IT Compliance Analyst

IT Compliance Analyst

CRH's Americas Materials division is the leading integrated supplier of aggregates, asphalt, ready mixed concrete and paving and construction services in North America. Our operations span North America with over 29,000 employees at close to 1,660 locations in 45 US States and 2 Canadian provinces.

The IT Compliance Analyst plays a critical role in supporting the ITGC SOX compliance program by partnering across the IT organization to strengthen the control environment and drive continuous improvement. This position is responsible for overseeing the day-to-day execution of SOX-related activities within the IT application environment, leading ITGC improvement initiatives, and tracking compliance performance against established strategies. The role also provides recommendations to enhance compliance effectiveness and collaborates with process owners to develop and deliver regular compliance reporting and training materials.

Additional responsibilities may be assigned as needed.

• Support the ITGC SOX compliance program by helping maintain the internal control framework for IT general controls.
• Review and assess IT controls across the business and partner with local management to address control gaps, mitigate risk, and strengthen the control environment.
• Partner with the IT team, auditors, management, and testing groups to address audit risk, strengthen controls, and improve testing efficiency.
• Promote best practices in internal controls, fraud prevention, risk mitigation, and governance.
• Partner with IT control owners to ensure timely completion of periodic controls and compliance activities.
• Provide guidance, training, and support for the implementation of IT SOX policies and procedures across the IT organization.
• Implement ITGC controls for critical applications in alignment with the company's ITGC strategy.
• Maintain SOX process documentation, including detailed control descriptions and supporting evidence within our audit tool SOFY.
• Utilize audit tool software to develop an internal dashboard and identify action items from dashboard reports.
• Contribute to the development of team capabilities and professional growth.

Education/

Experience:

• BA/BS in IT, Audit or Business Administration
• 3+ years relevant work experience specific to Risk Management/Security/ITGC Controls or similar
• Certified Information Systems Auditor ("CISA") preferred.

Data Protection/Data Loss Prevention Experience preferred. Process automation experience preferred Experience and knowledge of SAP preferred. Experience and knowledge of GRC tools and systems preferred.

Work Requirements:

• Must be 18 years in age or older.
• Must pass pre-employment drug screen and criminal background check.
• Strict adherence to safety requirements and procedures as outlined in the Employee Handbook.
• Willingness to work independently within in a team environment and assist the team with other duties as required.
• Must have expert proficiency in Microsoft Word, Excel, PowerPoint, and Outlook

Knowledge/Skill Requirements:

• Demonstrated track record of detailed knowledge of risk, governance and internal controls requirements
• Ability to communicate observations and other feedback in an open, collaborative, honest and constructive manner
• Ability to interact effectively with staff at all levels and from all cultural backgrounds
• Solid business acumen, risk and analytical skills
• Requisite technical knowledge of IT general controls
• Familiarity with GAAP a plus
• Ability to lead and drive change while bringing all key stakeholders on the journey
• Excellent time management and organizational skills
• Detail oriented but able to understand the big picture
• Ability to operate when requirements are not clear and manage dynamic changes to environments
• Critical strategic thinking capabilities, viewed as a subject matter expert (SME).
• Must be highly motivated and demonstrate ability to complete assignments in a timely manner
• Ability to work independently with minimal supervision and manage activities with cross-functional business stakeholders, including Security and Internal/External Audit.
• Ability to handle confidential and sensitive…