TPA and Cyber Risk Analyst

TPA and Cyber Risk Analyst (Dublin, Hybrid)

Our client is looking for a risk analyst with experience and an interest in cybersecurity. Your main responsibilities will be vetting vendors to ensure they aren’t putting the company's data at risk, as well as tracking internal risks, identifying them, and creating plans to fix cybersecurity risks. You will also need to prepare papers for leadership risk committees,

Essentials:

• 3+ years in cyber risk, TPA, or IT risk
• Working knowledge of ISO 27001, NIST CSF, and CIS Controls
• Assessing supplier security evidence (SOC 2 + ISO 27001)
• Solid grasp of cloud and SaaS security, identity and access management, and data protection controls
• Confident working with stakeholders at all levels: able to challenge constructively, hold people to deadlines, and write clearly and concisely
• Experience running risk registers, treatment plans and risk acceptances

Nice to have

• Working awareness of NIS2, GDPR and the EU AI Act and what they mean for supplier and data risk
• Exposure to assessing AI vendors and identifying AI-related risks
• Hands-on experience with GRC platforms and the Microsoft stack (M365, Power Automate, Purview)

Qualifications

• Essential: A degree in IT, cyber security or a related discipline, or equivalent practical experience
• Desirable: A recognised security or risk certification such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor/Implementer

Benefits

• Hybrid
• Pension
• Healthcare
• Competitive salary

Reperio Human Capital acts as an Employment Agency and an Employment Business.