Crh

5 days ago

Governance, Risk, & Framework Analyst (Atlanta, GA, US, 30338)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 14 hours agoStatus: Live

Job Summary

Contribute to the Group Information Security team by driving strategy and multi-year cyber risk reduction programs. Standardize, track, and measure information security metrics across 150+ entities, working with Group, divisional, and OpCo teams to ensure policy and best-practice adherence. Support third-party due diligence, third-party and supplier risk assessment, IEC/ISO 27001 alignment, and cyber control execution aligned to FRC and SOX, including audit findings remediation.

Location: Atlanta

Workplace: Hybrid

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Mid level

Key Responsibilities

•Develop, implement, and continuously enhance global cyber risk assessment processes across 150+ entities with consistent reporting, oversight, and governance.
•Develop and roll out information security standards and best practices to enable local IT teams to meet minimum security requirements.
•Design and deploy the Group’s third-party due diligence assessment process.
•Collaborate with Group, Divisional, and OpCo teams to identify, assess, mitigate, and monitor supplier related risks.
•Align with Financial Regulatory Controls (FRC) and Sarbanes Oxley (SOX) reporting requirements by developing and supporting execution of entity-level cyber controls, including incident reporting and security awareness.

Pay and Benefits

Perks:Health InsuranceDentalDisabilityWellness Stipend

Key Requirements

•3+ years’ experience in cybersecurity governance and risk management, compliance/assurance, or IT security operations within large global organizations.
•Third level qualification (or equivalent) in Information Technology, Information Security, Engineering, or related discipline.
•Preferred professional security certifications such as CISSP, CISM, GCIH, GIAC (SANS), or equivalent (or actively working toward them).
•Experience developing, implementing, and supporting risk management and assurance frameworks (e.g., NIST CSF, IEC/ISO 27001).
•Strong analytical, reporting, and problem-solving skills, including stakeholder engagement and clear communication to both technical and non-technical audiences.

Experience:3+ yearsGlobal organizationsCybersecurity governanceRisk managementGRCIT security operations

Education:

Skills:TeamworkCollaborationStakeholder engagementCommunicationProblem-solving

Certifications:CISSPCISMGCIHGIAC (SANS)

Tech Stack:IEC/ISO 27001NIST CSFGRC platformsRSA ArcherEDiscoverySarbanes OxleySOXFinancial Regulatory ControlsFRC

Company Brief

Crh

Global building materials business supplying aggregates, cement, asphalt, ready-mixed concrete, and construction products and services to the construction industry across Europe, North America and other markets.

Industry: Building Materials

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Dublin, Ireland

Founded: 1970

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Crh