GRC Lead - ISO 27001, AI Governance & Cyber Risk

DB Recruitment; Cavan; Hybrid; EUR 110,000 - 150,000; Full time

Job summary

DB Recruitment seeks a Governance Risk and Compliance Lead to establish and oversee the organisation’s governance framework, enterprise risk management programme, and regulatory compliance strategy with a focus on information security, cyber resilience, data protection and AI governance.

You will lead the design and implementation of an ISO/IEC 27001-aligned ISMS, develop controls for ISO, NIST and SOC 2, and advise executives on cyber risk posture.

Qualifications

• 8+ years of experience in GRC, information security or cyber risk.
• Strong knowledge of ISO 27001, NIST CSF, SOC 2 and GDPR.
• Experience in AI governance or technology risk frameworks.
• Track record leading audits, risk assessments and regulatory engagement.

Responsibilities

• Lead design, implementation and continuous improvement of the ISMS aligned to ISO/IEC 27001.
• Develop and maintain policies and controls aligned to ISO, NIST, SOC 2 and regulations.
• Advise senior leadership on cyber risk posture and regulatory obligations.
• Ensure governance supports secure digital transformation and cloud adoption.
• Identify and manage strategic, operational, cyber, AI and compliance risks.
• Maintain risk register and report risk exposure to executives.
• Conduct security risk assessments, threat modelling and BIA.
• Develop and implement AI governance and model risk management frameworks.
• Conduct AI risk assessments (bias, transparency, privacy, adversarial threats).
• Oversee third-party AI risk due diligence and monitoring.

Skills

GRC Leadership

Information Security

Cyber Risk

ISO 27001

NIST CSF

SOC 2

GDPR

AI governance

Regulatory compliance

Executive reporting

Job description

DB Recruitment seeks a Governance Risk and Compliance Lead to establish and oversee the organisation’s governance framework, enterprise risk management programme, and regulatory compliance strategy with a focus on information security, cyber resilience, data protection and AI governance.

You will lead the design and implementation of an ISO/IEC 27001-aligned ISMS, develop controls for ISO, NIST and SOC 2, and advise executives on cyber risk posture.