Strategic IT GRC Lead: Risk, Compliance & Resilience

Realtime Recruitment; Dublin; On-site; EUR 90,000 - 130,000; Full time

Job summary

Realtime Recruitment is seeking a GRC Lead to establish, implement and mature an enterprise-wide Governance, Risk & Compliance programme. The role will focus on managing and reducing high-priority technology and cybersecurity risks, including Disaster Recovery readiness, Identity Governance, and third-party cyber risk.

You will drive regulatory compliance such as ISO 27001 and Cyber Essentials+, translate technical risk into business recommendations and advise CIO/Executive stakeholders to

Qualifications

• 6+ years’ experience across GRC, IT Risk, Cybersecurity Risk, Internal Audit or Enterprise Risk Management.
• Strong knowledge of GRC frameworks, enterprise risk management, ISO 27001/27002 or NIST CSF.
• Ability to develop and maintain governance frameworks, policies, standards and processes.
• Strong IT and cybersecurity risk assessment, including risk registers, treatment and monitoring.
• Deep understanding of Disaster Recovery, RPO/RTO, testing and assurance.
• Knowledge of Identity Governance, Joiner/Mover/Leaver controls and access risk.
• Understanding of Third-Party Cyber Risk, supplier due diligence and contract security risks.
• Experience managing ISO 27001, Cyber Essentials+ and regulatory compliance, including audit prep.
• Ability to translate technical risks into business recommendations for CIO/Executive stakeholders.

Skills

GRC

IT Risk

Cybersecurity Risk

Internal Audit

Enterprise Risk Management

GRC frameworks

ISO 27001/27002

NIST CSF

Risk assessment

Stakeholder management

Job description

Realtime Recruitment is seeking a GRC Lead to establish, implement and mature an enterprise-wide Governance, Risk & Compliance programme. The role will focus on managing and reducing high-priority technology and cybersecurity risks, including Disaster Recovery readiness, Identity Governance, and third-party cyber risk.

You will drive regulatory compliance such as ISO 27001 and Cyber Essentials+, translate technical risk into business recommendations and advise CIO/Executive stakeholders to