Cyber Strategy GRC Analyst
First seen by Alion on Oct 9, 2026.
Job Description
>
Dunnes Stores is Ireland’s leading retailer positioned at the cutting edge of food, fashion and home retailing. We are known for offering a wide range of high-quality products to our customers.
We are a customer focused business and constantly exploring new ways to improve the experience for our customers. This includes embracing changes in technology to drive new innovation including IoT technologies such as Scan & Go/Queue Busting checkout options, intelligent Digital Displays, Smart Shelves, and Smart Trolleys, along with mobile device integration, are enabling such experiences.
Modern IT infrastructures are allowing for the rapid on-boarding of new stores, product lines, and technologies to allow us quickly to adapt to market changes while ensuring security and compliance. This provides a challenging environment for people to drive change and ensure we embrace cyber and security challenges to protect and grow our business.
The Cyber GRC Analyst will support the Cybersecurity GRC Senior Manager in maintaining a structured, consistent and well-documented cybersecurity governance environment. This is an analyst-level role suited to someone who is organised, detail-oriented and comfortable working across cybersecurity governance, risk, compliance and third-party assurance activities.
The role requires a practical understanding of how cyber GRC operates in a business environment, including the importance of accurate documentation, evidence-based oversight, consistent risk practices and timely follow-up. The successful candidate will help ensure that GRC activities are coordinated effectively, recorded accurately and aligned with recognised frameworks, internal requirements and relevant regulatory expectations.
The analyst will work with technical and non-technical stakeholders and should be able to communicate clearly, manage information carefully and support structured decision-making. The role requires someone who brings discipline, consistency and follow-through to day-to-day cyber GRC activities.
Key Responsibilities:
- Support the Senior Manager in operating cybersecurity governance, risk, compliance and third-party risk management processes.
- Maintain and update cybersecurity governance documentation, including policies, standards, guidelines, procedures, templates, registers and review schedules.
- Support governance document lifecycle activities, including stakeholder review, version control, approval tracking, publication and periodic refresh.
- Assist with cyber risk assessments for suppliers, systems, projects, processes and control gaps, including documenting risk scenarios, findings, actions, owners and due dates.
- Support third-party risk management activities, including supplier assessment scoping, evidence collection, review of supplier responses, action tracking and ongoing monitoring.
- Maintain risk, compliance, policy exception and remediation trackers, escalating overdue or material issues to the Senior Manager.
- Support security compliance monitoring by collecting and organising evidence, reviewing control status, tracking open findings and preparing compliance updates.
- Coordinate with IT, business, procurement, legal, and supplier stakeholders to gather information, validate evidence and follow up on agreed actions.
- Assist in preparing management information, dashboards, metrics and reports on cyber risk, third-party risk, compliance status and remediation progress.
- Help maintain cybersecurity awareness, guidance and communication materials where required.
- Monitor relevant cybersecurity, regulatory and framework developments and support continuous improvement of GRC processes.
Qualifications:
- Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field.
- Experience supporting governance, risk, compliance, audit, control testing, supplier assurance or third-party risk activities.
- Experience using GRC, risk, compliance, audit, workflow, reporting or third-party risk management platforms to maintain records, track actions, manage evidence and support reporting.
- Working knowledge of cybersecurity frameworks and standards such as NIST CSF, ISO/IEC 27001, ISO 27005, COBIT or similar.
- Strong documentation, analytical, organisational and follow-up skills.
- Ability to communicate clearly with both technical and non-technical stakeholders.
- Good attention to detail and ability to maintain accurate registers, trackers, evidence records and management information.
Dunnes Stores Competency Profile:
- Technical/professional knowledge
- Building Relationships
- Results Orientation
- Change Advocate
Benefits:
- Competitive salary
- Comprehensive benefits package including our employee discount
- Opportunities for professional development and career progression
- A dynamic and collaborative work environment focused on innovation and growth
If this sounds like the job for you, please apply now!
Dunnes Stores is an equal opportunities employer
By creating an account, you consent to Dunnes Stores (and any third party acting on its behalf) using your personal information which Dunnes Stores receives during the account creation process. You further agree that Dunnes Stores may transfer, process and store your personal data in any country where Dunnes Stores has offices. For further details on how Dunnes Stores will process your personal information please read our Data privacy Notice.
© Dunnes Stores 2018