GRC & Cyber Risk Lead: ISO 27001, AI Governance | Hybrid

DB Recruitment; Cavan; Hybrid; EUR 90.000 - 140.000; Vollzeit

Zusammenfassung

DB Recruitment is seeking a Governance Risk and Compliance lead (GRC Lead) for a multinational with hybrid remote work and a strong package. You will establish and oversee the organisation’s governance framework, enterprise risk management programme and regulatory compliance strategy, focusing on information security, cyber resilience, data protection and AI governance.

Your role includes leading ISMS design, policy development, risk assessments and regulatory engagements, while guiding senior

Qualifikationen

• 8+ years in GRC, Information Security or cyber risk roles.
• ISO 27001 implementation and ISMS experience.
• Strong knowledge of ISO 27001, NIST CSF, SOC 2 and GDPR.
• Experience in AI governance or technology risk frameworks.
• Track record leading audits, risk assessments and regulatory engagement.
• Certifications such as CISSP, CISM, CRISC, CISA desirable.

Aufgaben

• Lead design, implementation and improvement of the ISMS aligned to ISO/IEC 27001.
• Develop policies and controls aligned to ISO, NIST, SOC 2 and regulations.
• Advise senior leadership on cyber risk posture and regulatory obligations.
• Ensure governance supports secure digital transformation and cloud adoption.
• Maintain enterprise-wide risk management framework and risk register.
• Identify and manage strategic, operational, cyber, AI and compliance risks.
• Conduct security risk assessments, threat modelling and BIA.
• Develop AI governance and model risk management frameworks.
• Oversee third-party AI risk due diligence and monitoring.
• Ensure GDPR compliance; lead audits and remediation of findings.
• Design and test security controls aligned to ISO Annex A and NIST CSF.
• Monitor control effectiveness and risk metrics; drive continuous improvement.

Kenntnisse

GRC

InfoSec

Cyber Risk

ISO 27001

NIST CSF

SOC 2

GDPR

AI Governance

Audits

Executive Reporting

Jobbeschreibung

DB Recruitment is seeking a Governance Risk and Compliance lead (GRC Lead) for a multinational with hybrid remote work and a strong package. You will establish and oversee the organisation’s governance framework, enterprise risk management programme and regulatory compliance strategy, focusing on information security, cyber resilience, data protection and AI governance.

Your role includes leading ISMS design, policy development, risk assessments and regulatory engagements, while guiding senior