Job Description
Information Security Analyst
\n
Onsite, Greater Phoenix Area (5 days per week) | Full-Time, Direct Hire
\n
About the Opportunity
\n
A growing company in the Phoenix metro is adding a compliance-focused security analyst to its information security team. This person will partner closely with senior security leadership and own a broad slice of the company’s governance, risk, compliance, and privacy program. It’s a hands-on, high-ownership seat for someone who likes running their own workload, catching problems early, and getting the details right the first time.
\n
What You’ll Do
\n
- \n
- Manage the company’s payment card compliance program, including evidence gathering and readiness for annual external assessments
- Handle data subject and consumer privacy requests end to end, ensuring responses are accurate, complete, and delivered on time
- Support security incident response, from initial triage through documentation, lessons learned, and follow-up actions
- Track findings from assessments and penetration tests, and drive remediation with owners across IT, infrastructure, and engineering
- Run third-party security risk reviews and ongoing vendor monitoring
- Maintain controls and audit evidence in a compliance automation platform
- Develop and deliver security and privacy awareness training for employees at every level
- Lead GRC initiatives independently, keeping timelines on track and stakeholders informed
\n
\n
\n
\n
\n
\n
\n
\n
\n
What You Bring
\n
- \n
- Hands-on experience supporting PCI DSS assessments, ideally in a service provider environment
- Working knowledge of GDPR and CCPA, with direct experience responding to privacy requests
- Experience with a compliance automation platform such as Drata, Vanta, or Secureframe
- Exposure to control frameworks such as CIS Controls, NIST, or SOC 2
- A track record of influencing technical teams to close remediation items without direct authority
- Experience creating and presenting training content (be ready to share a sample)
- Strong organization and the ability to juggle many small, deadline-driven tasks across projects
\n
\n
\n
\n
\n
\n
\n
\n
Nice to Have
\n
- \n
- Familiarity with EDR tooling
- Exposure to international privacy regulations beyond GDPR and CCPA
\n
\n
\n