IT Security Analyst

S R International • Phoenix, AZ

22h • Hybrid

About The Position

The State of Arizona (AZDES) is seeking an experienced IT Security Analyst (Governance, Risk & Compliance - GRC) to support the Division of Technology Services. The selected candidate will perform IT security risk assessments, compliance reviews, audit support, and security documentation while ensuring compliance with security frameworks including NIST 800-53 Rev. 5 and the Risk Management Framework (RMF). This role requires collaboration with business and technical teams to strengthen enterprise security, governance, and compliance initiatives.

Requirements

• Strong experience with NIST 800-53 Rev. 5
• Experience implementing the Risk Management Framework (RMF)
• Experience with Windows and Unix environments
• Experience performing IT security risk assessments, compliance reviews, and security audits
• Knowledge of information security governance, risk management, and internal controls
• Experience preparing audit documentation, security reports, findings, and POA&Ms
• Knowledge of security and privacy regulations (NIST, IRS Pub 1075, HIPAA/HITRUST, CJIS, MARS-E)
• Strong written, verbal, analytical, and communication skills
• Ability to work collaboratively with technical teams, business units, and project managers

Nice To Haves

• Project Management experience
• Professional certifications such as CISSP, CCSP, GSTRT, GSNA, or CAP
• Experience developing security policies, standards, and procedures
• Experience supporting enterprise GRC programs
• Knowledge of database administration, networking, and software development environments

Responsibilities

• Perform IT security risk assessments
• Conduct compliance reviews
• Provide audit support
• Prepare security documentation
• Ensure compliance with security frameworks including NIST 800-53 Rev. 5 and the Risk Management Framework (RMF)
• Collaborate with business and technical teams to strengthen enterprise security, governance, and compliance initiatives
• Investigate security incidents and suspicious network activity

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed