Information Security Analyst

Staffing Science; Phoenix (AZ); On-site; USD 90,000 - 125,000; Full time

Job summary

Staffing Science is seeking a compliance-focused security analyst to join its information security team in the Phoenix metro. You will own a broad governance, risk, compliance, and privacy program, partnering with senior security leadership and handling hands-on workload with high ownership.

You will manage PCI DSS evidence, respond to privacy requests under GDPR/CCPA, and work across IT, infrastructure, and engineering to drive remediation.

Qualifications

• Experience supporting PCI DSS assessments or audits.
• Working knowledge of GDPR and CCPA privacy regimes.
• Ability to present training material to diverse audiences.

Responsibilities

• Manage PCI DSS evidence gathering and readiness for external assessments.
• Handle data subject/privacy requests end to end with accuracy and timeliness.
• Support security incident response from triage through lessons learned.
• Track findings from assessments and tests and drive remediation with owners.
• Run third-party security risk reviews and ongoing vendor monitoring.
• Maintain controls and audit evidence in a compliance automation platform.
• Develop and deliver security and privacy awareness training for employees.
• Lead GRC initiatives with timelines and stakeholder updates.

Skills

PCI DSS

Privacy requests

GRC

Training content

Vendor risk

Cross-team influence

Tools

Drata

Vanta

Secureframe

Job description

About the Opportunity

A growing company in the Phoenix metro is adding a compliance-focused security analyst to its information security team. This person will partner closely with senior security leadership and own a broad slice of the company's governance, risk, compliance, and privacy program. It's a hands-on, high-ownership seat for someone who likes running their own workload, catching problems early, and getting the details right the first time.

What You'll Do

• Manage the company's payment card compliance program, including evidence gathering and readiness for annual external assessments
• Handle data subject and consumer privacy requests end to end, ensuring responses are accurate, complete, and delivered on time
• Support security incident response, from initial triage through documentation, lessons learned, and follow-up actions
• Track findings from assessments and penetration tests, and drive remediation with owners across IT, infrastructure, and engineering
• Run third-party security risk reviews and ongoing vendor monitoring
• Maintain controls and audit evidence in a compliance automation platform
• Develop and deliver security and privacy awareness training for employees at every level
• Lead GRC initiatives independently, keeping timelines on track and stakeholders informed

What You Bring

• Hands-on experience supporting PCI DSS assessments, ideally in a service provider environment
• Working knowledge of GDPR and CCPA, with direct experience responding to privacy requests
• Experience with a compliance automation platform such as Drata, Vanta, or Secureframe
• Exposure to control frameworks such as CIS Controls, NIST, or SOC 2
• A track record of influencing technical teams to close remediation items without direct authority
• Experience creating and presenting training content (be ready to share a sample)
• Strong organization and the ability to juggle many small, deadline-driven tasks across projects

Nice to Have

• Familiarity with EDR tooling
• Exposure to international privacy regulations beyond GDPR and CCPA