Senior GRC Analyst

Kokosing ( is one of America's 50 largest General Contractors and services a broad spectrum of clients in both the private and public business sectors. Kokosing's services include heavy civil/industrial construction such as highways, bridges, underground utilities, water/wastewater facilities, and marine construction. For over 75 years, Kokosing has successfully attracted the most qualified technical personnel in the construction industry by offering visible challenges, superior quality, and attractive rewards. With over $2.8 billion in annual sales and a commitment to its workforce, Kokosing is the winning team.

Job Description:

We are looking for a Security Governance, Risk, and Compliance (GRC) Analyst to support and mature our security and compliance programs across a large construction organization. This role focuses on maintaining security policies, strengthening vendor risk management, supporting CMMC Level 2 compliance, and helping build a data governance program.

What You'll Do

• Lead security governance and risk management efforts
• Maintain and improve vendor risk management
• Support CMMC compliance and audits
• Help design and implement a data governance program
• Manage security policies, standards, and updates
• Partner with IT, legal, and business teams to embed security into daily work
• Deliver security training and promote awareness

What You Bring

• 5 to 7 years of experience in GRC, cybersecurity, or compliance
• Experience with CMMC, NIST 800-171, or similar frameworks
• Strong understanding of risk management and security controls
• Experience building or managing security policies
• Ability to work across teams and influence stakeholders

Nice to Have

• Experience in construction or industrial environments
• Familiarity with controlled unclassified information
• Certifications such as CISSP, CISM, CRISC, or CISA
• Experience with vendor risk or data governance tools

What Success Looks Like

• Strong, adopted security policies
• Improved data governance practices
• Ongoing CMMC compliance
• Reduced risk across the organization

Kokosing is an equal employment opportunity/affirmative action federal and state contractor. The company does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected class.