GRC Manager – IT Planning & Risk Leadership

SuMi TRUST Global Asset Services; Dublin; On-site; EUR 90,000 - 120,000; Full time

Job summary

SMT Fund Services (Ireland) Limited, a member of SuMi TRUST Global Asset Services, is seeking a GRC Manager in IT Planning in Dublin. You will lead regulatory compliance, risk management, and IT governance to strengthen controls across the IT division.

The role requires hands-on experience with GDPR, NIST CSF, ISO 27001, and strong communication with senior management. AVP grade, reporting to the IT Planning Manager.

Qualifications

• Proven experience as a GRC practitioner or in a related function.
• Hands-on experience with regulatory and compliance frameworks (e.g., GDPR, NIST Cybersecurity Framework, ISO 27001), including audit coordination and response to audit findings.
• Solid understanding of cybersecurity controls and principles.
• Effective project and change management skills to drive GRC initiatives.
• Demonstrated ability to communicate clearly and effectively across all levels, including senior management.

Responsibilities

• Lead regulatory compliance and audit readiness efforts, including the development and maintenance of frameworks and tracking tools, while coordinating timely audit and assessment activities with internal and external stakeholders.
• Oversee IT risk management activities, including maintenance of the IT Risk Register, system vulnerability assessments, patch management compliance, and coordination with Information Security to manage residual risks.
• Manage governance documentation and application inventory, ensuring timely review, updates, distribution, and compliance of policies, procedures, and IT asset records (including CMDB and RACI matrices).
• Drive access governance and GRC awareness, leading both manual and automated initiatives for least privilege access models and role-based access control across IT and business units.
• Govern third-party vendor relationships, ensuring proactive risk management, due diligence, and regulatory compliance with exit strategies and risk assessments.
• Establish and monitor KPIs and KRIs for IT GRC processes, and leverage insights for continuous improvement in governance, risk, and compliance domains.
• Support staffing activities including recruitment, development, and retention of IT staff in line with corporate objectives.
• Other duties as assigned.

Skills

GRC practitioner

Analytical skills

Regulatory frameworks

Cybersecurity controls

Communication

Project/change management

Education

CISA, CISM, CRISC or CGEIT or equivalent GRC qualification

Job description

SMT Fund Services (Ireland) Limited, a member of SuMi TRUST Global Asset Services, is seeking a GRC Manager in IT Planning in Dublin. You will lead regulatory compliance, risk management, and IT governance to strengthen controls across the IT division.

The role requires hands-on experience with GDPR, NIST CSF, ISO 27001, and strong communication with senior management. AVP grade, reporting to the IT Planning Manager.