Governance, Risk & Compliance (GRC) Analyst | Information Security | Phoenix AZ Hybrid | Arizona State Agency | Contract to Hire
About the position
An Arizona state agency is seeking a GRC (Governance, Risk & Compliance) Analyst to join their Information Security team. You will perform risk assessments, conduct audit reviews, develop POA&Ms, and work cross-functionally with business units to strengthen the agency's security posture.
Responsibilities
ā¢ Perform risk assessments and audit reviews; generate findings reports and track outcomes
ā¢ Review and manage security audit plans, security plans, and risk documentation
ā¢ Investigate suspicious network activity and generate incident reports
ā¢ Prepare audit documentation and draft findings per agency writing standards
ā¢ Research IT security standards, laws, and regulations to ensure compliance
Requirements
ā¢ NIST 800-53 R5
ā¢ Risk Management Framework (RMF)
ā¢ Windows/Unix experience
ā¢ Bachelor's degree
ā¢ Local to Phoenix AZ metro (within 1 hour drive) ā city and state must be on resume
ā¢ Eligible for FTE conversion ā no visa sponsorship
ā¢ Available for in-person interview within 1 week of June 22
Nice-to-haves
ā¢ CISSP, CCSP, GSTRT, GSNA, or CAP certification
ā¢ Project management experience
ā¢ Knowledge of IRS Pub1075, HIPAA/HITRUST, CJIS, MARS-E frameworks
An Arizona state agency is seeking a GRC (Governance, Risk & Compliance) Analyst to join their Information Security team. You will perform risk assessments, conduct audit reviews, develop POA&Ms, and work cross-functionally with business units to strengthen the agency's security posture.
Responsibilities
ā¢ Perform risk assessments and audit reviews; generate findings reports and track outcomes
ā¢ Review and manage security audit plans, security plans, and risk documentation
ā¢ Investigate suspicious network activity and generate incident reports
ā¢ Prepare audit documentation and draft findings per agency writing standards
ā¢ Research IT security standards, laws, and regulations to ensure compliance
Requirements
ā¢ NIST 800-53 R5
ā¢ Risk Management Framework (RMF)
ā¢ Windows/Unix experience
ā¢ Bachelor's degree
ā¢ Local to Phoenix AZ metro (within 1 hour drive) ā city and state must be on resume
ā¢ Eligible for FTE conversion ā no visa sponsorship
ā¢ Available for in-person interview within 1 week of June 22
Nice-to-haves
ā¢ CISSP, CCSP, GSTRT, GSNA, or CAP certification
ā¢ Project management experience
ā¢ Knowledge of IRS Pub1075, HIPAA/HITRUST, CJIS, MARS-E frameworks