Cyber GRC Analyst- CRH International

Reference: bab4mq9k60hkz2dxlhx1

We are seeking a Cyber Governance, Risk and Compliance (GRC) Analyst to support the development, operation and continuous improvement of cyber security governance and risk management practices across a complex, international environment. This role will help ensure that information security controls, policies and processes remain effective, proportionate and aligned with business objectives, regulatory obligations and recognised industry standards.

Key responsibilities will include maintaining cyber security policies, standards, procedures and control frameworks; supporting risk assessments, control testing and remediation tracking; and preparing clear reports for stakeholders and governance forums. You will help coordinate internal and external audits, monitor compliance with relevant legislation and standards, and maintain accurate evidence and documentation. The role will also involve assisting with third-party and supply-chain security assessments, reviewing security exceptions, supporting incident and issue management, and identifying opportunities to strengthen the organisation’s overall security posture. You will work closely with technology, legal, procurement, privacy, internal audit and business teams to promote consistent and practical risk management.

The successful candidate will have experience in cyber security governance, risk, compliance, audit or a closely related discipline, ideally within a large or geographically distributed organisation. You should have a sound understanding of frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, COBIT or CIS Controls, together with knowledge of risk assessment methodologies, security control principles and data protection requirements. Relevant professional qualifications, such as CISA, CRISC, CISSP, CISM or ISO 27001 certification, would be advantageous. Strong analytical, organisational and communication skills are essential, as is the ability to explain technical and regulatory matters clearly to varied audiences. A proactive, collaborative approach and the confidence to challenge constructively will be highly valued.

COMPETITIVE SALARY
Added 20/10/2026
Reference: bab4mq9k60hkz2dxlhx1

Cyber GRC Analyst- CRH International

Birmingham, England, United Kingdom Permanent Security Analyst

Other similar jobs

Cyber GRC Analyst- CRH International

Added 20/10/2026

We are seeking a Cyber Governance, Risk and Compliance (GRC) Analyst to support the development, implementation and continuous improvement of cyber security governance across a complex, international environment. This role will help ensure that information security practices align with business objectives, regulatory obligations and recognised industry standards. You will work collaboratively with technology, risk, audit, legal and operational stakeholders to strengthen the organisation’s cyber resilience and risk management capability. Key responsibilities will include maintaining cyber security policies, standards, procedures and control frameworks; supporting regular cyber risk assessments and documenting risks, controls, treatment plans and remediation activity; and preparing clear reports,...

Learn more

Data Protection Consultant (UK GDPR, EU GDPR and International Data Transfers)

Added 19/10/2026

We are seeking an experienced Data Protection Consultant to provide practical, commercially focused advice on UK GDPR, EU GDPR and international data protection requirements. You will support organisations in managing privacy risk, strengthening governance and meeting their legal and regulatory obligations across a range of projects and business activities. Your responsibilities will include advising on data protection impact assessments, records of processing activities, data-sharing arrangements, privacy notices, retention schedules and data subject rights requests. You will assess and advise on international data transfers, including the use of appropriate safeguards, transfer risk assessments and relevant contractual measures. You will also support...

Learn more

International Chief Information Security Officer, Managing Director

Added 02/09/2026

We are seeking an accomplished International Chief Information Security Officer, Managing Director to lead the global information security strategy of a complex, highly regulated organisation. This senior executive will provide strategic direction, independent oversight and visible leadership across cybersecurity, technology risk, resilience and information protection. The successful candidate will work closely with executive leadership and regional stakeholders to strengthen security capabilities, protect critical information assets and support sustainable business growth. Key responsibilities will include developing and executing a forward-looking global security strategy aligned with business objectives and regulatory expectations; overseeing security governance, policies, standards, controls and risk management frameworks; and...

Learn more

International Chief Information Security Officer , Managing Director

Added 25/08/2026

We are seeking an accomplished International Chief Information Security Officer and Managing Director to lead global information security strategy, governance, and operational resilience across a complex, internationally distributed organisation. This senior executive will define and implement a forward-looking security programme aligned with business objectives, regulatory requirements, and evolving cyber threats. The role will provide authoritative leadership on cyber risk, information protection, technology resilience, and crisis preparedness while serving as a trusted adviser to executive leadership and relevant governance committees. Key responsibilities will include establishing global security policies, standards, controls, and performance measures; overseeing cyber defence, security architecture, identity and access...

Learn more

International Chief Information Security Officer, Managing Director

Added 25/08/2026

We are seeking an experienced International Chief Information Security Officer, Managing Director to lead the development and execution of a global information security strategy across a complex, highly regulated environment. This senior executive will provide strategic direction, independent oversight and strong leadership across cybersecurity, technology risk, information governance, resilience and data protection. The role will serve as a trusted adviser to executive leadership and senior stakeholders, ensuring that security considerations are embedded into business strategy, operational delivery and transformation programmes. Key responsibilities will include defining and maintaining the enterprise information security framework, policies, standards and control environment; overseeing cyber risk...

