GRC Lead

WeDo; Cavan; Hybrid; EUR 81,000 - 99,000; Full time

Job summary

WeDo is seeking a GRC Lead in County Cavan, Ireland, to own governance, risk and compliance within its Group Cyber Security function. This hybrid role focuses on delivering a robust ISO 27001-aligned governance framework across multiple business units.

The role combines strategy with hands-on delivery to influence policy, implement controls and shape the organisation's future approach to security governance and AI risk management.

Qualifications

• Strong practical ISO 27001 experience.
• Solid GRC and information security knowledge.
• Experience turning policies into practical delivery.
• Experience with risk assessments, audits and assurance.

Responsibilities

• Own and develop the Group GRC framework.
• Drive ISO 27001-aligned approach across the organisation.
• Develop and implement security policies and controls.
• Manage cyber, enterprise and compliance risk.
• Support business continuity and impact assessments.
• Oversee third‑party security assessments.
• Support AI governance and risk assessments.
• Work with Internal Audit to support audit readiness.

Skills

ISO 27001 experience

GRC

Information security

Risk assessments

Policy delivery

Audit readiness

AI governance

Third-party assessments

Job description

GRC Lead- International Company- Hybrid County Cavan- Permanent- Upto €90,000

WeDo Tech are supporting a large international organisation looking for a GRC Lead to take ownership of governance, risk and compliance within its Group Cyber Security function.

As part of the Cyber Security team, you’ll turn security strategy into practical delivery across multiple business units, with a key focus on strengthening the organisation’s ISO 27001-aligned governance framework.

This is a hands-on GRC role where you’ll influence policy and strategy while ensuring controls can work effectively in practice. You’ll have genuine ownership of GRC within a large international environment, working directly with senior cyber leadership and helping shape the organisation’s future approach to ISO 27001.

It’s an opportunity to combine strategy with hands-on delivery and have a visible impact across multiple business units.

Responsibilities

• Own and develop the Group GRC framework.
• Drive the organisation’s ISO 27001-aligned approach.
• Develop and implement security policies and controls.
• Manage cyber, enterprise and compliance risk.
• Support business continuity and business impact assessments.
• Oversee third‑party security assessments.
• Support AI governance and risk assessments.
• Work alongside Internal Audit and support audit readiness.
• Partner with technical and divisional teams to implement controls effectively.

Required Skills

• Strong practical ISO 27001 experience.
• Experience implementing ISO 27001 or working within a mature ISO environment.
• Strong GRC, information security and cyber risk knowledge.
• Ability to turn policies and frameworks into practical delivery.
• Good technical understanding of security and infrastructure.
• Experience with risk assessments, audits and assurance.

Exposure to AI governance and certifications such as CISSP, CISM, CRISC, CISA or ISO 27001 Lead Implementer/Auditor would be beneficial.