Security Analyst

IT Security Analyst (GRC)This is a CTH role on W2 only and for current Arizona residents. This position is not for visa holders. This posting will be closed on 8/18/26 @ 3:00pm. This is a 4-month contract to hire. All candidates must be eligible to convert to an FTE. The State is unable to sponsor any visas. This has to be local to Phoenix meaning 1 hour drive max. Please do not submit resources if they were submitted to posting 10482 and 11481. Only W2 no C2C.Required Skills:NIST 800-53R5 (Must have)Risk Management Framework (RMF)Windows/Unix experiencePreferred Skills:Project Management experienceCISSP, CCSP, GSTRT, GSNA, or CAP certificationJob Summary:The Department of Economic Security, Division of Technology Services is seeking an experienced and highly motivated individual to join our team as a Information Security Analyst, (ISA) contractor. This position will work on the Governance Risk and Compliance (GRC) Team to communicate and engage with business units to develop a strong understanding of their reporting, data, and product needs. The team member will work with other personnel across departments to define requirements for projects, identify data dependencies and relationships to develop logical and physical data models, data flows and system activity diagrams, and write specifications for managing enterprise information policies. The team member will help develop plans and materials to support user adoption, training, and customer service, working through direct and regular contact with users from other divisions, programs, and service units to provide regular insight and guidance in prioritizing enhancements for the data systems. The team member will also support technical project managers to ensure that all aspects of the information analysis and requirements gathering process are completed with the highest degree of accuracy and quality, which includes developing and socializing key project artifacts. The state of Arizona strives for a work culture that affords employees flexibility, autonomy, and trust. Across our many agencies, boards, commissions, many State employees participate in the State's Remote Work Program and are able to work remotely in their homes, in offices, and in hoteling spaces. All work, including remote work, should be performed within Arizona unless an exception is properly authorized in advance.Job Duties:• Perform risk assessments, audit reviews, generate findings reports, and make appropriate recommendations for improvement and track outcomes from those activities for DES reporting requirements. Develop and formulate comprehensive reports detailing the findings, areas of non-compliance, required POA&Ms (Plan of Action and Milestones), environmental observations, and incident reports.• Review, update, and manage security related audit plans, security plans and risk plan documentation for accuracy and consistency, proactively solves problems.• Evaluate data and formulate comprehensive reports detailing the findings, areas of non-compliance, required action plans, and environmental observations. Generates incident reports and investigates suspicious network activity.• Preparing audit documentation that supports audit results, drafting and editing audit findings to adhere to the standards and the agency's writing style.• Research agency and industry IT security practices standards, best practices, laws and regulations, and other applicable resources, ensures compliance with standardsCompensation: $46.00 per hour