GRC Lead

WeDo; Cavan; Hybrid; EUR 81,000 - 99,000; Full time

Job summary

WeDo is partnering with a large international organisation in County Cavan, Ireland to recruit a GRC Lead. The role is hybrid and permanent, with a salary of up to €90,000.

You will join the Group Cyber Security function, owning governance, risk and compliance and driving ISO 27001-aligned governance across multiple business units.

The position combines strategy with hands-on delivery, shaping policy, controls and risk management in collaboration with senior cyber leadership.

Qualifications

• Strong practical ISO 27001 experience.
• Experience implementing ISO 27001 or working within a mature ISO environment.
• Strong GRC, information security and cyber risk knowledge.
• Ability to turn policies and frameworks into practical delivery.
• Good technical understanding of security and infrastructure.
• Experience with risk assessments, audits and assurance.
• Strong stakeholder management skills.

Responsibilities

• Own and develop the Group GRC framework.
• Drive the organisation’s ISO 27001-aligned approach.
• Develop and implement security policies and controls.
• Manage cyber, enterprise and compliance risk.
• Support business continuity and business impact assessments.
• Oversee third‑party security assessments.
• Support AI governance and risk assessments.
• Work alongside Internal Audit and support audit readiness.
• Partner with technical and divisional teams to implement controls effectively.

Skills

ISO 27001 experience

GRC knowledge

Cyber risk knowledge

Policy to delivery

Security infrastructure understanding

Risk assessments & audits

Stakeholder management

Job description

GRC Lead- International Company- Hybrid County Cavan- Permanent- Upto €90,000

WeDo Tech are supporting a large international organisation looking for a GRC Lead to take ownership of governance, risk and compliance within its Group Cyber Security function.

As part of the Cyber Security team, you’ll turn security strategy into practical delivery across multiple business units, with a key focus on strengthening the organisation’s ISO 27001-aligned governance framework.

This is a hands‑on GRC role where you’ll influence policy and strategy while ensuring controls can work effectively in practice. You’ll have genuine ownership of GRC within a large international environment, working directly with senior cyber leadership and helping shape the organisation’s future approach to ISO 27001.

It’s an opportunity to combine strategy with hands‑on delivery and have a visible impact across multiple business units.

Responsibilities

• Own and develop the Group GRC framework.
• Drive the organisation’s ISO 27001-aligned approach.
• Develop and implement security policies and controls.
• Manage cyber, enterprise and compliance risk.
• Support business continuity and business impact assessments.
• Oversee third‑party security assessments.
• Support AI governance and risk assessments.
• Work alongside Internal Audit and support audit readiness.
• Partner with technical and divisional teams to implement controls effectively.

Required Skills

• Strong practical ISO 27001 experience.
• Experience implementing ISO 27001 or working within a mature ISO environment.
• Strong GRC, information security and cyber risk knowledge.
• Ability to turn policies and frameworks into practical delivery.
• Good technical understanding of security and infrastructure.
• Experience with risk assessments, audits and assurance.
• Strong stakeholder management skills.

Exposure to AI governance and certifications such as CISSP, CISM, CRISC, CISA or ISO 27001 Lead Implementer/Auditor would be beneficial.