GRC Lead: Strategic Risk & Compliance

Glen Dimplex Europe Holdings Ltd; Cloghran; On-site; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Generous annual leave

Private Health Insurance

Pension and Death in Service

Employee Assistance Programme

Permanent Health Insurance

Life Assurance

Family Leave

Job summary

Glen Dimplex Europe Holdings Ltd seeks an enterprise GRC Lead to establish, implement and mature a company-wide governance, risk and compliance program. You will drive policies, frameworks and hands-on controls for disaster recovery, identity governance, supplier risk and regulatory obligations.

The role requires strategic thinking and hands-on execution to reduce IT risk while collaborating with CIO, HR, IT and business leaders. A strong background in ISO27001, GDPR and NIST CSF is essential.

Qualifications

• Bachelor’s degree in business IT, Risk Management, Cybersecurity or related field.
• 6–15 years GRC, cybersecurity risk management, internal audit, or enterprise risk experience.
• Strong knowledge of NIST CSF, ISO27001/2, SOC frameworks, GDPR and global privacy regulations.
• Ability to translate complex risks into business-language recommendations.

Responsibilities

• Develop and maintain governance frameworks, policies, and standards aligned with organisational strategy.
• Lead risk identification, assessment, and monitoring of IT risks across the enterprise.
• Partner with HR, IT and business leaders to promote a risk-aware culture.
• Oversee compliance programs including ISO27001, Cyber Essentials+, and related standards.
• Drive third-party cyber risk assessments and supplier due diligence processes.
• Lead incident governance and report KRIs to leadership and boards.

Skills

GRC

Cyber risk management

Policy writing

Audits

Regulatory knowledge

Identity governance

DR/BCP

Vendor risk

Stakeholder mgmt

Cloud security

Education

Bachelor’s degree in business IT, Risk Management, Cybersecurity or related field

Job description

Glen Dimplex Europe Holdings Ltd seeks an enterprise GRC Lead to establish, implement and mature a company-wide governance, risk and compliance program. You will drive policies, frameworks and hands-on controls for disaster recovery, identity governance, supplier risk and regulatory obligations.

The role requires strategic thinking and hands-on execution to reduce IT risk while collaborating with CIO, HR, IT and business leaders. A strong background in ISO27001, GDPR and NIST CSF is essential.