Cybersecurity GRC & Regulatory Compliance Specialist

SMBC; Tralee; Hybrid; EUR 85,000 - 110,000; Full time

Job summary

SMBC Group is seeking an experienced Information Security GRC Specialist to join the Cybersecurity Governance, Risk and Compliance team in Ireland. The role centers on regulatory responses, attestations, and strengthening readiness for cybersecurity compliance.

A hybrid working pattern is expected with proximity to Tralee office. The role requires 5+ years in cybersecurity risk or regulatory response, a related degree, and familiarity with frameworks like NIST CSF and ISO/IEC 27001.

Qualifications

• Bachelor’s degree in Information Technology, Information Security, Cybersecurity, Risk Management or equivalent.
• Five or more years’ experience in cybersecurity risk, regulatory response, technology risk, audit, assurance or consulting.
• Experience supporting regulatory examinations, information requests or regulatory attestations in financial services or similarly regulated environment.
• Strong understanding of cybersecurity controls, technology risk and regulatory expectations.
• Knowledge of NYSDFS Cybersecurity Regulation, NIST CSF, ISO/IEC 27001/27002.

Responsibilities

• Manage cybersecurity regulatory enquiries, examinations, information requests and follow-up questions from receipt through final submission.
• Coordinate input from Cybersecurity SMEs, Control Owners and Evidence Providers.
• Review draft responses to identify gaps, inconsistencies and required clarifications.
• Support regulatory attestations by coordinating evidence underpinning management representations.
• Maintain visibility of response status, deadlines, dependencies and escalation needs.

Skills

Cybersecurity risk

Regulatory response

Audit/assurance

Regulatory examinations

Stakeholder management

Education

Bachelor's degree in IT or related field

Equivalent professional experience

Tools

NIST CSF

ISO27001/27002

Regulatory frameworks

Job description

SMBC Group is seeking an experienced Information Security GRC Specialist to join the Cybersecurity Governance, Risk and Compliance team in Ireland. The role centers on regulatory responses, attestations, and strengthening readiness for cybersecurity compliance.

A hybrid working pattern is expected with proximity to Tralee office. The role requires 5+ years in cybersecurity risk or regulatory response, a related degree, and familiarity with frameworks like NIST CSF and ISO/IEC 27001.