Governance Risk & Compliance Lead

We are seeking a Governance Risk and Compliance lead (GRC) Lead for a top multinational offering hybrid remote work and a strong package.You will be responsible for establishing and overseeing the organisation’s governance framework, enterprise risk management programme and regulatory compliance strategy, with a strong focus on information security, cyber resilience, data protection and AI governance.Responsibilities

• Lead the design, implementation and continuous improvement of the ISO/IEC 27001-aligned ISMS.
• Develop and maintain policies and controls aligned to ISO, NIST, SOC 2 and applicable regulations.
• Advise senior leadership on cyber risk posture and regulatory obligations.
• Ensure governance supports secure digital transformation and cloud adoption.Enterprise & Cyber Risk Management
• Maintain enterprise-wide risk management framework.
• Identify and manage strategic, operational, cyber, AI and compliance risks.
• Maintain the risk register and report risk exposure to executive leadership.
• Conduct security risk assessments, threat modelling and business impact assessments.
• Develop and implement AI governance and model risk management frameworks.
• Conduct AI risk assessments (bias, transparency, privacy, adversarial threats).
• Oversee third-party AI risk due diligence and ongoing monitoring.Compliance, Audit & Assurance
• Ensure compliance with GDPR and applicable regulatory requirements.
• Lead audits, certification programmes and regulatory engagements.
• Oversee remediation of audit findings and control deficiencies.Controls & Continuous Improvement
• Design, implement and test security controls aligned to ISO Annex A and NIST CSF.
• Monitor control effectiveness, vulnerability oversight and risk metrics.
• Drive continuous improvement to enhance cyber resilience.Experience
• 8+ years’ experience in GRC, Information Security or Cyber Risk roles.
• Proven ISO 27001 implementation and certified ISMS experience.
• Strong knowledge of ISO 27001, NIST CSF, SOC 2 and GDPR.
• Experience in AI governance or technology risk frameworks.
• Previous experience working within a technical IT and Security Infrastructure role.
• Track record leading audits, risk assessments and regulatory engagement.
• Relevant certifications (CISSP, CISM, CRISC, CISA, ISO 27001 Lead Implementer/Auditor) desirable.
• Strong analytical and executive reporting skills.For more info you can contact david@db-recruitment.ie