IT GRC Security Analyst

MYR Group•Thornton, CO

About The Position

The IT GRC Security Analyst is an individual contributor on the IT Governance, Risk & Compliance (GRC) team. The role combines cybersecurity, technology, and compliance work to support the organization’s security program through assessments, technical analysis, implementation support, documentation, and continuous improvement initiatives. MYR Group Inc. is a publicly traded holding company of specialty electrical construction companies with roots dating to 1891 and more than 8,500 employees. Its subsidiaries work on large-scale electrical construction projects throughout the United States and Canada, including transmission, distribution, substation, commercial and industrial construction, clean energy, and storm restoration projects. Essential functions are performed at a Company-designated office or field location. The employee is expected to maintain regular and predictable attendance and comply with the Company’s Code of Business Conduct and Ethics Policy and applicable professional and ethical standards.

Requirements

Minimum 2–4 years of experience in information technology, cybersecurity, compliance, system administration, networking, cloud technologies, or a related technical discipline.
Experience with Microsoft 365, Entra ID, Azure, Windows networking, or cloud technologies.
Exposure to cybersecurity programs, audits, risk assessments, vulnerability management, or compliance initiatives.
Critical thinking and information analysis skills.
Broad understanding of IT concepts, including networking, operating systems, cloud platforms, identity and access management, endpoint management, databases, and applications.
Effective communication with technical and non-technical audiences.
Ability to work independently and collaborate effectively within a team.
Strong organizational and documentation skills.
Curiosity and willingness to explore technical environments to understand how systems operate.
Must be currently authorized to work in the United States for any employer; MYR Group does not sponsor work visas.

Nice To Haves

Experience gathering and analyzing technical information and working with cross-functional technical teams.
Bachelor’s degree in Computer Science, Information Technology, or a related field; relevant education and experience may be considered in lieu of a degree.
Relevant certifications such as Security+, Network+, Azure Fundamentals, SC-900, ISC2 CC, CISSP, CISM, or similar.
Foundational understanding of cybersecurity frameworks such as NIST CSF, NIST 800-53, NIST 800-171, CIS Controls, ISO 27001, or similar.

Responsibilities

Analyze existing and new technologies, cloud services, and business solutions to understand security and compliance considerations.
Perform risk analysis on new and existing services requested for use within the Company, using frameworks such as NIST 800-171, CIS, customer-specific frameworks, or others.
Evaluate and summarize the technical operation of systems and communicate identified cyber risks.
Respond to customer requests for security compliance information.
Evaluate supplied documentation for validity, applicability, and credibility.
Support implementation of security initiatives by communicating and coordinating with technical teams and business stakeholders.
Stay current with emerging cybersecurity threats, technologies, regulatory requirements, and industry best practices.
Maintain regular and predictable attendance.
Perform other duties as assigned.
Comply with the Company’s Code of Business Conduct and Ethics Policy and applicable professional and ethical standards.

Benefits

Medical, basic vision, Regenexx, Teledoc, hearing, and mental health coverage, with low deductibles and out-of-pocket maximums; employee or employee-plus-family coverage has a $15 weekly premium.
Dental insurance with 100% employer-paid premium.
ThrivePass Health & Wellness Reimbursement Program providing $1,200 annually for health- and wellbeing-related purchases.
Annual paid time off starting at 15 days, plus 10 paid holidays, including a floating Cultural Celebration Day.
401(k) plan with 100% match up to 6%, immediate vesting, and potential annual profit sharing.
Educational assistance for educational costs, internal training, and more.
Company-paid short- and long-term disability, life, and accidental death and dismemberment insurance.
Company-paid business travel accident insurance.
Employee Assistance Plan (EAP).
Voluntary plans, including supplemental vision, accident and critical illness, identity theft, group legal, group auto and home, and additional voluntary life insurance for employees and dependents.