IT Risk & Compliance Manager

Fruition Group Ireland; Dublin; On-site; EUR 129,000 - 203,000; Full time

Job summary

Fruition Group Ireland seeks a senior IT Risk & Compliance leader to own the technology risk framework, focusing on regulatory alignment under DORA and oversight of a Microsoft-centric estate including Azure. You will build and lead a high-performing team and partner with IT, security, and business stakeholders.

This role demands deep experience in regulated financial services, strong knowledge of ISO 27001/NIST/COBIT, and proven ability to report risk to senior management and board committees.

Qualifications

• > Proven IT risk management, regulatory compliance or IT audit experience in regulated financial services.
• - Strong knowledge of DORA and ICT risk frameworks (ISO 27001, NIST, COBIT).
• - Practical experience assessing risk within Microsoft-centric environments.
• - Experience overseeing third-party / outsourcing and vendor risk assessments.
• - Excellent stakeholder management with ability to present risk reporting to senior management and board-level risk committees.
• - People leadership experience with building and developing high-performing teams.
• - Excellent communication translating technical risk into business language.

Responsibilities

• Ensure DORA compliance and alignment with bank policies and internal standards.
• Identify, assess, monitor, and report IT and security risks across the Group.
• Coordinate regulatory interactions and assurance activities related to technology risk.
• Oversee risk assessments for new systems, changes, and vendors (cloud and SaaS).
• Deliver clear, actionable IT and security risk reporting to senior management and risk committees.
• Embed risk management into delivery and change processes with IT, security and business teams.
• Build, develop, and lead a high-performing IT Risk & Compliance team.
• Provide risk oversight across Microsoft Azure and Microsoft 365 tech landscape.

Skills

IT risk management

Regulatory compliance

IT audit

DORA knowledge

Azure / Microsoft 365

Vendor risk management

Stakeholder management

People leadership

Communication

Board-level reporting

Tools

Azure

Microsoft 365

Job description

This is a senior, people-leadership role at the heart of the organisation's technology risk framework, with particular emphasis on regulatory alignment under DORA and oversight of a heavily Microsoft centric technology estate, including Azure. The successful candidate will build and lead a high-performing team while acting as a trusted partner to IT, security, and business stakeholders.

Daily Rate Contract position.

Key Responsibilities

• Ensure adherence to all relevant regulations, bank policies, and internal standards, with particular focus on DORA compliance.
• Identify, assess, monitor, and report IT and security risks across the Group.
• Support regulatory interactions and coordinate internal and external assurance activities relating to technology risk.
• Oversee technology risk assessments for new systems, system changes, and third-party technology arrangements, including cloud and SaaS vendors.
• Deliver clear, actionable IT and security risk reporting to senior management and risk committees.
• Partner with IT, security, and business teams to embed effective risk management into delivery and change processes.
• Build, develop, and lead a high-performing IT Risk & Compliance team.
• Provide risk oversight and advisory input across the Microsoft Azure and Microsoft 365 technology landscape, including cloud governance and third-party/outsourcing risk.

Candidate Profile

• Proven experience in IT risk management, technology compliance, or IT audit within a regulated financial services environment.
• Strong working knowledge of DORA and broader operational resilience / ICT risk frameworks (e.g. ISO 27001, NIST, COBIT).
• Practical experience assessing risk within Microsoft-centric environments
• Experience overseeing third-party / outsourcing and vendor risk assessments.
• Strong stakeholder management skills, with the ability to present risk reporting to senior management and board-level risk committees.
• People leadership experience, with a track record of building and developing high-performing teams.
• Excellent communication skills, with the ability to translate technical risk into business-relevant language.