Information Security & Compliance Analyst

• 3+ years of IT experience, including meaningful time in information security, GRC, or risk and compliance. \n

• Working knowledge of common security and privacy frameworks and regulations (e.g., PCI DSS, SOC 2, NIST, CIS, GDPR, CCPA). \n

• Experience supporting audits and working with compliance or GRC tools. \n

• A solid understanding of core security concepts and tools. \n

• Strong attention to detail and the ability to manage multiple priorities independently. \n

• Clear communication skills with both technical teams and business leaders. \n

• A bachelor’s degree in a technology-related field, or equivalent experience. Security certifications are a plus. \n

Our client, an established and growing Phoenix based company, is looking for a hands-on security and compliance professional to help strengthen and mature their information security program.

\n

\n

You’ll partner closely with security leadership and teams across the business to manage risk, support compliance efforts, and build a strong security culture. This role suits someone who takes initiative, enjoys owning work end to end, and is comfortable moving between technical details and big-picture conversations.

\n

\n

What You’ll Do

\n \n

• Help develop and maintain security policies, standards, and procedures. \n

• Conduct risk assessments and follow remediation items through to resolution. \n

• Support internal and external audits, including preparing documentation and evidence. \n

• Assist with security investigations and help document lessons learned. \n

• Handle data privacy inquiries and support the company’s broader privacy practices. \n

• Evaluate and monitor third-party vendors from a security and risk perspective. \n

• Lead security and compliance initiatives, keeping stakeholders informed along the way. \n

• Create and deliver security awareness content for employees. \n

• Report on compliance status and risk trends to leadership. \n

• Stay current on evolving regulations, threats, and industry best practices. \n

\n

\n