Cyber Risk Analyst – Third-Party Security

Cyber Risk Analyst – Third-Party Security
Dublin · Hybrid · Permanent · €65,000 + annual bonus

Want a role where your risk work actually changes decisions? A large international group is growing its central cyber function and needs an analyst to own supplier security and cyber risk from start to finish.

What you’ll do

• Assess supplier security from first request to sign-off: review the evidence, find the gaps, and follow suppliers until the fixes are done
• Work with business and technology teams to identify cyber risks, and make sure each one has an owner, a plan and a deadline
• Follow up on overdue actions, and keep track of the risk that remains and the risk that’s been formally accepted
• Write clear updates and papers for senior risk committees
• Advise project and transformation teams on security requirements early, before suppliers are approved
• Improve the supplier risk process and its automated workflow
• Provide evidence for internal and external audits

What you’ll bring

• 2+ years in cyber risk, vendor/third-party risk or IT risk
• Hands-on use of ISO 27001, NIST CSF and CIS Controls
• Experience running risk registers and treatment plans, and handling risk acceptances
• Confidence reviewing SOC 2 reports, ISO certificates, security questionnaires and contract security clauses
• A good grasp of cloud, SaaS, identity and data protection controls
• Clear writing, and the confidence to push back when something isn’t good enough

Nice to have: NIS2, GDPR or EU AI Act exposure, experience assessing AI vendors, any GRC tooling or Microsoft 365 automation, and certifications like CISM, CRISC, CISSP or ISO 27001 LA/LI.

What’s on offer: €65,000 base, a performance bonus, real room to grow in a global security team, and a hybrid working pattern.

Reperio Human Capital acts as an Employment Agency and an Employment Business.