> Markdown version of [/jobs/ext/4012049-it-grc-security-analyst](https://www.wearedevelopers.com/jobs/ext/4012049-it-grc-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT GRC Security Analyst - **Company:** MYR Group Inc. - **Location:** Thornton, CO, United States - **Experience:** Experienced - **Salary:** $85,000.0 - $105,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Data Analysis, Microsoft Azure, Cloud Computing, Cyber Security, Databases, Identity and Access Management, IT Management, Microsoft Networking, Cloud Services, Software Vulnerability Management, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, CIS Benchmarks - **Published:** October 29, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/88739268/1 ## About the Role * Minimum 2 - 4 years of experience in information technology, cybersecurity, compliance, system administration, networking, cloud technologies, or related technical discipline * Experience with Microsoft 365, Entra ID, Azure, Windows networking or cloud technologies * Exposure to cybersecurity programs, audits, risk assessments, vulnerability management, or compliance initiatives * Experience gathering and analyzing technical information and working with cross-functional technical teams is preferred Preferred Education * Bachelor's degree in Computer Science, Information Technology, or related field; combination of relevant education and experience considered in lieu of degree * Relevant certifications such as Security+, Network+, Azure Fundamentals, SC-900, ISC2 CC, CISSP, CISM, or similar are advantageous but not required Knowledge/Skills/Abilities * Critical thinking and information analysis skills * Broad understanding of information technology concepts including networking, operating systems, cloud platforms, identity and access management, endpoint management, databases, and applications * Effective communication skills with both technical and non-technical audiences * Ability to work independently while collaborating effectively within a team environment * Strong organizational and documentation skills * Foundational understanding of any various cybersecurity frameworks such as NIST CSF, NIST 800-53, NIST 800-171, CIS Controls, ISO 27001, or similar are helpful but not required * Curiosity and willingness to explore technical environments to understand how systems operate ## Description The IT GRC Security Analyst serves as an individual contributor within the IT Governance, Risk & Compliance (GRC) team. The role combines cybersecurity, technology, and compliance disciplines to support the organization's security program through assessments, technical analysis, implementation support, documentation, and continuous improvement initiatives., * Analyze existing and new technologies, cloud services and business solutions to understand associated security and compliance considerations * Perform risk analysis on new and existing services requested for use within the Company oriented to various frameworks (NIST 800-171, CIS, Customer-specific or other) * Evaluate and summarize the technical operation of systems and communicate any identified cyber risk * Respond to requests for security compliance by business Customers * Evaluate documentation for validity, applicability and credibility of supplied information * Support implementation of security initiatives by communicating with and coordinating between technical teams and/or business stakeholders * Stay current with emerging cybersecurity threats, technologies, regulatory requirements, and industry best practices * Regular and predictable attendance * Other duties as assigned * Essential Functions of this position are to be performed at a Company-designated office or field location * Understand and comply with the Company's Code of Business Conduct and Ethics Policy and other industry-specific professional and ethical standards, MYR Group, Inc. and our subsidiaries do not work with any third-party recruiters or agencies without a valid signed agreement and partnership with the Corporate Talent Acquisition Team.