Consultant eRamba GRC Platform Implementation and Cyber Compliance

Job Title: Consultant – GRC Platform (eRamba) Implementation & Cyber Compliance

Location: Dublin 2, Ireland; client office is the contractual home base.

Start Date: Anticipated November 2026 or as soon as possible thereafter, subject to award and confirmation.

Contract Duration: Anticipated 12 months plus up to two optional six-month extensions; duration units await client confirmation.

Hybrid / Onsite / Remote: Required on-site attendance and any hybrid or remote arrangement are to be confirmed.

Grade and Experience: Level 2 Consultant; typically one to three years as a professional consultant with specialist, client-facing project experience. More experienced candidates may be considered at the applicable grade rate.

Grade experience is indicative, rather than a separate minimum-years pass/fail threshold.

Client Overview

An Irish central government organisation is operationalising NIS2-aligned cybersecurity governance, risk and compliance following a gap analysis. Its existing eRamba GRC platform requires configuration, integration and embedding; platform selection is outside scope.

Role Overview

Configure, optimise, integrate and embed the existing eRamba platform. Lead technical workflows, risk and control records, evidence management, dashboards, documentation and administrator training under Senior Consultant oversight.

Mandatory Requirements and Experience

Candidates must meet the following role-specific sourcing requirements. These support the team’s overall capability and are not a statement that every item is an individual tender pass/fail test.

·         Hands-on eRamba configuration, administration and integration on an existing deployment. This is our sourcing requirement; prior eRamba experience is not expressly mandated by the tender.

·         GRC platform implementation and optimisation, including workflows, controls, testing and evidence.

·         Integration with enterprise security tooling relevant to vulnerability, identity, service management and incident monitoring.

·         Practical NIS2 / ISO/IEC 27001 / NIST CSF application and public-sector or regulated-environment delivery.

Availability

Confirm earliest start, available days, planned absences and ability to attend Dublin as agreed. Named personnel must remain available for the agreed term. Actual workload is unconfirmed; engagement is subject to contract award and client approval.

Qualifications

No specific degree or certification is mandatory. Relevant qualifications and training are desirable. ISO 27001 training, CompTIA Security+, ITIL Foundation or GRC platform training; IMCA Associate-level or similar accreditation is desirable.

English Language Proficiency

Fluent spoken and written English for workshops, stakeholder communication, reporting, documentation and training. This is a recruitment expectation; no specific language test or score is prescribed.

Key Deliverables

·         Configured governance, risk and incident workflows; central risk register, scoring, treatment tracking and dashboards.

·         Control libraries, NIS2 compliance mappings, control-testing cycles and traceable evidence repositories.

·         Role-based access controls, workflow approvals, risk categories and compliance reports.

·         Documented integrations with relevant security and ICT systems, where technically feasible.

·         User, administrator and configuration documentation supporting future maintenance and enhancement.

·         Administrator training, knowledge transfer and operational handover enabling independent client operation.

·         Technical input to testing, quality assurance, audit evidence, delivery planning and issue resolution.

Key Experience Competencies and Skillsets

eRamba configuration; workflow and dashboard design; APIs, connectors or scripting; data mapping; troubleshooting and testing; technical documentation and administrator training.

Engagement and Working Arrangements

Working days and full-time/part-time commitment are to be confirmed. The 100 notional days per grade are for evaluation only and do not establish actual days or a two-day-per-week schedule. Extension workloads are also unconfirmed. One working day is 7.5 hours; part days are pro rata. Travel beyond the home base requires prior approval. Candidate daily rates are agreed separately.