GRC Analyst

LRS Consulting Services is seeking a GRC Analyst for a contract opportunity in Phoenix, AZ. This role offers the chance to apply your skills in support of meaningful work for one of our client partners.

Our client, a large national construction organization, is seeking an early-career Governance, Risk, and Compliance (GRC) Analyst to help build and support its cybersecurity governance program. This role is ideal for a detail-oriented IT or cybersecurity professional looking to grow their experience in risk management, compliance, audit support, vulnerability remediation, and security governance.

Responsibilities

• Maintain security policies, standards, procedures, and control documentation.
• Coordinate policy and control reviews with technical and business stakeholders.
• Support annual IT General Controls (ITGC) audits, including evidence collection, audit tracking, and status reporting.
• Coordinate vulnerability assessment and penetration testing findings through remediation and closure.
• Maintain risk registers, control inventories, and compliance documentation.
• Assist with control testing and access review processes.
• Support vendor security assessments and customer security questionnaires.
• Review security-related contract language and assist with third-party risk management activities.
• Partner with Security, IT, business teams, auditors, and external service providers to improve control effectiveness and audit readiness.

Qualifications

• 1-3 years of experience in information security, IT audit, GRC, compliance, vulnerability management, or cybersecurity operations.
• Understanding of core security concepts including identity and access management, endpoint and network security, patch management, change management, and incident response.
• Ability to review and interpret technical evidence such as vulnerability reports, access reviews, tickets, and change records.
• Experience supporting ITGC, NIST, CMMC, CIS Controls, or similar security and compliance frameworks.
• Strong organizational, analytical, and documentation skills with excellent attention to detail.
• Ability to effectively coordinate with technical teams, business stakeholders, auditors, and vendors.

Preferred Qualifications

• Security, CISA, CRISC, or similar certifications.
• Experience with audit support, risk management, vulnerability remediation tracking, or third-party risk assessments.
• Familiarity with GRC, compliance, or vulnerability management platforms.

The base range for this contract position is $45.00 - $65.00 per hour, depending on experience. The range displayed reflects the minimum and maximum target for new hires across all U.S. locations. Individual compensation is determined by work location and additional factors including job-related skills, experience, and relevant education or training.

LRS is an equal opportunity employer. Applicants for employment will receive consideration without unlawful discrimination based on race, color, religion, creed, national origin, sex, age, disability, marital status, gender identity, domestic partner status, sexual orientation, genetic information, citizenship, status or protected veteran status.

In some cases, LRS Consulting uses generative artificial intelligence (“AI”) in support of our hiring processes. LRS takes steps to ensure the use of AI does not result in discrimination based on protected class(es). AI may be used in the hiring process solely in support of the assessment of candidate qualifications. All decisions in the hiring process are made by LRS employees. If AI will be used in the hiring process for the position for which you are applying, you will be notified and will have the opportunity to opt out. If you have any questions, please contact us by clicking here.