GRC Security Analyst: PCI, Privacy & Compliance

Staffing Science; Phoenix (AZ); On-site; USD 90,000 - 125,000; Full time

Job summary

Staffing Science is seeking a compliance-focused security analyst to join its information security team in the Phoenix metro. You will own a broad governance, risk, compliance, and privacy program, partnering with senior security leadership and handling hands-on workload with high ownership.

You will manage PCI DSS evidence, respond to privacy requests under GDPR/CCPA, and work across IT, infrastructure, and engineering to drive remediation.

Qualifications

• Experience supporting PCI DSS assessments or audits.
• Working knowledge of GDPR and CCPA privacy regimes.
• Ability to present training material to diverse audiences.

Responsibilities

• Manage PCI DSS evidence gathering and readiness for external assessments.
• Handle data subject/privacy requests end to end with accuracy and timeliness.
• Support security incident response from triage through lessons learned.
• Track findings from assessments and tests and drive remediation with owners.
• Run third-party security risk reviews and ongoing vendor monitoring.
• Maintain controls and audit evidence in a compliance automation platform.
• Develop and deliver security and privacy awareness training for employees.
• Lead GRC initiatives with timelines and stakeholder updates.

Skills

PCI DSS

Privacy requests

GRC

Training content

Vendor risk

Cross-team influence

Tools

Drata

Vanta

Secureframe

Job description

Staffing Science is seeking a compliance-focused security analyst to join its information security team in the Phoenix metro. You will own a broad governance, risk, compliance, and privacy program, partnering with senior security leadership and handling hands-on workload with high ownership.

You will manage PCI DSS evidence, respond to privacy requests under GDPR/CCPA, and work across IT, infrastructure, and engineering to drive remediation.