Senior Risk Analyst

Morgan McKinley; Cork; Hybrid; EUR 89,000 - 123,000; Full time

Job summary

Morgan McKinley is seeking an experienced professional to lead Third Party Risk Management within a major resilience programme. The 6-month initial contract offers hybrid working options across Cork and Dublin with an ASAP start.

Key focus areas include enterprise-wide TPRM framework development, supplier risk assessment, and embedding risk requirements into procurement and onboarding processes while coordinating with Risk, Cyber Security, Legal, Finance and Operations.

Qualifications

• 5+ years' experience in a relevant risk, resilience, GRC or supplier-risk environment.
• Experience designing or implementing risk frameworks, methodologies or governance models.
• Experience working in a regulated or highly controlled environment.
• Strong stakeholder management skills and confidence working with senior stakeholders.
• Knowledge of NIS2, CER, DORA or similar regulatory requirements.
• A practical, delivery-focused approach rather than purely policy-based experience.

Responsibilities

• Design and implement the organisation's Third Party Risk Management framework, including governance, processes, ownership and reporting.
• Develop supplier risk assessment, scoring and tiering methodologies.
• Identify and assess critical suppliers in conjunction with the wider resilience programme.
• Embed third-party risk requirements into procurement, contracts, onboarding and ongoing supplier monitoring.
• Lead remediation of existing high-risk supplier relationships.
• Develop monitoring, reporting and escalation processes for senior management.
• Work closely with Risk, Procurement, Cyber Security, Legal, Finance and Operations.
• Support the organisation's response to NIS2 and the EU CER Directive.
• Assess TPRM technology and managed service options and contribute to the business case.

Skills

Stakeholder management

GRC experience

Risk frameworks design

Delivery-focused

Regulatory knowledge

Job description

Location: Ireland (Hybrid – Dublin / Cork options)

Contract Duration: 6 Months Initial (Strong likelihood of extension)

Start Date: Immediate / ASAP

We are looking for an experienced Risk, GRC, Cyber, Supplier Risk or Operational Resilience professional to join a major resilience programme.

The role will focus on developing and implementing an enterprise-wide Third Party Risk Management (TPRM) framework.

Key Responsibilities

• Design and implement the organisation's Third Party Risk Management framework, including governance, processes, ownership and reporting.
• Develop supplier risk assessment, scoring and tiering methodologies.
• Identify and assess critical suppliers in conjunction with the wider resilience programme.
• Embed third-party risk requirements into procurement, contracts, onboarding and ongoing supplier monitoring.
• Lead remediation of existing high-risk supplier relationships.
• Develop monitoring, reporting and escalation processes for senior management.
• Work closely with Risk, Procurement, Cyber Security, Legal, Finance and Operations.
• Support the organisation's response to NIS2 and the EU CER Directive.
• Assess TPRM technology and managed service options and contribute to the business case.

You should have:

• 5+ years' experience in a relevant risk, resilience, GRC or supplier-risk environment.
• Experience designing or implementing risk frameworks, methodologies or governance models.
• Experience working in a regulated or highly controlled environment.
• Strong stakeholder management skills and confidence working with senior stakeholders.
• Knowledge of NIS2, CER, DORA or similar regulatory requirements.
• A practical, delivery-focused approach rather than purely policy-based experience.

Initial 6-month contract with likely extension | Cork / Hybrid | ASAP start