GRC Analyst — Risk, Audit & Compliance

Jobtailor; Phoenix (AZ); On-site; USD 90,000 - 120,000; Full time

Job summary

Jobtailor is seeking a Security Risk Analyst in the Phoenix area to perform risk assessments, audit reviews, and manage security plans. You will generate findings reports, track remediation, and ensure compliance with NIST RMF controls.

The role requires hands-on experience with Windows/Unix, RMF and NIST 800-53 R5, and you must be local to Phoenix with no visa sponsorship. An in-person interview within one week of June 22 is expected.

Qualifications

• NIST 800-53 R5 — must have.
• RMF — must have.
• Windows/Unix experience.
• Local to Phoenix AZ metro (within 1 hour drive) — resume must show city and state.
• Eligible for FTE conversion — no visa sponsorship.
• Available for in-person interview within 1 week of June 22.

Responsibilities

• Perform risk assessments and audit reviews.
• Generate findings reports and track outcomes.
• Review and manage security audit plans, security plans, and risk documentation.
• Investigate suspicious network activity and generate incident reports.
• Prepare audit documentation and draft findings per agency writing standards.
• Research IT security standards, laws, and regulations to ensure compliance.

Skills

Windows/Unix experience

Education

Bachelor's degree

Tools

RMF (Risk Management Framework)

NIST 800-53 R5

Job description

Jobtailor is seeking a Security Risk Analyst in the Phoenix area to perform risk assessments, audit reviews, and manage security plans. You will generate findings reports, track remediation, and ensure compliance with NIST RMF controls.

The role requires hands-on experience with Windows/Unix, RMF and NIST 800-53 R5, and you must be local to Phoenix with no visa sponsorship. An in-person interview within one week of June 22 is expected.