IT Security Analyst

IT Security AnalystThe State of Arizona (AZDES) is seeking an experienced IT Security Analyst (Governance, Risk & Compliance - GRC) to support the Division of Technology Services. The selected candidate will perform IT security risk assessments, compliance reviews, audit support, and security documentation while ensuring compliance with security frameworks including NIST 800-53 Rev. 5 and the Risk Management Framework (RMF). This role requires collaboration with business and technical teams to strengthen enterprise security, governance, and compliance initiatives.Required SkillsStrong experience with NIST 800-53 Rev. 5Experience implementing the Risk Management Framework (RMF)Experience with Windows and Unix environmentsExperience performing IT security risk assessments, compliance reviews, and security auditsKnowledge of information security governance, risk management, and internal controlsExperience preparing audit documentation, security reports, findings, and POA&MsKnowledge of security and privacy regulations (NIST, IRS Pub 1075, HIPAA/HITRUST, CJIS, MARS-E)Experience investigating security incidents and suspicious network activityStrong written, verbal, analytical, and communication skillsAbility to work collaboratively with technical teams, business units, and project managersPreferred SkillsProject Management experienceProfessional certifications such as CISSP, CCSP, GSTRT, GSNA, or CAPExperience developing security policies, standards, and proceduresExperience supporting enterprise GRC programsKnowledge of database administration, networking, and software development environmentsImportant NotesLocal Phoenix, AZ candidates only (within approximately a 1-hour driving distance)Hybrid work schedule (All work must be performed within Arizona)Contract-to-Hire (4 Months) – Candidates must be eligible for full-time conversionNo Visa SponsorshipW2 Only (No C2C)Candidates previously submitted to Req #10482 or Req #11481 will not be consideredResume must clearly mention the candidate's current locationCandidate must be available for in-person interviews within one week of the posting closingCandidate must be able to start within two weeks of receiving an offerHireRight Background Check, Drug Screening, and Global ID Verification are mandatoryPrimary Skills: NIST 800-53 Rev. 5, Risk Management Framework (RMF), Governance Risk & Compliance (GRC), Information Security, Risk Assessment, Security Audits, Compliance, Security Governance, Windows, Unix, Cybersecurity, Internal Controls, Security Policies, POA&M, Incident Response, NIST Compliance, CJIS, HIPAA/HITRUST, IRS Pub 1075, MARS-E, Project Management, CISSP, CCSP, GSNA, GSTRT, CAP Certification.