Information Security Analyst
Submit your CV and any additional required information after you have read this description by clicking on the application button.
Onsite, Greater Phoenix Area (5 days per week) | Full-Time, Direct Hire
About the Opportunity
A growing company in the Phoenix metro is adding a compliance-focused security analyst to its information security team. This person will partner closely with senior security leadership and own a broad slice of the company’s governance, risk, compliance, and privacy program. It’s a hands-on, high-ownership seat for someone who likes running their own workload, catching problems early, and getting the details right the first time.
What You’ll Do
- Manage the company’s payment card compliance program, including evidence gathering and readiness for annual external assessments
- Handle data subject and consumer privacy requests end to end, ensuring responses are accurate, complete, and delivered on time
- Support security incident response, from initial triage through documentation, lessons learned, and follow-up actions
- Track findings from assessments and penetration tests, and drive remediation with owners across IT, infrastructure, and engineering
- Run third-party security risk reviews and ongoing vendor monitoring
- Maintain controls and audit evidence in a compliance automation platform
- Develop and deliver security and privacy awareness training for employees at every level
- Lead GRC initiatives independently, keeping timelines on track and stakeholders informed
What You Bring
- Hands-on experience supporting PCI DSS assessments, ideally in a service provider environment
- Working knowledge of GDPR and CCPA, with direct experience responding to privacy requests
- Experience with a compliance automation xzgxqkn platform such as Drata, Vanta, or Secureframe
- Exposure to control frameworks such as CIS Controls, NIST, or SOC 2
- A track record of influencing technical teams to close remediation items without direct authority
- Experience creating and presenting training content (be ready to share a sample)
- Strong organization and the ability to juggle many small, deadline-driven tasks across projects
Nice to Have
- Familiarity with EDR tooling
- Exposure to international privacy regulations beyond GDPR and CCPA
Information Security Analyst in phoenix at Unknown Company
This position is listed as full time and onsite.