Governance, Risk & Compliance Analyst – Contract-to-Hire

Jobtailor; Phoenix (AZ); On-site; USD 90,000 - 130,000; Full time

Job summary

Jobtailor is seeking a Security Compliance Analyst to perform risk assessments, manage security documentation, and produce compliance reports. The role collaborates with multiple business units to ensure adherence to standards and regulations, including NIST 800-53 R5 and RMF, while coordinating background checks and onboarding steps.

A strong candidate will have a Bachelor’s degree, near-Phoenix living, and the ability to start within two weeks, with preferred certifications and PM experience.

Qualifications

• Working knowledge of NIST 800-53 R5 (required on resume).
• RMF (Risk Management Framework) experience.
• Windows/Unix environment experience.
• Familiarity with IRS Pub 1075, HIPAA/HITRUST, CJIS, and MARS-E compliance frameworks.
• Bachelor's degree required.
• Living within approximately 1 hour of Phoenix; city must appear on the resume.
• Eligible to convert to a permanent full-time employee; must be a U.S. citizen or green card holder; no visa sponsorship.
• Time-limited work authorization does not qualify.
• Preferred: project management experience.
• Preferred: CISSP, CCSP, GSTRT, GSNA, or CAP certification.
• Available to work Monday-Friday days.
• Able to start within two weeks of offer.
• Able to complete HireRight background check and drug screening.

Responsibilities

• Perform risk assessments and audit reviews
• Generate findings reports, POA&Ms, and non-compliance documentation
• Review and manage security plans, audit plans, and risk documentation
• Investigate suspicious network activity and generate incident reports
• Research security standards, laws, and regulations to ensure compliance
• Work across business units on requirements, data flows, and enterprise information policies
• Participate in an in-person interview within a week of the close
• Complete HireRight background check and drug screening

Skills

Risk Assessment

Audit Review

Incident Reporting

Security Documentation

Compliance Research

Education

Bachelor's degree

Job description

• Perform risk assessments and audit reviews
• Generate findings reports, POA&Ms, and non-compliance documentation
• Review and manage security plans, audit plans, and risk documentation
• Investigate suspicious network activity and generate incident reports
• Research security standards, laws, and regulations to ensure compliance
• Work across business units on requirements, data flows, and enterprise information policies
• Participate in an in-person interview within a week of the close
• Complete HireRight background check and drug screening

Requirements

• Working knowledge of NIST 800-53 R5, must-have and required on the resume
• Risk Management Framework (RMF) experience
• Windows/Unix environment experience
• Familiarity with IRS Pub 1075, HIPAA/HITRUST, CJIS, and MARS-E compliance frameworks
• Bachelor's degree required
• Living within approximately 1 hour of Phoenix
• City must appear on the resume
• Eligible to convert to a permanent full-time employee
• Must be a U.S. citizen or green card holder for conversion; the state cannot sponsor visas
• Time-limited work authorization does not qualify
• Preferred: project management experience
• Preferred: CISSP, CCSP, GSTRT, GSNA, or CAP certification
• Available to work Monday-Friday days
• Able to start within two weeks of offer
• Able to complete HireRight background check and drug screening

Core Competencies

Demonstrates expertise in risk assessments, compliance frameworks, and security standards, with a strong focus on NIST 800-53 R5 and Risk Management Framework (RMF) experience. Proficient in generating findings reports and managing security documentation while ensuring adherence to relevant regulations.

Highest-signal resume keywords

• NIST 800-53 R5
• Risk Management Framework (RMF)
• Windows/Unix Environment Experience
• CISSP Certification
• IRS Pub 1075 Compliance

ATS Optimization Keywords

Hard Skills

• Risk Assessment
• Audit Review
• Incident Reporting
• Security Documentation
• Compliance Research

Certifications & Qualifications

• CISSP
• CCSP
• GSTRT
• GSNA
• CAP

Industry Keywords

• HIPAA
• HITRUST
• CJIS
• MARS-E
• Security Standards