GRC Analyst: Governance, Risk & Data Security

Kirby Group Engineering; Dublin; On-site; EUR 70,000 - 100,000; Full time

Job summary

Kirby Group Engineering is seeking a GRC Analyst to establish and continuously improve governance, risk, and compliance across the business. You will own data governance, policy management, and control frameworks aligned with ISO 27001, GDPR, and EU AI Act, while supporting audit activities and leadership reporting.

The role requires collaboration with IT, Legal, and operations to embed compliance into day-to-day activities and manage risk across enterprise, projects, and technology domains.

Qualifications

• Experience in Governance, Risk, and Compliance (GRC) or related role.
• Strong understanding of ISO 27001, risk management methodologies, compliance processes.
• Ability to interpret frameworks into practical controls and governance.

Responsibilities

• Establish, operate and improve a structured GRC capability across the business.
• Maintain and improve information security, governance, and compliance framework.
• Coordinate internal and external audits, evidence gathering and remediation.
• Manage data governance, retention and protection controls with audit visibility.
• Monitor incidents, issues, and corrective actions to drive improvements.
• Produce dashboards and management information for leadership and audits.

Skills

GRC governance

Information security

Risk management

Compliance & assurance

Control frameworks & audit readiness

Documentation & organisation

Cross-functional collaboration

Tools

MS Purview

Job description

Kirby Group Engineering is seeking a GRC Analyst to establish and continuously improve governance, risk, and compliance across the business. You will own data governance, policy management, and control frameworks aligned with ISO 27001, GDPR, and EU AI Act, while supporting audit activities and leadership reporting.

The role requires collaboration with IT, Legal, and operations to embed compliance into day-to-day activities and manage risk across enterprise, projects, and technology domains.