and governance reports and engaging executives.

Aufgaben

• Develop, review and enhance cyber security policies, standards and procedures.
• Conduct cyber security risk assessments and maintain risk registers.
• Assess security controls, identify gaps and recommend improvements.
• Develop and support implementation of governance and resilience frameworks.
• Ensure alignment with ISO 27001, NIST and CSF.
• Prepare risk reports and governance updates for senior management.
• Engage with executives, risk committees and audit committees on risks and compliance.
• Coordinate cyber security incident governance and reporting.
• Support regulatory oversight, security assurance and audits.
• Contribute to continuous improvement of governance and risk processes.

Kenntnisse

GRC

Risk assessment

Policy development

Stakeholder management

Regulatory reporting

ISO 27001

NIST CSF

NIST 800 series

Security governance

Incident governance

Tools

N/A

Jobbeschreibung

We are looking for an experienced Cyber Security GRC Specialist to join a newly established team focused on strengthening cyber security governance, risk management and resilience.

Key Responsibilities

• Develop, review and enhance cyber security policies, standards and procedures.
• Conduct cyber security risk assessments and maintain risk registers.
• Assess security controls, identify gaps and recommend improvements.
• Develop and support the implementation of cyber security governance and resilience frameworks.
• Ensure alignment with recognised frameworks and standards such as ISO 27001, NIST and NIST Cybersecurity Framework.
• Prepare risk reports, governance updates and compliance documentation for senior management.
• Engage with senior stakeholders, directors, risk committees and audit committees on cyber security risks and compliance matters.
• Support regulatory oversight, security assurance and audit activities.
• Coordinate cyber security incident management from a governance, risk and reporting perspective.
• Contribute to the continuous improvement of cyber security governance and risk management processes.
• Minimum 6 years of experience in Cyber Security Governance, Risk and Compliance (GRC), Information Security Risk or a related discipline.
• Strong experience with at least one recognized security framework:
• ISO 27001
• NIST
• NIST Cybersecurity Framework (CSF)
• NIST 800 Series
• Practical experience conducting cyber security risk assessments.
• Experience maintaining risk registers and performing security control assessments.
• Strong background in developing and documenting security policies, standards and procedures.
• Experience preparing risk reports and governance reports.
• Proven stakeholder management experience, including engagement with executives, directors, risk committees, audit committees or regulatory stakeholders.
• Excellent written and verbal communication skills.

Desirable Certifications

• CISSP
• CISM
• CISA
• CRISC

Candidates should have a strong governance and risk background rather than primarily hands-on security operations experience.