Learn more

Information Security Analyst – GRC & Risk

Added 20/10/2026

We are seeking an Information Security Analyst – GRC & Risk to support the development, implementation and continuous improvement of effective information security governance, risk and compliance practices. This role will help protect information assets, strengthen organisational resilience and ensure that security activities align with applicable regulations, industry standards and business objectives. You will work closely with technology, legal, compliance, audit and operational teams, providing clear, practical advice on information security risks and controls. Key responsibilities will include maintaining security policies, standards, procedures and risk registers; conducting information security and third-party risk assessments; supporting the identification, evaluation and treatment of...

Learn more

IT GRC Analyst

Added 20/10/2026

We are seeking an IT GRC Analyst to support the effective management of information technology governance, risk and compliance activities. This role will help ensure that technology processes, systems and controls are aligned with internal policies, regulatory obligations and recognised industry frameworks. You will work closely with colleagues across technology, security, audit, legal and business functions to identify risks, strengthen controls and promote a consistent approach to governance. Key responsibilities will include maintaining IT policies, standards, procedures and control documentation; supporting risk assessments and tracking remediation actions; coordinating evidence collection for internal and external audits; and monitoring compliance with applicable...

Learn more

Senior GRC Analyst

Added 16/10/2026

We are seeking an experienced Senior GRC Analyst to support the continued development and operation of a robust governance, risk and compliance framework. This is an excellent opportunity for a risk professional who can combine strong analytical capability with practical experience of information security, technology risk and regulatory compliance. You will work with stakeholders across the organisation to identify and assess risks, strengthen controls and promote a culture of continuous improvement. Key responsibilities will include maintaining risk registers, conducting control assessments and coordinating remediation activity across agreed timescales. You will support internal and external audits, prepare clear management information and...

Learn more

Technology GRC Analyst

Added 16/10/2026

We are seeking a Technology GRC Analyst to support the development, maintenance and continuous improvement of technology governance, risk and compliance practices. This role will work closely with technology, information security, privacy, audit and business stakeholders to help ensure that systems, processes and controls meet applicable regulatory, contractual and internal requirements. Key responsibilities will include maintaining technology policies, standards, procedures and control frameworks; coordinating risk and control assessments; supporting the identification, evaluation and treatment of technology and cyber risks; and monitoring remediation activity to ensure actions are completed within agreed timescales. You will assist with internal and external audits, provide...

Learn more

Senior GRC Analyst

Added 15/10/2026

We are seeking an experienced Senior GRC Analyst to strengthen governance, risk and compliance activities across a complex and evolving technology environment. This role will support the development, implementation and continuous improvement of security and risk management frameworks, ensuring that policies, controls and operational practices remain aligned with business objectives, regulatory expectations and recognised industry standards. Key responsibilities will include maintaining risk and control registers, conducting control assessments, coordinating remediation activity and preparing clear reports for senior stakeholders. You will support internal and external audits, manage evidence collection, track issues through to resolution and contribute to the design and review...

Learn more

GRC Analyst

Added 15/10/2026

We are seeking a GRC Analyst to support the development, implementation and continuous improvement of governance, risk and compliance practices across the organisation. This role will help ensure that business activities, information systems and operational processes align with relevant legislation, regulatory expectations, industry standards and internal policies. You will work with stakeholders across technology, operations, security, legal and audit functions to identify risks, monitor controls and promote a consistent approach to managing compliance. Your responsibilities will include maintaining risk and control registers, coordinating risk assessments, documenting processes and controls, and supporting the review and updating of policies, standards and procedures....

Learn more

Information Security GRC Analyst

Added 14/10/2026

We are seeking an Information Security GRC Analyst to support the development, maintenance, and continuous improvement of information security governance, risk, and compliance activities. The role will help ensure that security policies, controls, and processes remain aligned with regulatory obligations, industry standards, and business objectives. You will work with stakeholders across technology, operations, privacy, legal, and risk functions to promote a consistent and practical approach to managing information security risk. Key responsibilities include maintaining security policies, standards, procedures, and control documentation; coordinating risk assessments, control testing, and remediation tracking; supporting internal and external audits; and preparing clear reports, dashboards, and...

Learn more

Information Security Analyst (GRC)

Added 09/10/2026

We are seeking an Information Security Analyst (GRC) to support the development, maintenance and continuous improvement of information security governance, risk and compliance activities. This role will help ensure that security practices align with applicable laws, regulations, industry standards and organisational policies. You will work with stakeholders across technology, operations and business functions to identify risks, assess controls and promote a consistent approach to information security. Key responsibilities include maintaining security policies, standards, procedures and control frameworks; coordinating risk assessments and supporting the documentation of risk treatment plans; monitoring compliance with internal requirements and external obligations; and assisting with internal...

Learn more

Information Security (GRC) Analyst

Added 07/10/2026

We are seeking an Information Security (GRC) Analyst to support the development, operation and continuous improvement of information security governance, risk and compliance activities. Working with teams across the business, you will help ensure that security controls, policies and processes are appropriately designed, implemented, documented and monitored. This is an opportunity to contribute to a maturing security function and help strengthen the organisation’s ability to manage information and technology risks effectively. Your responsibilities will include maintaining information security policies, standards, procedures and control frameworks; supporting risk assessments, control testing and remediation tracking; and preparing clear reports on security risks, control...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.