eRamba GRC Platform Implementation and Cyber Compliance

Consultant eRamba GRC Platform Implementation

and Cyber Compliance

Job Title: Consultant -

GRC Platform (eRamba) Implementation & Cyber Compliance

Location: Dublin 2,

Ireland; client office is the contractual home base.

Start Date: Anticipated

November 2026 or as soon as possible thereafter, subject to award and

confirmation.

Contract Duration: Anticipated

12 months plus up to two optional six-month extensions; duration units await

client confirmation.

Hybrid / Onsite / Remote: Required

on-site attendance and any hybrid or remote arrangement are to be confirmed.

Grade and Experience: Level

2 Consultant; typically one to three years as a professional consultant with

specialist, client-facing project experience. More experienced candidates may

be considered at the applicable grade rate.

Grade experience

is indicative, rather than a separate minimum-years pass/fail threshold.

Client Overview

An Irish central government organisation is

operationalising NIS2-aligned cybersecurity governance, risk and compliance

following a gap analysis. Its existing eRamba GRC platform requires

configuration, integration and embedding; platform selection is outside scope.

Role Overview

Configure, optimise, integrate and embed

the existing eRamba platform. Lead technical workflows, risk and control

records, evidence management, dashboards, documentation and administrator

training under Senior Consultant oversight.

Mandatory Requirements and Experience

Candidates must meet the following

role-specific sourcing requirements. These support the team’s overall

capability and are not a statement that every item is an individual tender

pass/fail test.

·Hands-on eRamba configuration,

administration and integration on an existing deployment. This is our sourcing

requirement; prior eRamba experience is not expressly mandated by the tender.

·GRC platform implementation and

optimisation, including workflows, controls, testing and evidence.

·Integration with enterprise

security tooling relevant to vulnerability, identity, service management and

incident monitoring.

·Practical NIS2 / ISO/IEC 27001

/ NIST CSF application and public-sector or regulated-environment delivery.

Availability

Confirm earliest start, available days,

planned absences and ability to attend Dublin as agreed. Named personnel must

remain available for the agreed term. Actual workload is unconfirmed;

engagement is subject to contract award and client approval.

Qualifications

No specific degree or certification is

mandatory. Relevant qualifications and training are desirable. ISO 27001

training, CompTIA Security+, ITIL Foundation or GRC platform training; IMCA

Associate-level or similar accreditation is desirable.

English Language Proficiency

Fluent spoken and written English for

workshops, stakeholder communication, reporting, documentation and training.

This is a recruitment expectation; no specific language test or score is

prescribed.

Key Deliverables

·Configured governance, risk and

incident workflows; central risk register, scoring, treatment tracking and

dashboards.

·Control libraries, NIS2

compliance mappings, control-testing cycles and traceable evidence

repositories.

·Role-based access controls,

workflow approvals, risk categories and compliance reports.

·Documented integrations with

relevant security and ICT systems, where technically feasible.

·User, administrator and

configuration documentation supporting future maintenance and enhancement.

·Administrator training,

knowledge transfer and operational handover enabling independent client

operation.

·Technical input to testing,

quality assurance, audit evidence, delivery planning and issue resolution.

Key Experience Competencies and Skillsets

eRamba configuration; workflow and

dashboard design; APIs, connectors or scripting; data mapping; troubleshooting

and testing; technical documentation and administrator training.

Engagement and Working Arrangements

Working days and full-time/part-time

commitment are to be confirmed. The 100 notional days per grade are for

evaluation only and do not establish actual days or a two-day-per-week

schedule. Extension workloads are also unconfirmed. One working day is 7.5

hours; part days are pro rata. Travel beyond the home base requires prior

approval. Candidate daily rates are agreed separately.