Senior Consultant NIS2 Cyber Governance Risk and Compliance

Senior Consultant NIS2 Cyber Governance Risk and Compliance

Dublin 2, Ireland Posted on 10/19/2026

• Work Experience Level 3 Senior Consultant; typically more than three years as a professional consultant, with specialist expertise and project/team management experience.
• Industry Government & Public Sector
• City Dublin 2
• State/Province Dublin
• Country Ireland

Job Description

Senior Consultant NIS2 Cyber Governance Riskand Compliance

Location: Dublin 2,Ireland; client office is the contractual home base.

Start Date: AnticipatedNovember 2026 or as soon as possible thereafter, subject to award andconfirmation.

Contract Duration: Anticipated12 months plus up to two optional six-month extensions; duration units awaitclient confirmation.

Hybrid / Onsite / Remote: Requiredon-site attendance and any hybrid or remote arrangement are to be confirmed.

Grade and Experience: Level3 Senior Consultant; typically more than three years as a professionalconsultant, with specialist expertise and project/team management experience.

Grade experienceis indicative, rather than a separate minimum-years pass/fail threshold.

Client Overview

An Irish central government organisation isoperationalising NIS2-aligned cybersecurity governance, risk and compliancefollowing a gap analysis. Its existing eramba GRC platform requiresconfiguration, integration and embedding; platform selection is outside scope.

Role Overview

Lead governance, cyber risk, incidentresponse, compliance, assurance and audit readiness. Combine strategic advicewith hands-on delivery, oversee the Consultant's platform work and leadstakeholder engagement and knowledge transfer.

Mandatory Requirements and Experience

Candidates must meet the followingrole-specific sourcing requirements. These support the team's overallcapability and are not a statement that every item is an individual tenderpass/fail test.

• Proven NIS2 implementation orequivalent ISO/IEC 27001 / NIST CSF delivery.
• Strong cyber GRC capability:governance, risk, control design/testing, assurance and audit readiness.
• Comparable public-sector orregulated-environment engagements.
• Strategic advice and hands-onimplementation; GRC platform delivery oversight; client-facing project andstakeholder leadership.

Availability

Confirm earliest start, available days,planned absences and ability to attend Dublin as agreed. Named personnel mustremain available for the agreed term. Actual workload is unconfirmed;engagement is subject to contract award and client approval.

Qualifications

No specific degree or certification ismandatory. Relevant qualifications and training are desirable. CISSP, CISM,CRISC, CGEIT, ISO 27001 Lead Implementer/Auditor or relevant NIS2 training;IMCA Member-level or similar accreditation is desirable.

Fluent spoken and written English forworkshops, stakeholder communication, reporting, documentation and training.This is a recruitment expectation; no specific language test or score isprescribed.

• Operational governancestructures, roles, reporting lines, decision forums and escalation paths.
• Cyber risk processes embeddedwithin enterprise risk management, including risk methodology, ownership andtreatment oversight.
• Incident response procedures,playbooks and tested capabilities aligned with reporting obligations.
• NIS2 control framework, controlownership, testing methods, evidence standards and requirements-to-evidencetraceability.
• Assurance dashboards andreporting, audit-readiness documentation and quality assurance of platformoutputs.
• Delivery plan, milestones,risks/issues, dependencies, change control and stakeholder reporting.
• Training materials, structuredknowledge transfer and operational handover enabling independent clientoperation.

Key Experience Competencies and Skillsets

Risk and control assessment; consulting andanalytical methods; workshop facilitation; clear executive reporting;stakeholder and delivery leadership. GRC platform implementation knowledge isessential; hands-on eramba experience is desirable.

Engagement and Working Arrangements

Working days and full-time/part-timecommitment are to be confirmed. The 100 notional days per grade are forevaluation only and do not establish actual days or a two-day-per-weekschedule. Extension workloads are also unconfirmed. One working day is 7.5hours; part days are pro rata. Travel beyond the home base requires priorapproval. Candidate daily rates are agreed separately.