Governance Risk & Compliance Lead

DB Recruitment; Cavan; Hybrid; EUR 110,000 - 150,000; Full time

Job summary

DB Recruitment seeks a Governance Risk and Compliance Lead to establish and oversee the organisation’s governance framework, enterprise risk management programme, and regulatory compliance strategy with a focus on information security, cyber resilience, data protection and AI governance.

You will lead the design and implementation of an ISO/IEC 27001-aligned ISMS, develop controls for ISO, NIST and SOC 2, and advise executives on cyber risk posture.

Qualifications

• 8+ years of experience in GRC, information security or cyber risk.
• Strong knowledge of ISO 27001, NIST CSF, SOC 2 and GDPR.
• Experience in AI governance or technology risk frameworks.
• Track record leading audits, risk assessments and regulatory engagement.

Responsibilities

• Lead design, implementation and continuous improvement of the ISMS aligned to ISO/IEC 27001.
• Develop and maintain policies and controls aligned to ISO, NIST, SOC 2 and regulations.
• Advise senior leadership on cyber risk posture and regulatory obligations.
• Ensure governance supports secure digital transformation and cloud adoption.
• Identify and manage strategic, operational, cyber, AI and compliance risks.
• Maintain risk register and report risk exposure to executives.
• Conduct security risk assessments, threat modelling and BIA.
• Develop and implement AI governance and model risk management frameworks.
• Conduct AI risk assessments (bias, transparency, privacy, adversarial threats).
• Oversee third-party AI risk due diligence and monitoring.

Skills

GRC Leadership

Information Security

Cyber Risk

ISO 27001

NIST CSF

SOC 2

GDPR

AI governance

Regulatory compliance

Executive reporting

Job description

We are seeking a Governance Risk and Compliance lead (GRC) Lead for a top multinational offering hybrid remote work and a strong package.

You will be responsible for establishing and overseeing the organisation’s governance framework, enterprise risk management programme and regulatory compliance strategy, with a strong focus on information security, cyber resilience, data protection and AI governance.

Responsibilities

• Lead the design, implementation and continuous improvement of the ISO/IEC 27001-aligned ISMS.
• Develop and maintain policies and controls aligned to ISO, NIST, SOC 2 and applicable regulations.
• Advise senior leadership on cyber risk posture and regulatory obligations.
• Ensure governance supports secure digital transformation and cloud adoption.
• Identify and manage strategic, operational, cyber, AI and compliance risks.
• Maintain the risk register and report risk exposure to executive leadership.
• Conduct security risk assessments, threat modelling and business impact assessments.
• Develop and implement AI governance and model risk management frameworks.
• Conduct AI risk assessments (bias, transparency, privacy, adversarial threats).
• Oversee third-party AI risk due diligence and ongoing monitoring.

Compliance, Audit & Assurance

• Ensure compliance with GDPR and applicable regulatory requirements.
• Lead audits, certification programmes and regulatory engagements.
• Oversee remediation of audit findings and control deficiencies.
• Design, implement and test security controls aligned to ISO Annex A and NIST CSF.
• Monitor control effectiveness, vulnerability oversight and risk metrics.
• Drive continuous improvement to enhance cyber resilience.

Experience

• 8+ years’ experience in GRC, Information Security or Cyber Risk roles.
• Proven ISO 27000 implementation experience.
• Strong knowledge of ISO 27001, NIST CSF, SOC 2 and GDPR.
• Experience in AI governance or technology risk frameworks.
• Previous experience working within a technical IT and Security Infrastructure role.
• Track record leading audits, risk assessments and regulatory engagement.
• Strong analytical and executive reporting skills.

For more info you can contact [e-mail]