Compliance & IT Governance Lead
Contract: 6-month initial contract (strong likelihood of multi-year programme extension)
Sector: Global Energy
Overview
We are seeking an experienced Compliance & IT Governance Lead to join a global energy organisation undergoing a significant transformation programme. This role will play a key part in strengthening regulatory compliance, enhancing IT governance frameworks, and embedding robust risk and control practices across the technology estate.
The successful candidate will support the implementation of key regulatory and security standards, including NIS2, CAF controls, and ISO27001 readiness, while also driving improvements in IT service management, audit processes, and third-party/vendor compliance.
This is a high-impact role within a long-term strategic programme, offering excellent visibility across IT, Security, Risk, and Business stakeholders.
Key Responsibilities
- Lead and enhance IT governance, compliance, and risk management frameworks across the organisation
- Drive implementation and maturity of ISO27001 information security management system (ISMS) controls
- Support alignment and execution of NIS2 and Cyber Assessment Framework (CAF) requirements
- Manage internal and external audit processes, ensuring timely remediation of findings
- Define, implement, and continuously improve ITIL-aligned IT service management processes
- Establish and maintain robust vendor and third-party risk management practices
- Work closely with cybersecurity, infrastructure, and enterprise architecture teams to ensure control effectiveness
- Develop governance reporting, dashboards, and compliance metrics for senior stakeholders
- Support regulatory assurance activities and ongoing compliance monitoring
- Identify gaps in current controls and drive remediation plans through to completion
Required Experience
- Proven experience in IT governance, compliance, risk, or security assurance roles
- Strong working knowledge of ISO27001 and information security frameworks
- Experience with ITIL / IT Service Management (ITSM) environments
- Familiarity with regulatory frameworks such as NIS2 and/or CAF (or similar cyber security frameworks)
- Experience managing or supporting audit processes (internal and external)
- Strong understanding of vendor/third-party risk management
- Background in large-scale or regulated environments (energy, utilities, financial services, or similar advantageous)
- Excellent stakeholder management and communication skills across technical and non-technical audiences
Desirable Skills
- CISM, CISSP, ISO27001 Lead Implementer/Auditor or similar certifications
- Experience within the energy or utilities sector
- Exposure to enterprise transformation or multi-year governance programmes
- Experience working in hybrid / matrix global organisations
What's on Offer
- Initial 6-month contract with strong view to extension into a multi-year programme
- Opportunity to work with a global energy organisation undergoing major transformation
- Hybrid working model with flexibility (Cork base + remote options)
- High visibility role with significant influence over governance and compliance strategy
- Engagement in a critical regulatory and security uplift programme
About Korn Ferry
Korn Ferry unleashes potential in people, teams, and organizations. We work with our clients to design optimal organization structures, roles, and responsibilities. We help them hire the right people and advise them on how to reward and motivate their workforce while developing professionals as they navigate and advance their careers. To learn more, please visit Korn Ferry at www.Kornferry.com
