Compliance Consultant

Nostra is a leading Managed Service Provider (MSP) in Ireland, dedicated to delivering advanced IT solutions that enable businesses to build reliable, secure, and scalable IT foundations. With a commitment to continuous improvement, we serve a diverse range of industries, providing exceptional services that empower our clients to focus on their core business goals.

The successful candidate will help organisations navigate complex compliance and regulatory requirements by assessing controls, identifying gaps, and delivering practical, risk-based guidance. Working across frameworks such as ISO 27001, DORA, NIS2 and GDPR, you'll help customers strengthen governance, security and operational resilience.

Nostra has offices in Dublin (HQ), Galway, Cork and Belfast. 

Responsibilities:

Cyber, ICT Risk and Regulatory Compliance:

• Act as a trusted adviser to Customers providing clear, practical guidance on compliance requirements.
• Support customer security questionnaires, due diligence requests, audits and tender responses.
• Attend customer and internal meetings as a compliance subject matter expert when required.
• Assist with implementing controls and processes that meet ISO/IEC 27001, DORA, NIS2, GDPR, the NIST Cybersecurity Framework, ITIL and other applicable regulations and frameworks.
• Carry out gap assessments, compliance reviews and control testing, and document findings, risk ratings and recommended remediation.
• Perform ICT and cyber risk assessments, including assessments of new systems, changes and projects, and record the results in the risk register.
• Carry out supplier and ICT third-party risk assessments and support ongoing monitoring of key suppliers.
• Advise IT, Security Operations and other teams on the compliance implications of technical changes, and on controls such as access management, vulnerability and patch management, logging, backup and resilience.
• Support the compliance aspects of security incident management, including evidence gathering, lessons learned and regulatory reporting requirements.
• Help investigate and resolve compliance and control issues, working with the relevant teams through to closure.
• Contribute to the development of the Compliance team's systems, methods, templates and ways of working.

Internal Compliance Operations:

Support the Internal Governance Officer in maintaining the Integrated Management System and in aligning it with contractual obligations, GDPR,  DORA and NIS2.

Requirements:

• At least five years' experience in cyber security, ICT risk, compliance, IT audit or a governance, risk and compliance (GRC) role.
• Practical experience implementing or assessing controls against ISO/IEC 27001.
• Working knowledge of GDPR and of at least one of DORA or NIS2.
• Understanding of the NIST Cybersecurity Framework and ITIL service management processes such as incident, problem and change management.
• Experience carrying out risk assessments, gap analyses and control testing, and documenting clear findings and recommendations.
• A sound technical understanding of IT infrastructure, cloud services and common security controls.
• Experience maintaining compliance registers, evidence and document control records.
• Excellent written and verbal communication skills, with the ability to explain compliance requirements to technical and non-technical audiences.
• Strong organisational skills and the ability to manage a varied workload across advisory and operational tasks.
• Good working knowledge of Microsoft 365 tools such as SharePoint, Teams and Excel.

Benefits:

• Generous Professional Development Budget.
• Company Pension. 
• Health Insurance.
• Wellness Benefit. 
• On-site Gym.
• Health & Fitness Benefit.
• Employee Assistance Program.
• Company Events.

At Nostra we value our people. We are a passionate team committed to doing our best, our values are trust, accountability, expertise, people, integrity, and empathy. These values form a central part of our recruitment process. Nostra is an equal opportunity employer committed to diversity and inclusion.