Analysis Skills, Auditing, CAP - Certification Authorization Professional, CCSP - Cisco Certified Security Professional, CISSP - Certified Information Systems Security Professional, Computer Security, Consulting, Cross-Functional, Documentation, Documentation Plan, GSNA - GIAC System & Network Auditor, HIPAA (Health Insurance Portability and Accountability Act), Information/Data Security (InfoSec), Maintain Compliance, Microsoft Windows Operating System, Project/Program Management, Regulatory Compliance, Reporting Skills, Risk, Risk Analysis, Risk Management Framework (RMF), Security Auditing, Security Monitoring, Time Management, U.S. National Institute of Standards and Technology (NIST), Unix Operating Systems
Governance, Risk & Compliance (GRC) Analyst | Information Security | Phoenix AZ Hybrid | Arizona State Agency | Contract to Hire
Location: Phoenix AZ — Hybrid | Must be within 1 hour drive of Phoenix
Pay Rate: $46.51/hr W2
Duration: 4 months — contract to hire
Deadline: June 22, 2026 at 3pm
About the Role:
SunSoftOnline is seeking a GRC (Governance, Risk & Compliance) Analyst to join their Information Security team. You will perform risk assessments, conduct audit reviews, develop POA&Ms, and work cross-functionally with business units to strengthen the agency's security posture.
Responsibilities:
- Perform risk assessments and audit reviews; generate findings reports and track outcomes
- Review and manage security audit plans, security plans, and risk documentation
- Investigate suspicious network activity and generate incident reports
- Prepare audit documentation and draft findings per agency writing standards
- Research IT security standards, laws, and regulations to ensure compliance
Requirements
Required:
- NIST 800-53 R5 — must have
- Risk Management Framework (RMF) — must have
- Windows/Unix experience
- Bachelor's degree
- Local to Phoenix AZ metro (within 1 hour drive) — city and state must be on resume
- Eligible for FTE conversion — no visa sponsorship
- Available for in-person interview within 1 week of June 22
Preferred:
- CISSP, CCSP, GSTRT, GSNA, or CAP certification
- Project management experience
- Knowledge of IRS Pub1075, HIPAA/HITRUST, CJIS, MARS-E frameworks