Senior Analyst, Cyber Risk and Compliance

Digital Realty; Dublin; On-site; EUR 70,000 - 90,000; Full time

Job summary

Digital Realty is looking for a Senior Analyst, Cyber Risk & Compliance in Dublin. This role involves conducting cybersecurity risk assessments, maintaining a cyber risk register, and preparing risk posture reports for leadership.

The ideal candidate should have 4-7+ years of experience in cyber risk, fluency in English, and be knowledgeable about regulatory frameworks such as NIST and ISO. Strong skills in ServiceNow IRM are essential.

Qualifications

• 4-7+ years of experience in cybersecurity, IT risk, information security, audit, or compliance.
• Strong knowledge of NIST CSF, NIST RMF, NIS2, DORA, ISO 27001/27005, PCI DSS.
• Ability to translate technical findings into clear business risk language.

Responsibilities

• Conduct cybersecurity and IT risk assessments across systems and applications.
• Perform control assessments to evaluate control design and effectiveness.
• Maintain the cyber risk register and track risk remediation plans.

Skills

Cybersecurity risk assessments

IT risk management

Stakeholder management

ServiceNow GRC

Analytical skills

Education

Bachelor’s degree in a related field

Certifications: CRISC, CISA, CISSP, or CISM

Tools

ServiceNow IRM

Job description

We are seeking a Senior Analyst, Cyber Risk & Compliance (f/m/d) in Dublin. The role is responsible for executing core cyber & IT risk management activities that support the organization’s overall security, compliance, and resilience objectives. This role is primarily focused on performing cyber and IT security risk assessments, evaluating the design and effectiveness of security controls, maintaining the enterprise cyber risk register, and producing risk posture reporting for leadership and key stakeholders.

Your role

• Conduct cybersecurity and IT risk assessments across systems, applications, infrastructure, business processes, and third parties, as applicable.
• Use ServiceNow IRM or similar GRC tools to manage risk workflows, control records, issues, exceptions, and reporting.
• Perform control assessments to evaluate control design, implementation, and operating effectiveness.
• Identify and document threats, vulnerabilities, control gaps, business impacts, and residual risks.
• Maintain the cyber risk register, including risk scoring, ownership, treatment plans, and remediation status.
• Track and follow up on risk remediation and corrective action plans with control owners and stakeholders.
• Prepare risk posture dashboards, reports, KRIs, and summaries for leadership and governance forums.
• Support alignment with applicable regulatory and framework requirements, including NIST, NIS2, DORA, ISO 27001/27005, and PCI DSS.
• Partner with cybersecurity, IT, compliance, audit, legal, and business teams to gather evidence, validate findings, and support remediation efforts.
• Contribute to audit, compliance, and regulatory readiness activities by maintaining clear and accurate risk and control documentation.
• Analyze risk trends and recurring control issues to support continuous improvement of the risk management program.
• Assist in strengthening and standardizing risk assessment methodologies, templates, and reporting processes.

Qualifications

• 4-7+ years of experience in cybersecurity, IT risk, information security, audit, or compliance.
• Hands-on experience with risk assessments, control assessments, risk registers, and risk/reporting processes.
• Strong knowledge of NIST CSF and NIST RMF, with familiarity in NIS2, DORA, ISO 27001/27005, PCI DSS, and related frameworks.
• Hands-on experience with ServiceNow IRM / GRC platforms is a must.
• Strong analytical, documentation, communication, and stakeholder management skills.
• Ability to translate technical findings into clear business risk language.
• Bachelor’s degree in a related field; certifications such as CRISC, CISA, CISSP, or CISM are preferred.
• Fluent English language knowledge performance.