Senior GRC Analyst

Kokosing Materials, Inc.

Apply to this job
Westerville, OH Until 8/24/2026 5+ years exp First posted June 12, 2026 Last posted June 25, 2026
Job description

Kokosing (www.kokosing.biz) is one of America's 50 largest General Contractors and services a broad spectrum of clients in both the private and public business sectors. Kokosing's services include heavy civil/industrial construction such as highways, bridges, underground utilities, water/wastewater facilities, and marine construction. For over 75 years, Kokosing has successfully attracted the most qualified technical personnel in the construction industry by offering visible challenges, superior quality, and attractive rewards. With over $2.8 billion in annual sales and a commitment to its workforce, Kokosing is the winning team.

Job Description:

We are looking for a Security Governance, Risk, and Compliance (GRC) Analyst to support and mature our security and compliance programs across a large construction organization. This role focuses on maintaining security policies, strengthening vendor risk management, supporting CMMC Level 2 compliance, and helping build a data governance program.

What You’ll Do

  • Lead security governance and risk management efforts
  • Maintain and improve vendor risk management
  • Support CMMC compliance and audits
  • Help design and implement a data governance program
  • Manage security policies, standards, and updates
  • Partner with IT, legal, and business teams to embed security into daily work
  • Deliver security training and promote awareness

What You Bring

  • 5 to 7 years of experience in GRC, cybersecurity, or compliance
  • Experience with CMMC, NIST 800-171, or similar frameworks
  • Strong understanding of risk management and security controls
  • Experience building or managing security policies
  • Ability to work across teams and influence stakeholders

Nice to Have

  • Experience in construction or industrial environments
  • Familiarity with controlled unclassified information
  • Certifications such as CISSP, CISM, CRISC, or CISA
  • Experience with vendor risk or data governance tools

What Success Looks Like

  • Strong, adopted security policies
  • Improved data governance practices
  • Ongoing CMMC compliance
  • Reduced risk across the organization

Kokosing is an equal employment opportunity/affirmative action federal and state contractor. The company does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected class.

About this role

Summary

Support security and compliance programs, develop policies, and manage risk across construction organization.

Job title

Senior GRC Analyst

Experience level

5+ years

Minimum experience

5+ years exp

Industry

construction

Location requirements

Westerville, OH; remote work not specified

Salary

Not specified

Management role

No

Skills & keywords

Required skills

GRCcybersecuritycomplianceCMMCNIST 800-171risk managementsecurity policies

Preferred skills

constructionvendor riskdata governanceCISSPCISMCRISCCISA

Specializations

governancerisk managementcompliancesecurity policiesvendor risk
Locations

Structured locations inferred from the posting.

Westerville, OH, USA

On-site City