eRamba GRC Platform Implementation and Cyber Compliance

Consultant eRamba GRC Platform Implementation and Cyber Compliance

Job Title: Consultant GRC Platform (eRamba) Implementation & Cyber Compliance

Location: Dublin 2 Ireland; client office is the contractual home base.

Start Date: Anticipated November 2026 or as soon as possible thereafter subject to award and confirmation.

Contract Duration: Anticipated 12 months plus up to two optional six-month extensions; duration units await client confirmation.

Hybrid / Onsite / Remote: Required on-site attendance and any hybrid or remote arrangement are to be confirmed.

Grade and Experience: Level 2 Consultant; typically one to three years as a professional consultant with specialist client-facing project experience. More experienced candidates may be considered at the applicable grade rate.

Grade experience is indicative rather than a separate minimum-years pass/fail threshold.

An Irish central government organisation is operationalising NIS2-aligned cybersecurity governance risk and compliance following a gap analysis. Its existing eRamba GRC platform requires configuration integration and embedding; platform selection is outside scope.

Configure optimise integrate and embed the existing eRamba platform. Lead technical workflows risk and control records evidence management dashboards documentation and administrator training under Senior Consultant oversight.

Candidates must meet the following role-specific sourcing requirements. These support the teams overall capability and are not a statement that every item is an individual tender pass/fail test.

Hands-on eRamba configuration administration and integration on an existing deployment. This is our sourcing requirement; prior eRamba experience is not expressly mandated by the tender.

GRC platform implementation and optimisation including workflows controls testing and evidence.

Integration with enterprise security tooling relevant to vulnerability identity service management and incident monitoring.

Practical NIS2 / ISO/IEC 27001 / NIST CSF application and public-sector or regulated-environment delivery.

Confirm earliest start available days planned absences and ability to attend Dublin as agreed. Named personnel must remain available for the agreed term. Actual workload is unconfirmed; engagement is subject to contract award and client approval.

No specific degree or certification is mandatory. Relevant qualifications and training are desirable. ISO 27001 training CompTIA Security ITIL Foundation or GRC platform training; IMCA Associate-level or similar accreditation is desirable.

Fluent spoken and written English for workshops stakeholder communication reporting documentation and training. This is a recruitment expectation; no specific language test or score is prescribed.

Configured governance risk and incident workflows; central risk register scoring treatment tracking and dashboards.

Control libraries NIS2 compliance mappings control-testing cycles and traceable evidence repositories.

Role-based access controls workflow approvals risk categories and compliance reports.

Documented integrations with relevant security and ICT systems where technically feasible.

User administrator and configuration documentation supporting future maintenance and enhancement.

Administrator training knowledge transfer and operational handover enabling independent client operation.

Technical input to testing quality assurance audit evidence delivery planning and issue resolution.

eRamba configuration; workflow and dashboard design; APIs connectors or scripting; data mapping; troubleshooting and testing; technical documentation and administrator training.

Working days and full-time/part-time commitment are to be confirmed. The 100 notional days per grade are for evaluation only and do not establish actual days or a two-day-per-week schedule. Extension workloads are also unconfirmed. One working day is 7.5 hours; part days are pro rata. Travel beyond the home base requires prior approval. Candidate daily rates are agreed separately.