HCS launches governance & compliance practice with Whelan

HCS has launched a governance, risk and compliance practice and appointed Lesley Whelan as Head of Risk and Compliance, expanding the Irish technology services company's advisory work in regulated sectors.

The practice targets organisations facing stricter regulatory demands and rising cyber and operational risks. It will focus on businesses in healthcare, public sector supply chains, critical service environments, technology and professional services, as well as mid-sized companies without in-house governance and compliance teams.

Services include governance, compliance and data protection maturity assessments, continuous compliance monitoring, governance framework development, information security policy work, vendor risk reviews, and support for artificial intelligence and ISO readiness. HCS is also offering a Virtual Chief Information Security Officer service, delivered on site or remotely, covering cyber assessments, regulatory gap analysis and alignment with frameworks including NIS2.

The launch comes as companies across Ireland and Europe prepare for tighter oversight under rules such as NIS2 and DORA. Boards are also facing greater scrutiny over operational resilience, third-party risk and accountability for cyber incidents.

According to HCS, Whelan brings 20 years of governance, risk and compliance experience in the IT industry. In her new role, she will lead the development of the practice and help expand its customer base.

The unit is designed to help clients put governance and compliance frameworks in place and maintain them through training, continuity planning, monitoring and ongoing improvement. The aim is to give businesses access to specialist support without requiring dedicated internal teams.

HCS cites its ISO 27001 information security management certification and ISO 9001 quality management certification as part of the foundation for the new offering. The company has operated in the Irish market for more than three decades and is based in Waterford, with offices in Dublin and Cork.

In late 2024, HCS was acquired by Centric360, an investment company jointly owned by Pamela Farrell and Brian Larkin. Farrell now serves as Managing Director of HCS.

Whelan outlined how the company sees demand developing in the market.

"For many organisations, governance and compliance are no longer viewed as box-ticking exercises; they are now central to winning business, maintaining trust, supporting growth, and demonstrating operational maturity. HCS is responding to that shift by building a practical and scalable service that connects governance and compliance support with resilience, awareness, and real-world security needs. It will help businesses tackle several critical challenges, including reducing risk exposure, improving internal clarity around roles, policies, and accountability, and preparing for regulatory change," said Lesley Whelan, Head of Risk & Compliance, HCS.

Farrell said the company sees governance and resilience issues moving beyond the IT department and into the boardroom.

"HCS is launching this new division amid rising cyber and operational risk, a regulatory landscape that is becoming more complex, and greater board-level focus on governance. Cybersecurity, compliance, and resilience can no longer sit solely within the IT function. They are now business-critical issues that require board-level visibility, clear ownership, and ongoing accountability. This shift is driving organisations to look for practical governance support that connects technology, risk, people, and process. The new practice builds on HCS' existing expertise in governance, assurance, and data security, formalising and scaling those capabilities into a dedicated offering. Our integrated approach will enable us to scale our capabilities quickly and easily, and we look forward to growing both the practice and our client base significantly over the coming years," said Pamela Farrell, Managing Director of HCS.