GRC Analyst – Information Security (12‑month contract)

About the role

We are looking for a motivated Governance, Risk & Compliance (GRC) Analyst to join our Information Security team in Cork on a 12‑month fixed‑term contract. This position offers an excellent entry‑level opportunity to gain hands‑on experience across risk assessments, policy governance, third‑party risk, and regulatory compliance within a dynamic organisation.

Key responsibilities

• Assist in maintaining the organisation’s Information Security Management System (ISMS) aligned to ISO/IEC 27001.
• Support enterprise, IT and third‑party risk assessments and help track remediation actions.
• Collect evidence and support internal audits, ensuring compliance with standards and regulations.
• Conduct vendor risk assessments and due‑diligence reviews.
• Maintain and update security policies, procedures and control documentation.
• Contribute to monitoring compliance with regulations such as GDPR.
• Prepare risk and compliance reports for internal stakeholders.
• Support security awareness initiatives and training programmes.

Required profile

• 0–2 years of experience in GRC, information security, IT audit or related internships.
• Understanding of core security principles (confidentiality, integrity, availability) and the risk lifecycle.
• Familiarity with ISO/IEC 27001 and the NIST Cybersecurity Framework.
• Basic knowledge of data protection regulations, especially GDPR.
• Strong documentation, organisational and analytical skills.
• Effective communication with both technical and non‑technical stakeholders.

Required skills

• ISO/IEC 27001 framework knowledge.
• NIST Cybersecurity Framework familiarity.
• Experience or exposure to GRC tools such as ServiceNow GRC, OneTrust or Archer.
• CompTIA Security+ certification (or studying).