> Markdown version of [/jobs/ext/4024826-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/4024826-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** STAFFING SCIENCE LLC
- **Location:** Phoenix, AZ, United States
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Cyber Security, PCI Data Security Standards, CIS Benchmarks
- **Published:** October 30, 2026
- **Apply:** https://www.careerboard.com/us/en/find-jobs-in-United-States/-D9E24BEE02BDE9A846/

## About the Role

* Hands-on experience supporting PCI DSS assessments, ideally in a service provider environment
 * Working knowledge of GDPR and CCPA, with direct experience responding to privacy requests
 * Experience with a compliance automation platform such as Drata, Vanta, or Secureframe
 * Exposure to control frameworks such as CIS Controls, NIST, or SOC 2
 * A track record of influencing technical teams to close remediation items without direct authority
 * Experience creating and presenting training content (be ready to share a sample)
 * Strong organization and the ability to juggle many small, deadline-driven tasks across projects

Nice to Have

 * Familiarity with EDR tooling
 * Exposure to international privacy regulations beyond GDPR and CCPA

## Description

A growing company in the Phoenix metro is adding a compliance-focused security analyst to its information security team. This person will partner closely with senior security leadership and own a broad slice of the company's governance, risk, compliance, and privacy program. It's a hands-on, high-ownership seat for someone who likes running their own workload, catching problems early, and getting the details right the first time.

What You'll Do

 * Manage the company's payment card compliance program, including evidence gathering and readiness for annual external assessments
 * Handle data subject and consumer privacy requests end to end, ensuring responses are accurate, complete, and delivered on time
 * Support security incident response, from initial triage through documentation, lessons learned, and follow-up actions
 * Track findings from assessments and penetration tests, and drive remediation with owners across IT, infrastructure, and engineering
 * Run third-party security risk reviews and ongoing vendor monitoring
 * Maintain controls and audit evidence in a compliance automation platform
 * Develop and deliver security and privacy awareness training for employees at every level
 * Lead GRC initiatives independently, keeping timelines on track and stakeholders informed