GRC Lead

GRC Lead

• Dublin
• €400 per day
• 6-month contract

What you'll do

• Design and roll out an enterprise GRC framework, including policies, standards and risk reporting for senior leadership.
• Own the technology risk register and lead remediation of priority risks.
• Strengthen business continuity and cyber resilience, including recovery objectives, testing and documentation.
• Improve identity and access governance, including user lifecycle controls and privileged access oversight.
• Run supplier and third-party security assurance.
• Lead information security certification and audit activity, and keep track of regulatory change.
• Develop the GRC capability and team over time.

What you'll bring

• 5+ years in GRC, IT or cyber risk, internal audit or enterprise risk.
• Hands-on experience with ISO 27001/27002, ISO 31000 and NIST CSF. Exposure to UK cyber certification schemes is useful.
• A track record of building or maturing a GRC function.
• Working knowledge of IAM/IGA, PAM and cloud security governance (Azure, AWS or GCP).
• Confidence advising and influencing senior stakeholders.
• CISA, CRISC, CISSP or an ISO 27001 Lead Implementer/Auditor certification is a plus

Reperio Human Capital acts as an Employment Agency and an Employment Business.