Cyber GRC Analyst- CRH International

CRH plc; Dublin; Ibrido; EUR 70.000 - 90.000; Tempo pieno

Descrizione del lavoro

CRH plc is hiring a Cyber GRC Analyst to help govern risk and compliance across CRH International. In a hybrid environment you will translate security requirements into practical controls for both central platforms (UnITy) and OpCos, supporting audits and regulatory alignment.

You'll work with stakeholders across technical and non-technical teams, maintain risk registers, and ensure consistent security standards while balancing global governance with local implementation across multi-country

Competenze

• Strong understanding of cyber security frameworks (NIST CSF, ISO 27001, CIS).
• Experience in risk management, control design, and audit support.
• Ability to translate technical risks into business impact.
• Strong stakeholder management across technical and non-technical audiences.
• Structured, pragmatic, and delivery-focused mindset.
• Experience operating in a federated or multi-entity organization.
• Exposure to third-party risk and regulatory environments.
• Familiarity with ServiceNow or similar GRC tooling.
• Security certifications (e.g. CISM, CRISC, ISO 27001).

Mansioni

• Develop and maintain cyber security policies, standards, and control frameworks, ensuring alignment with CRH Group requirements and applicability across both central platforms (UnITy) and OpCo-managed environments.
• Drive consistent adoption of security standards across central technology services and OpCos, balancing global governance with local implementation models.
• Provide risk-based guidance across both centrally delivered services and decentralised OpCo environments (e.g. IAM, network, endpoint, vulnerability management).
• Perform and support cyber risk assessments across UnITy platforms and OpCos, maintaining risk registers and tracking remediation to reduce enterprise risk exposure.
• Coordinate and support compliance and assurance activities, acting as a central interface between UnITy service teams, OpCos, and auditors.
• Support the delivery of the CRH International cyber programme, ensuring alignment between central technology initiatives and OpCo execution.
• Interpret and translate regulatory, legal, and contractual requirements into scalable and consistent controls applicable across both central and local operating models.
• Support third-party and supply chain risk management across both centrally managed services and OpCo suppliers, ensuring consistent security expectations and remediation tracking.

Conoscenze

NIST CSF

ISO 27001

CIS

Risk management

Control design

Audit support

Business impact translation

Stakeholder management

Federated organization

GRC tooling

Strumenti

ServiceNow

Descrizione del lavoro

Country: Netherlands
Req ID: 527327
Job Type: Full Time
Workplace Type: Hybrid
Seniority Level: Associate

About CRH

We are CRH, and we are committed to contributing to a more resilient and sustainable built environment. We understand the wider impact our businesses can make in supporting human activity. We continue to do this through the delivery of unique, superior building materials and products for use in road and critical utility infrastructure, commercial building projects and outdoor living solutions.
CRH (NYSE: CRH) is the leading provider of building materials solutions that build, connect and improve our world. Employing c.83,000 people at c.4,000 operating locations in 28 countries, CRH has market leadership positions in both North America and Europe. As the essential partner for transportation and critical utility infrastructure projects, complex non-residential construction and outdoor living solutions, CRH’s unique offering of materials, products and value-added services helps to deliver a more resilient and sustainable built environment. The company is ranked among sector leaders by Environmental, Social and Governance (ESG) rating agencies. A Fortune 500 company, CRH’s shares are listed on the NYSE and LSE.
Without you noticing our products, we are everywhere you live, work, and relax.
Our project portfolio includes some of the most sustainable and cutting-edge building projects around the world. Think of the asphalt on the Silverstone Grand Prix Circuit, the Paris Metro Rail project, but also the Louis Vuitton Museum in Paris, parts of the Burj Khalifa, and the Kennedy Space Centre.
Learn more about us through the following Link.

Position Overview

The Cyber GRC Analyst supports the delivery of cyber security governance, risk, and compliance across CRH International, operating within a hybrid technology model spanning centrally delivered platforms (UnITy) and independent Operating Companies (OpCos).
Reporting to the Senior GRC Manager, the role is responsible for translating security requirements into practical, risk-based controls and driving their consistent adoption across both central services and decentralised environments. The position acts as a key link between Group Information Security, central platform teams and OpCos, ensuring that security standards, risk management practices, and compliance requirements are effectively implemented and embedded across the organisation.
This role plays a critical part in reducing cyber risk at scale, enabling a consistent security posture while respecting the operational realities of a federated, multi-country business.

Key Tasks And Responsibilities

• Develop and maintain cyber security policies, standards, and control frameworks, ensuring alignment with CRH Group requirements and applicability across both central platforms (UnITy) and OpCo-managed environments.
• Drive consistent adoption of security standards across central technology services and OpCos, balancing global governance with local implementation models.
• Provide risk-based guidance across both centrally delivered services and decentralised OpCo environments (e.g. IAM, network, endpoint, vulnerability management).
• Perform and support cyber risk assessments across UnITy platforms and OpCos, maintaining risk registers and tracking remediation to reduce enterprise risk exposure.
• Coordinate and support compliance and assurance activities, acting as a central interface between UnITy service teams, OpCos, and auditors.
• Support the delivery of the CRH International cyber programme, ensuring alignment between central technology initiatives and OpCo execution.
• Interpret and translate regulatory, legal, and contractual requirements into scalable and consistent controls applicable across both central and local operating models.
• Support third-party and supply chain risk management across both centrally managed services and OpCo suppliers, ensuring consistent security expectations and remediation tracking.

Key Functional Competencies

• Strong understanding of cyber security frameworks (NIST CSF, ISO 27001, CIS)
• Experience in risk management, control design, and audit support
• Ability to translate technical risks into business impact
• Strong stakeholder management across technical and non-technical audiences
• Structured, pragmatic, and delivery-focused mindset
• Experience operating in a federated or multi-entity organization
• Exposure to third-party risk and regulatory environments
• Familiarity with ServiceNow or similar GRC tooling
• Security certifications (e.g. CISM, CRISC, ISO 27001)

You Possess The Following

• Strong understanding of cyber security frameworks (NIST CSF, ISO 27001, CIS)
• Experience in risk management, control design, and audit support
• Ability to translate technical risks into business impact
• Strong stakeholder management across technical and non-technical audiences
• Structured, pragmatic, and delivery-focused mindset
• Experience operating in a federated or multi-entity organization
• Exposure to third-party risk and regulatory environments
• Familiarity with ServiceNow or similar GRC tooling
• Security certifications (e.g. CISM, CRISC, ISO 27001)

Key Characteristics

• Pragmatic approach to GRC and willing to learn and adopt
• Problem solver and resolves conflicts.
• Looks for ways to innovate to improve the focus on the customer.
• Motivated and can deal with resistance.
• Coaches others to build on strengths and improve on weakness; listens to and encourages regular honest feedback.
• An inclination to drill into detail and to take corrective action early and decisively.

For This Role You Should Be/have

• Pragmatic approach to GRC and willing to learn and adopt
• Problem solver and resolves conflicts.
• Looks for ways to innovate to improve the focus on the customer.
• Motivated and can deal with resistance.
• Coaches others to build on strengths and improve on weakness; listens to and encourages regular honest feedback.
• An inclination to drill into detail and to take corrective action early and decisively.

Individual Competencies

• Drive Results - Consistently achieving objectives, even under tough circumstances, pushing self and others to accomplish goals
• Have Courage - Stepping up to address difficult issues, saying what needs