GRC Analyst ( Onsite)

Oliver James Group; Dublin; On-site; EUR 70,000 - 110,000; Full time

Job summary

Oliver James Group in Dublin, Ireland seeks an experienced Senior IT Governance, Risk & Compliance Analyst to support the development and oversight of IT governance, risk and compliance across a regulated organisation.

You will work with IT, Risk, Legal and Compliance teams to identify risks, coordinate audits and ensure remediation of control gaps and vulnerabilities, while maintaining awareness of evolving frameworks.

Qualifications

• Experience with IT risk, governance, security and compliance frameworks.
• Experience supporting audits, regulatory reviews and compliance programmes.
• Understanding of infrastructure, cloud, vulnerability and access controls.
• Degree or equivalent; professional qualifications such as CISA, CISM, CRISC, CISSP or ISO 27001 advantageous.

Responsibilities

• Support IT and cyber compliance across frameworks (e.g., ISO 27001, NIST CSF, SOX).
• Identify, assess and monitor IT, cyber, security and operational risks.
• Maintain and develop cyber risk registers, tracking risks and remediation.
• Support audits and regulatory reviews, including evidence gathering.
• Monitor risks and consolidate issues; coordinate remediation.
• Support third-party security assurance and due diligence.
• Prepare risk and remediation reporting for senior management.

Skills

IT risk management

Governance & compliance

Audit coordination

Regulatory awareness

Risk assessment

Stakeholder collaboration

Education

Bachelor's degree or equivalent

Job description

The Opportunity

We are seeking an experienced Senior IT Governance, Risk & Compliance Analyst to support the ongoing development and oversight of IT governance, risk and compliance across a regulated organisation. This is a broad role offering the opportunity to work closely with IT, Risk, Legal, Compliance and wider business stakeholders. You will play an important role in identifying and managing technology and risks, supporting regulatory compliance, coordinating audit activity and ensuring effective remediation of control gaps and vulnerabilities.

Key Responsibilities

• Support IT and cyber compliance across frameworks including DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials.
• Identify, assess and monitor IT, cyber, security and operational risks.
• Maintain and develop the cyber risk register, tracking risks, issues and remediation activity.
• Support internal, external, regulatory and third-party audits, including evidence gathering and remediation tracking.
• Monitor emerging technology, cyber and operational resilience risks and consolidate issues where appropriate.
• Support third-party and supplier security assurance, including due diligence and remediation tracking.
• Coordinate user access and privileged access reviews, supporting the transition towards automated access certification.
• Perform first-line compliance monitoring and control testing against information security policies and standards.
• Contribute to the development and maintenance of IT risk, cyber security and compliance policies, standards and procedures.
• Prepare risk, control and remediation reporting for senior management and governance forums.
• Support the development and monitoring of relevant IT risk and compliance KPIs.
• Assist with breach notification, escalation and regulatory reporting activities where required.
• Support the delivery of cyber risk, governance and compliance awareness and training.

You will bring:

• Strong knowledge of IT risk, governance, security and compliance frameworks.
• Experience supporting audits, regulatory reviews and compliance programmes.
• Good understanding of infrastructure, applications, networking, cloud, vulnerability management, incident management and access controls.
• Experience with SOX / IT General Controls (ITGCs) would be advantageous.
• Experience within financial services, insurance or another regulated sector would be beneficial.
• Strong analytical and problem-solving skills, with the ability to identify control gaps and drive remediation.
• Excellent communication skills and the ability to explain technical and risk-related matters to non-technical stakeholders.
• A relevant degree or equivalent professional experience.
• Professional qualifications such as CISA, CISM, CRISC, CISSP or ISO 27001 would be advantageous.