Cyber GRC Analyst- CRH International

Key Tasks And Responsibilities

In this role, you will:

• Develop and maintain cyber security policies, standards, and control frameworks, ensuring alignment with CRH Group requirements and applicability across both central platforms (UnITy) and OpCo-managed environments.
• Drive consistent adoption of security standards across central technology services and OpCos, balancing global governance with local implementation models.
• Provide risk-based guidance across both centrally delivered services and decentralised OpCo environments (e.g. IAM, network, endpoint, vulnerability management).
• Perform and support cyber risk assessments across UnITy platforms and OpCos, maintaining risk registers and tracking remediation to reduce enterprise risk exposure.
• Coordinate and support compliance and assurance activities, acting as a central interface between UnITy service teams, OpCos, and auditors.
• Support the delivery of the CRH International cyber programme, ensuring alignment between central technology initiatives and OpCo execution.
• Interpret and translate regulatory, legal, and contractual requirements into scalable and consistent controls applicable across both central and local operating models.
• Support third-party and supply chain risk management across both centrally managed services and OpCo suppliers, ensuring consistent security expectations and remediation tracking.

Key Functional Competencies

You Possess The Following:

• Strong understanding of cyber security frameworks (NIST CSF, ISO 27001, CIS)
• Experience in risk management, control design, and audit support
• Ability to translate technical risks into business impact
• Strong stakeholder management across technical and non-technical audiences
• Structured, pragmatic, and delivery-focused mindset
• Experience operating in a federated or multi-entity organization
• Exposure to third-party risk and regulatory environments
• Familiarity with ServiceNow or similar GRC tooling
• Security certifications (e.g. CISM, CRISC, ISO 27001)

Key Characteristics

For This Role You Should Be/have:

• Pragmatic approach to GRC and willing to learn and adopt
• Problem solver and resolves conflicts.
• Looks for ways to innovate to improve the focus on the customer.
• Motivated and can deal with resistance.
• Coaches others to build on strengths and improve on weakness; listens to and encourages regular honest feedback.
• An inclination to drill into detail and to take corrective action early and decisively.

Individual Competencies

You Are Able To:

• Drive Results - Consistently achieving objectives, even under tough circumstances, pushing self and others to accomplish goals
• Have Courage - Stepping up to address difficult issues, saying what needs to be said.
• Cultivate Innovation - Creating new and better ways for the organisation to be successful
• Collaborate - Building partnerships and working collaboratively with others to meet shared objectives

Experience / Education

• 3-5 years’ experience in Information/IT security
• Good to have certifications like CISM/CISSP/CRISC/GRCP/ISO27001 lead implementor
• Fluency in both speaking and writing English.

Additional Information

• Number of Managed Users: 33k+
• Geographies Supported: 20+ Countries
• Headcount within the IT Operations team: 60+
• Headcount across European IT teams: 450+

What CRH Offers You

• A culture that values opportunity for growth, development, and internal promotion
• Highly competitive salary package
• Comprehensive secondary benefits
• Significant contribution to your pension plan
• Health and wellness programs, including an on-site gym and fitness classes
• Excellent opportunities to develop and progress with a global organization

Connect your future to CRH

We are curious to learn more about you. At CRH, we believe our mutual differences contribute to the healthy, productive, and enjoyable workspace we create. Please introduce yourself and send us your application. Following a positive review of your application, you will be invited to an introductory call with one of our Recruiters.

Is this role not for you, but do you know someone who would love to join the team? Please let us know!

CRH finds it important that vacancies are shared to individuals that may find them interesting and/or could be suitable for the role

Please contact our recruitment team at careers@crh.com.

CRH is an equal opportunity employer. We are committed to creating an inclusive work environment for all employees and actively encourage applications from all sectors of the community.

Benefits/perks listed above may vary depending on the nature of the employment with CRH and the country where you work.

Please note that we cannot accept any applications submitted through email for GDPR purposes. Candidates must apply through our job portal.

We do not accept candidate introductions for this position from recruitment agencies, unless you have been instructed to do so by our recruitment team.