Hybrid Cyber GRC Analyst – Risk & Compliance

CRH plc; Dublin; Hybrid; EUR 70,000 - 90,000; Full time

Job summary

CRH plc is hiring a Cyber GRC Analyst to help govern risk and compliance across CRH International. In a hybrid environment you will translate security requirements into practical controls for both central platforms (UnITy) and OpCos, supporting audits and regulatory alignment.

You'll work with stakeholders across technical and non-technical teams, maintain risk registers, and ensure consistent security standards while balancing global governance with local implementation across multi-country

Qualifications

• Strong understanding of cyber security frameworks (NIST CSF, ISO 27001, CIS).
• Experience in risk management, control design, and audit support.
• Ability to translate technical risks into business impact.
• Strong stakeholder management across technical and non-technical audiences.
• Structured, pragmatic, and delivery-focused mindset.
• Experience operating in a federated or multi-entity organization.
• Exposure to third-party risk and regulatory environments.
• Familiarity with ServiceNow or similar GRC tooling.
• Security certifications (e.g. CISM, CRISC, ISO 27001).

Responsibilities

• Develop and maintain cyber security policies, standards, and control frameworks, ensuring alignment with CRH Group requirements and applicability across both central platforms (UnITy) and OpCo-managed environments.
• Drive consistent adoption of security standards across central technology services and OpCos, balancing global governance with local implementation models.
• Provide risk-based guidance across both centrally delivered services and decentralised OpCo environments (e.g. IAM, network, endpoint, vulnerability management).
• Perform and support cyber risk assessments across UnITy platforms and OpCos, maintaining risk registers and tracking remediation to reduce enterprise risk exposure.
• Coordinate and support compliance and assurance activities, acting as a central interface between UnITy service teams, OpCos, and auditors.
• Support the delivery of the CRH International cyber programme, ensuring alignment between central technology initiatives and OpCo execution.
• Interpret and translate regulatory, legal, and contractual requirements into scalable and consistent controls applicable across both central and local operating models.
• Support third-party and supply chain risk management across both centrally managed services and OpCo suppliers, ensuring consistent security expectations and remediation tracking.

Skills

NIST CSF

ISO 27001

CIS

Risk management

Control design

Audit support

Business impact translation

Stakeholder management

Federated organization

GRC tooling

Tools

ServiceNow

Job description

CRH plc is hiring a Cyber GRC Analyst to help govern risk and compliance across CRH International. In a hybrid environment you will translate security requirements into practical controls for both central platforms (UnITy) and OpCos, supporting audits and regulatory alignment.

You'll work with stakeholders across technical and non-technical teams, maintain risk registers, and ensure consistent security standards while balancing global governance with local implementation across multi-country