Cyber GRC Analyst

Country: [[filter13]]
Req ID: [[id]]
Job Type: [[filter10]]
Workplace Type: [[onsite_hybrid_remote]]
Seniority Level: [[cust_seniority_level]]
About CRH
We are CRH, and we are committed to contributing to a more resilient and sustainable built environment. We understand the wider impact our businesses can make in supporting human activity. We continue to do this through the delivery of unique, superior building materials and products for use in road and critical utility infrastructure, commercial building projects and outdoor living solutions.
CRH (NYSE: CRH) is the leading provider of building materials solutions that build, connect and improve our world. Employing c.83,000 people at c.4,000 operating locations in 28 countries, CRH has market leadership positions in both North America and Europe. As the essential partner for transportation and critical utility infrastructure projects, complex non-residential construction and outdoor living solutions, CRH’s unique offering of materials, products and value-added services helps to deliver a more resilient and sustainable built environment. The company is ranked among sector leaders by Environmental, Social and Governance (ESG) rating agencies. A Fortune 500 company, CRH’s shares are listed on the NYSE and LSE.
Without you noticing our products, we are everywhere you live, work, and relax.
Our project portfolio includes some of the most sustainable and cutting-edge building projects around the world. Think of the asphalt on the Silverstone Grand Prix Circuit, the Paris Metro Rail project, but also the Louis Vuitton Museum in Paris, parts of the Burj Khalifa, and the Kennedy Space Centre.
Learn more about us through the following Link.
Position Overview
The Cyber GRC Analyst supports the delivery of cyber security governance, risk, and compliance across CRH International, operating within a hybrid technology model spanning centrally delivered platforms (UnITy) and independent Operating Companies (OpCos).
Reporting to the Senior GRC Manager, the role is responsible for translating security requirements into practical, risk-based controls and driving their consistent adoption across both central services and decentralised environments. The position acts as a key link between Group Information Security, central platform teams and OpCos, ensuring that security standards, risk management practices, and compliance requirements are effectively implemented and embedded across the organisation.
This role plays a critical part in reducing cyber risk at scale, enabling a consistent security posture while respecting the operational realities of a federated, multi-country business.
Key Tasks and Responsibilities
In this role, you will:
• Develop and maintain cyber security policies, standards, and control frameworks, ensuring alignment with CRH Group requirements and applicability across both central platforms (UnITy) and OpCo-managed environments.
• Drive consistent adoption of security standards across central technology services and OpCos, balancing global governance with local implementation models.
• Provide risk-based guidance across both centrally delivered services and decentralised OpCo environments (e.g. IAM, network, endpoint, vulnerability management).
• Perform and support cyber risk assessments across UnITy platforms and OpCos, maintaining risk registers and tracking remediation to reduce enterprise risk exposure.
• Coordinate and support compliance and assurance activities, acting as a central interface between UnITy service teams, OpCos, and auditors.
• Support the delivery of the CRH International cyber programme, ensuring alignment between central technology initiatives and OpCo execution.
• Interpret and translate regulatory, legal, and contractual requirements into scalable and consistent controls applicable across both central and local operating models.
• Support third-party and supply chain risk management across both centrally managed services and OpCo suppliers, ensuring consistent security expectations and remediation tracking.
Key Functional Competencies
You possess the following:
• Strong understanding of cyber security frameworks (NIST CSF, ISO 27001, CIS)
• Experience in risk management, control design, and audit support
• Ability to translate technical risks into business impact
• Strong stakeholder management across technical and non-technical audiences
• Structured, pragmatic, and delivery-focused mindset
• Experience operating in a federated or multi-entity organization
• Exposure to third-party risk and regulatory environments
• Familiarity with ServiceNow or similar GRC tooling
• Security certifications (e.g. CISM, CRISC, ISO 27001)

Employment type
Full Time