IT GRC Lead

Realtime Recruitment; Dublin; On-site; EUR 90,000 - 130,000; Full time

Job summary

Realtime Recruitment is seeking a GRC Lead to establish, implement and mature an enterprise-wide Governance, Risk & Compliance programme. The role will focus on managing and reducing high-priority technology and cybersecurity risks, including Disaster Recovery readiness, Identity Governance, and third-party cyber risk.

You will drive regulatory compliance such as ISO 27001 and Cyber Essentials+, translate technical risk into business recommendations and advise CIO/Executive stakeholders to

Qualifications

• 6+ years’ experience across GRC, IT Risk, Cybersecurity Risk, Internal Audit or Enterprise Risk Management.
• Strong knowledge of GRC frameworks, enterprise risk management, ISO 27001/27002 or NIST CSF.
• Ability to develop and maintain governance frameworks, policies, standards and processes.
• Strong IT and cybersecurity risk assessment, including risk registers, treatment and monitoring.
• Deep understanding of Disaster Recovery, RPO/RTO, testing and assurance.
• Knowledge of Identity Governance, Joiner/Mover/Leaver controls and access risk.
• Understanding of Third-Party Cyber Risk, supplier due diligence and contract security risks.
• Experience managing ISO 27001, Cyber Essentials+ and regulatory compliance, including audit prep.
• Ability to translate technical risks into business recommendations for CIO/Executive stakeholders.

Skills

GRC

IT Risk

Cybersecurity Risk

Internal Audit

Enterprise Risk Management

GRC frameworks

ISO 27001/27002

NIST CSF

Risk assessment

Stakeholder management

Job description

The GRC Lead will be responsible for establishing, implementing and continuously maturing an enterprise-wide Governance, Risk & Compliance (GRC) programme. The role will focus on managing and reducing high-priority technology and cybersecurity risks, including Disaster Recovery readiness, Identity Governance, Third-Party Cyber Risk and regulatory compliance requirements such as ISO 27001 and Cyber Essentials+

Must-Have Skills

• 6+ years’ experience across GRC, IT Risk, Cybersecurity Risk, Internal Audit or Enterprise Risk Management.
• Strong knowledge of GRC frameworks, enterprise risk management, ISO 27001/27002 or NIST CSF.
• Proven ability to develop and maintain governance frameworks, policies, standards and processes aligned to business, regulatory and contractual requirements.
• Strong capability in IT and cybersecurity risk assessment, including risk registers, risk treatment, remediation and ongoing monitoring.
• Strong understanding of Disaster Recovery and resilience, including RPO/RTO, testing, documentation and assurance.
• Knowledge of Identity Governance, Joiner/Mover/Leaver controls and credentials/access risk.
• Strong understanding of Third-Party Cyber Risk, supplier due diligence and contract-related security risks.
• Experience managing ISO 27001, Cyber Essentials+ and regulatory compliance, including audit preparation and evidence management.
• Strong understanding of IT infrastructure, cloud, ERP, identity platforms and security controls, with the ability to translate technical risks into business recommendations.
• Excellent stakeholder management, communication and influencing skills, with the ability to advise CIO/Executive stakeholders and drive remediation across IT and business teams.

Nice-to-Have Skills

• CISA, CRISC, CISSP or ISO 27001 Lead Implementer/Lead Auditor certification.
• Knowledge of ISO 31000, SOC frameworks and global privacy regulations.
• Background in building or maturing an enterprise GRC function.
• Previous responsibility for leading or mentoring GRC professionals.
• Experience producing KRIs, risk dashboards and executive/Board-level reporting.
• Knowledge of IAM/IGA, PAM and cloud security governance across Azure, AWS or GCP.
• Experience with ERP security, security control testing, cyber resilience and incident response governance.
• Background within a regulated, multinational or complex enterprise environment.
• Ability to develop and deliver GRC awareness, compliance training, policies, standards and internal guidance.
• Commitment to ongoing CPD, including GRC forums, industry events, regulatory updates, vendor training and capability planning.

Must hold Stamp 4, EU or Irish passport - this is fully onsite North Dublin