GRC Lead

Reperio Human Capital; Dublin; On-site; EUR 90,000 - 125,000; Full time

Job summary

Reperio Human Capital Ltd is seeking an experienced GRC leader to design and roll out a comprehensive GRC framework, driving risk reporting to senior leadership and owning the technology risk register. You will strengthen cyber resilience, improve IAM/IGA controls, and oversee supplier security assurance across the organisation.

With 5+ years in GRC or IT risk, you will guide remediation efforts, manage certification/audit activities, and influence senior stakeholders while developing the GRC

Qualifications

• 5+ years in GRC, IT or cyber risk, internal audit or enterprise risk.
• Hands-on experience with ISO, ISO 31000 and NIST CSF. Exposure to UK cyber certification schemes is useful.
• A track record of building or maturing a GRC function.
• Working knowledge of IAM/IGA, PAM and cloud security governance (Azure, AWS or GCP).
• Confidence advising and influencing senior stakeholders.
• CISA, CRISC, CISSP or an ISO 27001 Lead Implementer/Auditor certification is a plus

Responsibilities

• Design and roll out an enterprise GRC framework, including policies, standards and risk reporting for senior leadership.
• Own the technology risk register and lead remediation of priority risks.
• Strengthen business continuity and cyber resilience, including recovery objectives, testing and documentation.
• Improve identity and access governance, including user lifecycle controls and privileged access oversight.
• Run supplier and third-party security assurance.
• Lead information security certification and audit activity, and keep track of regulatory change.
• Develop the GRC capability and team over time.

Skills

GRC experience

IT risk management

Cyber risk

Internal audit

Stakeholder management

Education

CISA

CRISC

CISSP

ISO 27001 Lead Implementer/Auditor

Tools

Azure

AWS

GCP

IAM/IGA tools

PAM tools

Job description

• Design and roll out an enterprise GRC framework, including policies, standards and risk reporting for senior leadership.
• Own the technology risk register and lead remediation of priority risks.
• Strengthen business continuity and cyber resilience, including recovery objectives, testing and documentation.
• Improve identity and access governance, including user lifecycle controls and privileged access oversight.
• Run supplier and third-party security assurance.
• Lead information security certification and audit activity, and keep track of regulatory change.
• Develop the GRC capability and team over time.

What you'll bring

• 5+ years in GRC, IT or cyber risk, internal audit or enterprise risk.
• Hands‑on experience with ISO , ISO 31000 and NIST CSF. Exposure to UK cyber certification schemes is useful.
• A track record of building or maturing a GRC function.
• Working knowledge of IAM/IGA, PAM and cloud security governance (Azure, AWS or GCP).
• Confidence advising and influencing senior stakeholders.
• CISA, CRISC, CISSP or an ISO 27001 Lead Implementer/Auditor certification is a plus