Information Security Analyst

Information Security Analyst

Onsite, Greater Phoenix Area (5 days per week) | Full-Time, Direct Hire

About the Opportunity

A growing company in the Phoenix metro is adding a compliance-focused security analyst to its information security team. This person will partner closely with senior security leadership and own a broad slice of the company’s governance, risk, compliance, and privacy program. It’s a hands-on, high-ownership seat for someone who likes running their own workload, catching problems early, and getting the details right the first time.

What You’ll Do

• Manage the company’s payment card compliance program, including evidence gathering and readiness for annual external assessments
• Handle data subject and consumer privacy requests end to end, ensuring responses are accurate, complete, and delivered on time
• Support security incident response, from initial triage through documentation, lessons learned, and follow-up actions
• Track findings from assessments and penetration tests, and drive remediation with owners across IT, infrastructure, and engineering
• Run third-party security risk reviews and ongoing vendor monitoring
• Maintain controls and audit evidence in a compliance automation platform
• Develop and deliver security and privacy awareness training for employees at every level
• Lead GRC initiatives independently, keeping timelines on track and stakeholders informed

What You Bring

• Hands-on experience supporting PCI DSS assessments, ideally in a service provider environment
• Working knowledge of GDPR and CCPA, with direct experience responding to privacy requests
• Experience with a compliance automation platform such as Drata, Vanta, or Secureframe
• Exposure to control frameworks such as CIS Controls, NIST, or SOC 2
• A track record of influencing technical teams to close remediation items without direct authority
• Experience creating and presenting training content (be ready to share a sample)
• Strong organization and the ability to juggle many small, deadline-driven tasks across projects

Nice to Have

• Familiarity with EDR tooling
• Exposure to international privacy regulations beyond GDPR and CCPA