GRC) Analyst

• All legitimate correspondence from our recruiting team will only come from an email address ending in @lrs.com. We do not use generic domains like @gmail.com, @yahoo.com, or @outlook.com.
• We never conduct interviews solely via text-based chat on Microsoft Teams, Telegram, or WhatsApp. All virtual interviews involve a scheduled video or phone call with a member of our team.
• LRS will never ask a candidate for payment, fees, or to purchase equipment (e.g., laptops, software) as a condition of employment.
• All genuine job opportunities are listed directly on our official careers portal at Careers., LRS Consulting Services is seeking a GRC Analyst for a contract opportunity in Phoenix, AZ. This role offers the chance to apply your skills in support of meaningful work for one of our client partners.

Our client, a large national construction organization, is seeking an early-career Governance, Risk, and Compliance (GRC) Analyst to help build and support its cybersecurity governance program. This role is ideal for a detail-oriented IT or cybersecurity professional looking to grow their experience in risk management, compliance, audit support, vulnerability remediation, and security governance., * Maintain security policies, standards, procedures, and control documentation.

• Coordinate policy and control reviews with technical and business stakeholders.
• Support annual IT General Controls (ITGC) audits, including evidence collection, audit tracking, and status reporting.
• Coordinate vulnerability assessment and penetration testing findings through remediation and closure.
• Maintain risk registers, control inventories, and compliance documentation.
• Assist with control testing and access review processes.
• Support vendor security assessments and customer security questionnaires.
• Review security-related contract language and assist with third-party risk management activities.
• Partner with Security, IT, business teams, auditors, and external service providers to improve control effectiveness and audit readiness.

• 1-3+ years of experience in information security, IT audit, GRC, compliance, vulnerability management, or cybersecurity operations.
• Understanding of core security concepts including identity and access management, endpoint and network security, patch management, change management, and incident response.
• Ability to review and interpret technical evidence such as vulnerability reports, access reviews, tickets, and change records.
• Experience supporting ITGC, NIST, CMMC, CIS Controls, or similar security and compliance frameworks.
• Strong organizational, analytical, and documentation skills with excellent attention to detail.
• Ability to effectively coordinate with technical teams, business stakeholders, auditors, and vendors., * Security+, CISA, CRISC, or similar certifications.
• Experience with audit support, risk management, vulnerability remediation tracking, or third-party risk assessments.
• Familiarity with GRC, compliance, or vulnerability management platforms.

The base range for this contract position is $45.00 - $65.00 per hour, depending on experience. The range displayed reflects the minimum and maximum target for new hires across all U.S. locations. Individual compensation is determined by work location and additional factors including job-related skills, experience, and relevant education or training.