GRC Analyst: Governance, Risk & Compliance

Kirby Group Engineering; Ireland; On-site; EUR 70,000 - 90,000; Full time

Job summary

Kirby Group Engineering is seeking a GRC Analyst to establish and evolve a structured Governance, Risk and Compliance capability across the business. You will ensure data governance, risk and compliance are centrally managed, visible, and applied consistently with audit-ready evidence.

You will own the central risk register, coordinate audits, and drive improvement through ISO 27001, GDPR, EU AI Act, and data protection controls while partnering with IT, security, legal and operations.

Qualifications

• Experience in Governance, Risk, and Compliance (GRC) or a related control/governance role.
• Strong understanding of ISO 27001, risk management methodologies, and compliance/assurance processes.
• Experience maintaining risk registers, audit evidence, action trackers, and compliance records.
• Ability to interpret frameworks and translate them into practical business and IT controls.
• Strong documentation, organisation, and stakeholder coordination skills.

Responsibilities

• Maintain governance, risk, and compliance framework and mappings.
• Own central risk register and track risk treatment, ownership, and closure.
• Coordinate internal and external audits, evidence gathering, stakeholders, and corrective actions.
• Maintain control libraries and assurance reporting for leadership and audit purposes.
• Oversee data governance, retention, and protection controls with evidence.
• Drive continuous improvement of control maturity and evidence quality.

Skills

GRC experience

ISO 27001 knowledge

Risk management

Compliance

Audit readiness

Documentation

Stakeholder coordination

Tools

MS Purview

GRC tooling

Job description

Kirby Group Engineering is seeking a GRC Analyst to establish and evolve a structured Governance, Risk and Compliance capability across the business. You will ensure data governance, risk and compliance are centrally managed, visible, and applied consistently with audit-ready evidence.

You will own the central risk register, coordinate audits, and drive improvement through ISO 27001, GDPR, EU AI Act, and data protection controls while partnering with IT, security, legal and operations.