IT GRC Security Analyst

The IT GRC Security Analyst serves as an individual contributor within the IT Governance, Risk & Compliance (GRC) team. The role combines cybersecurity, technology, and compliance disciplines to support the organization's security program through assessments, technical analysis, implementation support, documentation, and continuous improvement initiatives.

With roots dating to 1891 and 8,500+ employees, MYR Group Inc. (MYR Group) is a publicly traded holding company of specialty electrical construction companies. MYR Group subsidiaries work on large-scale electrical construction projects throughout the U.S. and Canada. We contribute to a clean energy future while fostering a safe, supportive, and inclusive work environment. Our culture is built on shared values and mutual respect, where teamwork and collaboration occur naturally.

Throughout our rich history, we have partnered with utilities, municipalities, commercial clients, and developers to deliver some of the largest and most complex projects, including new construction, upgrades, maintenance and repair for transmission, distribution and substation facilities, commercial and industrial electrical construction, emergency and storm restoration, clean energy, pre-construction services, and engineer-procure-construct (EPC) methods of project delivery.

• Analyze existing and new technologies, cloud services and business solutions to understand associated security and compliance considerations
• Perform risk analysis on new and existing services requested for use within the Company oriented to various frameworks (NIST 800-171, CIS, Customer-specific or other)
• Evaluate and summarize the technical operation of systems and communicate any identified cyber risk
• Respond to requests for security compliance by business Customers
• Evaluate documentation for validity, applicability and credibility of supplied information
• Support implementation of security initiatives by communicating with and coordinating between technical teams and/or business stakeholders
• Stay current with emerging cybersecurity threats, technologies, regulatory requirements, and industry best practices
• Regular and predictable attendance
• Other duties as assigned
• Essential Functions of this position are to be performed at a Company-designated office or field location
• Understand and comply with the Company's Code of Business Conduct and Ethics Policy and other industry-specific professional and ethical standards

• Minimum 2 - 4 years of experience in information technology, cybersecurity, compliance, system administration, networking, cloud technologies, or related technical discipline
• Experience with Microsoft 365, Entra , Azure, Windows networking or cloud technologies
• Exposure to cybersecurity programs, audits, risk assessments, vulnerability management, or compliance initiatives
• Experience gathering and analyzing technical information and working with cross-functional technical teams is preferred

• Bachelor's degree in Computer Science, Information Technology, or related field; combination of relevant education and experience considered in lieu of degree
• Relevant certifications such as Security+, Network+, Azure Fundamentals, SC-900, ISC2 CC, CISSP, CISM, or similar are advantageous but not required

• Critical thinking and information analysis skills
• Broad understanding of information technology concepts including networking, operating systems, cloud platforms, identity and access management, endpoint management, databases, and applications
• Effective communication skills with both technical and non-technical audiences
• Ability to work independently while collaborating effectively within…