IT Risk Manager (GRC)

Nostra is a leading Managed Service Provider (MSP) in Ireland, dedicated to delivering advanced IT solutions that enable businesses to build reliable, secure, and scalable IT foundations. With a commitment to continuous improvement, we serve a diverse range of industries, providing exceptional services that empower our clients to focus on their core business goals. A long‑standing enterprise client is seeking an experienced IT Risk Manager to lead the organisation’s IT regulatory compliance, risk management and governance framework, with responsibility for providing operational leadership to the IT team as required. The successful candidate will act as a trusted advisor to senior IT leadership on risk, compliance, and control matters, while maintaining hands‑on oversight of IT policies, audits, Risk and governance processes. Nostra has offices in Dublin (HQ), Cork, Galway and Belfast. This role will be based with one of our enterprise clients in Dublin. Responsibilities: Develop, maintain, and continuously improve the IT governance, risk, and compliance frameworks in place. Own and maintain all IT policies, procedures, standards, and regulatory documentation, ensuring alignment with applicable laws and recognised frameworks. Ensure compliance with relevant regulations and standards, including (but not limited to) GDPR, cyber‑security regulations, and industry best practices. Monitor regulatory developments and emerging cyber risks, providing proactive recommendations to mitigate risk and strengthen controls. Act as the primary point of contact for internal and external audits, managing audit schedules, preparation, execution, and remediation activities. Ensure timely, accurate, and complete risk & compliance reporting to senior management and relevant stakeholders. Support the protection of sensitive business, employee, and customer data through appropriate governance, controls, and oversight of security measures. Work closely with the IT and security teams to ensure risks are identified, documented, and mitigated in line with business priorities. Contribute to business continuity, disaster recovery, and incident response planning from a governance and compliance perspective. Provide day‑to‑day operational oversight and leadership to the IT team when the Head of IT is unavailable or dedicated to project work. Support workload prioritisation, escalation management, and decision‑making during these periods. Act as a key liaison between IT, senior leadership, and the wider business, ensuring continuity of service and clear communication. Foster strong collaboration between IT and other departments, promoting accountability, standards, and best practice. Requirements: 2-3 years’ experience in data protection/cyber resilience compliance. Excellent Documentation preparation skills (e.g. proficiency in word and excel, reporting). Knowledge of Cyber security systems/applications and their implementations. Ability to work independently and part of a team. Must have proficient management skills (including time management). Excellent Interpersonal skills. Must have excellent communication skills to work between various departments, customers etc. Qualifications Required: ISMS Internal Auditor Training Course, GDPR Practitioner Certificate, or similar related Cyber risk/Framework/Data protection implementation background. Benefits: Hybrid Working. Generous professional development budget. Company Pension. Health Plan. Wellness Benefit. Onsite Gym. At Nostra we value our people. We are a passionate team committed to doing our best, our values are trust, accountability, expertise, people, integrity, and empathy. These values form a central part of our recruitment process. Nostra is an equal opportunity employer committed to diversity and inclusion.