Manager, IT Risk & Internal Controls and Compliance

 

 

 

Job ID:  516873

CRH's Americas Materials division is the leading integrated supplier of aggregates, asphalt, ready mixed concrete and paving and construction services in North America. Our operations span North America with over 29,000 employees at close to 1,660 locations in 45 US States and 2 Canadian provinces.

 

Position Overview

CRH Americas Materials is currently recruiting for the position of Manager, IT Risk & Internal Controls and Compliance based in Atlanta, GA. The successful candidate will have a deep understanding of IT security frameworks, risk management and compliance standards and will work collaboratively with cross-functional teams to ensure alignment with business objectives and regulatory requirements. As a Manager, IT Risk & Internal Controls and Compliance, in the Financial Risks Controls and Compliance organization you will be responsible for developing/managing policies, leading risk assessments, overseeing audits, and drive the effectiveness of IT and security controls in line with company’s standards. You will also provide subject matter expertise and technical guidance to technology – aligned process owners, ensuring that the implemented controls are operating effectively and in compliance with regulatory, legal and industry standards.  

This includes but is not limited to:

• Support the Compliance function for ongoing SAP transformation and managing the SAP GRC platform
• Working collaboratively across the business and project teams to ensure a robust control environment is adopted.

 

Key Responsibilities (Essential Duties and Functions)

The key responsibilities described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

 Risk Management, Internal Control and SOX Compliance

• Develop and maintain IT security policies and procedures to ensure compliance with applicable laws and regulations
• Lead IT risk assessments and maintain the risk register
• Design, implement and maintain a comprehensive IT governance framework that aligns with industry’s best practices (ISO 27001, NIST, COBIT)
• Monitoring compliance with internal policies and external regulations and preparing audits and assessments.
• Assist in evaluating risks and identifying controls for ongoing ERP transformation
• Assist in risk owner responsibilities and evaluating the segregation of duties for access management.
• Monitor emerging risks in IT compliance, including cybersecurity threats that could impact SOX controls.

Stakeholder management, communication and influencing skills

• Ensure clear, timely and efficient communication channels exist to provide status updates, identify, and resolve issues and report on any other matters as needed
• Build relationships with key internal stakeholders and promote the function of a trusted partner

Change and transformation 

• Identify opportunities to make the compliance process more effective and efficient through data analytics and continuous monitoring
• Apply knowledge of risk and controls best practices to promote transformational activities
• Drive the SOX compliance function to move beyond SOX compliance by adding value across the end-to-end financial reporting controls process
• Engage with relevant external stakeholders to align and optimize work practices

People / Overall Management

• Create a climate where people are motivated to collaborate with Compliance to help achieve the organization’s compliance objectives

 

Qualifications

Education/Experience & Certifications

• 6+ years of relevant experience, including IT SOX, IT audit, or risk management at a public company or Big 4/public accounting firm.
• Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Security Controls (CRISC) or equivalent qualification and other IT risk and controls experience. 
• B