Governance, Risk & Compliance (GRC) Analyst | Information Security | Phoenix AZ Hybrid | Arizona Sta

Job Description

Job Description

Governance, Risk & Compliance (GRC) Analyst | Information Security | Phoenix AZ Hybrid | Arizona State Agency | Contract to Hire

Location: Phoenix AZ — Hybrid | Must be within 1 hour drive of Phoenix

Pay Rate: $46.51/hr W2

Duration: 4 months — contract to hire

Deadline: June 22, 2026 at 3pm

About the Role:

An Arizona state agency is seeking a GRC (Governance, Risk & Compliance) Analyst to join their Information Security team. You will perform risk assessments, conduct audit reviews, develop POA&Ms, and work cross-functionally with business units to strengthen the agency's security posture.

Responsibilities:

• Perform risk assessments and audit reviews; generate findings reports and track outcomes
  
• Review and manage security audit plans, security plans, and risk documentation
  
• Investigate suspicious network activity and generate incident reports
  
• Prepare audit documentation and draft findings per agency writing standards
  
• Research IT security standards, laws, and regulations to ensure compliance
  

Required :

• NIST 800-53 R5 — must have
  
• Risk Management Framework (RMF) — must have
  
• Windows/Unix experience
  
• Bachelor's degree
  
• Local to Phoenix AZ metro (within 1 hour drive) — city and state must be on resume
  
• Eligible for FTE conversion — no visa sponsorship
  
• Available for in-person interview within 1 week of June 22
  

Preferred :

• CISSP, CCSP, GSTRT, GSNA, or CAP certification
  
• Project management experience
  
• Knowledge of IRS Pub1075, HIPAA/HITRUST, CJIS, MARS-E frameworks