GRC Security Analyst (Contract-to-Hire) Phoenix

SOMERSET STAFFING; Phoenix (AZ); On-site; USD 83,000 - 124,000; Full time

Job summary

SOMERSET STAFFING seeks an experienced Information Security Analyst contractor for the Arizona DES project. You’ll support the Governance, Risk and Compliance team, develop data models, and draft specifications for information policies while coordinating with business units to understand reporting and product needs.

You will help socialize project artifacts, work with cross‑functional teams, and assist technical managers to ensure accurate and high‑quality information analysis and requirements

Qualifications

• Knowledge of security principles, policies, and procedures.
• Knowledge of Information Security Risk Management.
• Knowledge of laws, regulations, policies, principles, and ethics in cybersecurity and privacy (NIST 800-53 R5, IRS Pub1075, IPAA/HITRUST, CJIS, MARS-E).
• Expert knowledge of internal auditing, internal controls, and risk management practices.
• Knowledge of RMF requirements and Authorization/Approval of Information Systems.
• Knowledge of conducting audits or reviews of technical systems.
• Knowledge in multiple technology domains (Windows, Unix, databases, networking).

Responsibilities

• Perform risk assessments, audit reviews, and generate findings reports with recommendations and outcomes for DES reporting.
• Review, update, and manage security audit plans and risk documentation for accuracy and consistency.
• Evaluate data and prepare reports detailing findings, non‑compliance, and action plans; generate incident reports.
• Prepare audit documentation supporting results and ensure alignment with standards.
• Research IT security practices and ensure compliance with applicable laws and standards.

Skills

Security policies

Risk management

RMF/NIST 800-53

Auditing & controls

Windows/Unix/DB tech

Job description

SOMERSET STAFFING seeks an experienced Information Security Analyst contractor for the Arizona DES project. You’ll support the Governance, Risk and Compliance team, develop data models, and draft specifications for information policies while coordinating with business units to understand reporting and product needs.

You will help socialize project artifacts, work with cross‑functional teams, and assist technical managers to ensure accurate and high‑quality information analysis and requirements