GRC Lead

Realtime Recruitment; Dublin; On-site; EUR 90,000 - 130,000; Full time

Job summary

Realtime Recruitment Limited is seeking a GRC Lead to establish and mature an enterprise-wide Governance, Risk & Compliance program, focusing on reducing technology and cybersecurity risk and ensuring ISO 27001 and Cyber Essentials+ compliance.

The role requires extensive experience in GRC, risk management, and regulatory controls, with the ability to advise senior leadership and drive formal governance structures across cloud platforms like Azure, AWS, and GCP.

Qualifications

• 6+ years’ experience in GRC, IT Risk, Cybersecurity Risk, Internal Audit or Enterprise Risk.
• Strong knowledge of risk frameworks, security controls and regulatory compliance.
• Experience developing governance frameworks, policies and risk reporting.

Responsibilities

• Disaster Recovery & Cyber Resilience.
• Background in building or maturing an enterprise GRC function.
• Identity Governance & Access Controls.
• Third-Party Cyber Risk & Supplier Assurance.
• Knowledge of IAM/IGA, PAM and cloud security governance across Azure, AWS or GCP.

Skills

GRC

IT Risk

Cybersecurity Risk

Internal Audit

Enterprise Risk

Tools

Azure

AWS

GCP

IAM/IGA

PAM

Job description

The GRC Lead will be responsible for establishing, implementing and continuously maturing an enterprise-wide Governance, Risk & Compliance (GRC) programme. The role will focus on managing and reducing high-priority technology and cybersecurity risks, including Disaster Recovery readiness, Identity Governance, Third-Party Cyber Risk and regulatory compliance requirements such as ISO 27001 and Cyber Essentials+.

What we’re looking for:

• 6+ years’ experience in GRC, IT Risk, Cybersecurity Risk, Internal Audit or Enterprise Risk
• Strong knowledge of risk frameworks, security controls and regulatory compliance
• Experience developing governance frameworks, policies and risk reporting
• Excellent stakeholder management skills, with the ability to advise senior leadership

CISA, CRISC, CISSP or ISO 27001 certifications would be a plus.

Key areas of responsibility:

• Disaster Recovery & Cyber Resilience
• Background in building or maturing an enterprise GRC function.
• Identity Governance & Access Controls
• Third-Party Cyber Risk & Supplier Assurance
• Knowledge of IAM/IGA, PAM and cloud security governance across Azure, AWS or GCP