GRC IT Security Analyst - RMF/NIST | Remote

S R INTERNATIONAL INC

Phoenix (AZ)

On-site

USD 90,000 - 120,000

Full time

6 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Flexible work from home options

Job summary

S R INTERNATIONAL INC is seeking an IT Security Analyst (GRC) contractor for the State of Arizona DES - DTS. This role involves governance, risk and compliance activities, communicating with business units, defining requirements, developing data models and data flows, and producing project artifacts.

The team supports user adoption, training, and customer service with regular collaboration across divisions.

Qualifications

Knowledge of security principles, policies, and procedures.
Knowledge of Information Security Risk Management.
Knowledge of laws, regulations, policies, principles, and ethics related to cybersecurity and privacy (NIST 800-53 R5, IRS Pub1075, IPAA/HITRUST, CJIS, MARS-E).
Expert knowledge of internal auditing, internal controls, and risk management practices.
Knowledge of RMF requirements and Authorization/Approval of Information Systems.

Responsibilities

Perform risk assessments, audit reviews, generate findings reports, and track outcomes for DES reporting requirements.
Review, update, and manage security audit plans, security plans and risk documentation for accuracy and consistency.
Evaluate data and formulate reports detailing findings, non-compliance, action plans, and environmental observations; generate incident reports.
Draft audit findings to meet standards and agency writing style.
Research agency and industry IT security practices, standards, and regulations to ensure compliance.